Privacy policy

Introduction

This Privacy Policy describes how Clikk Inc. ("THRIVV," "we," "us," or "our") collects, uses, and shares information when you use THRIVV, available at thrivv.proand our mobile applications (the "Service").

THRIVV is a sleep accountability app. You form a tribe of three friends, connect your wearable or log manually, and hit nightly sleep goals together. We take your privacy seriously and are committed to handling your data transparently.

By using THRIVV, you agree to the practices described in this policy. If you don't agree, please don't use the Service.

Information we collect

Account information

When you create an account, we collect:

• Email address
• Display name (if provided)
• Authentication credentials, or basic profile info if you sign in via a third-party provider like Google or Apple
• Optional profile details you choose to share, such as a profile photo or target bedtime

Sleep data

THRIVV's core function is sleep tracking and accountability. We collect and process:

• Sleep duration, sleep stages, and recovery scores pulled from your connected wearable
• Manual sleep logs you submit (hours slept and optional recovery percentage)
• Your nightly target, hit/miss status, and streak history
• Computed scores derived from your sleep (such as your reward points and tribe contributions)

Tribe data

Because THRIVV works around groups of three, we also collect:

• Your tribe membership and tribe invite codes
• Tribe streaks, tribe leaderboard position, and shared nightly status
• Invitations you send or receive

See Sharing inside your tribefor what your tribe members can and can't see about you.

Wearable connection data

If you connect a wearable, we store the OAuth tokens needed to read your data on your behalf. By connecting a wearable, you authorize THRIVV to access the data your provider makes available to us through their API, which may include:

• Oura — sleep, readiness, activity, heart rate, temperature, and other biometric data available through the Oura API
• WHOOP — sleep, recovery, strain, heart rate, and physiological data available through the WHOOP API

At launch, we use only sleep duration and recovery scores to power your THRIVV experience. The broader authorization above reflects our ability to use additional data in future releases as new features are added. We will keep this Privacy Policy up to date as our use of that data evolves, and you can disconnect a wearable at any time, which revokes our access and deletes the stored tokens.

Usage and device information

Automatically collected when you use the Service:

• Device type, operating system, app version
• IP address and approximate location (city/region level)
• Screens visited, features used, time spent
• Crash reports and performance diagnostics

Payment information

THRIVV is free to download. If we introduce paid features in the future, payment will be processed by Stripe and we will not store full payment card details. We may receive limited billing information (e.g., last 4 digits, billing country, subscription status) to manage your account.

Communications

If you contact us for support, we keep a record of the correspondence.

How we use your information

We use your information to:

• Provide the Service — track your sleep, calculate your score, run tribe leaderboards, surface streaks
• Personalize your experience — tailor bedtime reminders, set tribe targets, recommend improvements
• Improve the Service — analyze aggregate patterns, debug issues, develop new features
• Communicate with you — send account notifications, support replies, and (with your consent) product updates
• Maintain safety and security — prevent abuse, fraudulent sleep submissions, and policy violations
• Comply with legal obligations

Wearables & third-party providers

THRIVV relies on third-party services to operate. When you use the Service, relevant data is shared with:

Wearable providers

• Oura — we read sleep, readiness, and related biometric data from your Oura account via Oura's API. See Oura's privacy policy
• WHOOP — we read sleep, recovery, strain, and related physiological data from your WHOOP account via WHOOP's API. See WHOOP's privacy policy
• Apple Watch — planned for a future release; not active today

You authorize these connections through each provider's standard OAuth flow. You can revoke access at any time, either from inside THRIVV or directly in your wearable provider's account settings.

Infrastructure and tools

• EAZO AI — THRIVV first launches and is accessed through EAZO AI. If you use THRIVV via EAZO AI, EAZO AI's own privacy practices also apply to your use of that platform
• Supabase — database, authentication, and storage
• Vercel — application hosting and edge delivery
• [Analytics provider] — product analytics
• [Email provider] — transactional emails
• Stripe — billing (if and when paid features launch)

Each provider processes your data under its own privacy policy and our data processing agreements with them.

How we share information

We share information only:

• With your tribe members, per the rules in the next section
• With the service providers above, under contractual confidentiality and data protection obligations
• For legal compliance — to comply with applicable law, legal process, or valid government requests
• To protect rights and safety — to enforce our Terms, prevent fraud, or protect users
• In a business transfer — if THRIVV is acquired, merged, or restructured, your information may transfer to the successor entity (you'll be notified)
• With your consent — for anything else

We never sell your data to advertisers or data brokers.

Sharing inside your tribe

THRIVV is a team sport. To make the social mechanic work, we share some — but not all — of your sleep information with the two other people in your tribe.

What your tribe sees

• Your display name and profile photo
• Whether you hit your nightly target (a green or amber indicator)
• Your current solo streak and your contribution to the tribe streak
• Your total tribe score for the week

What your tribe does not see

• Your raw sleep duration in hours and minutes
• Your recovery score or sleep stages
• Your historical sleep data from before you joined the tribe
• Which wearable you use (or whether you log manually)
• Anything you've configured in your private settings

If you leave a tribe, your prior shared statuses are no longer visible to former tribe members, and your sleep data stops being shared with them from the moment you leave.

Data retention

We retain your information for as long as your account is active, plus a reasonable period to meet legal obligations or resolve disputes.

You can request deletion at any time — see Your rights.

Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate or incomplete information
• Deletion — request deletion of your account and data
• Portability — receive your data in a machine-readable format
• Objection / restriction — object to or restrict certain processing
• Withdraw consent — where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise these rights, email privacy@thrivv.pro. We'll respond within 30 days.

For California residents (CCPA/CPRA)

You have rights to know, delete, correct, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined under California law. You will not be discriminated against for exercising these rights.

For EEA/UK residents (GDPR)

Our legal bases for processing are:

• Contract performance — to provide the Service you signed up for
• Legitimate interests — to improve and secure the Service
• Consent — where required (e.g., marketing emails, wearable connections)
• Legal obligation — where required by law

International data transfers

THRIVV is operated by Clikk Inc. in the United States. Your data is primarily processed in the United States and other jurisdictions where our service providers operate. Where we transfer data from the EEA or UK to the United States or other countries, we rely on appropriate safeguards such as Standard Contractual Clauses.

Children's privacy

THRIVV is not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we'll delete it promptly.

Security

We use industry-standard measures to protect your information, including:

• Encryption in transit (TLS) and at rest
• Access controls and least-privilege permissions
• Regular security reviews and dependency updates
• Authentication via Supabase Auth

No system is perfectly secure. We can't guarantee absolute security, but we work hard to protect your information. If we become aware of a breach affecting your data, we'll notify you and the relevant authorities as required by law.

Cookies & similar technologies

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how the Service is used (analytics)

You can control cookies through your browser or device settings. If you are visiting from the EEA or UK, you will be presented with a cookie consent banner where you can manage your preferences.

Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version with a new effective date at the top. For material changes, we'll notify you via email or in the app before the changes take effect.