Privacy Policy

Account information. When you sign up, we collect your name, email address, and authentication details. If you subscribe, our payment processor collects your payment details; we receive limited billing information (such as the last four digits and status) but not full card numbers.

Content you add. We store what you put into the Service: tasks and chores, meals and shopping lists, calendar events, notes and journal entries, lists, documents you upload, and any household, pet, medical, or emergency records you choose to keep. You decide what to enter and who in your Hive can see it.

Usage and device information. We collect basic information about how the Service is used — device and browser type, app version, IP address, pages or screens viewed, and diagnostic logs — to keep the Service working, secure, and improving. Product analytics run only if you allow them (see Cookies and analytics).

Information from others. If someone invites you to a Hive, we receive the email address they used to invite you. If you join the waitlist or contact us, we collect the details you submit.

We use information to:

• provide the Service — run your Hive, sync data between members, and deliver the features you use; • secure the Service — authenticate you, prevent fraud and abuse, and keep an audit trail for sensitive access (see Sensitive information); • communicate with you — send account, security, transactional, and service messages, respond to inquiries, and send reminders you've set up; • process payments and manage subscriptions; • understand and improve the Service, using product analytics only where you've consented; and • comply with legal obligations and enforce our Terms.

We do not use the content you store to build advertising profiles, and we do not sell it.

If you are in the European Economic Area or the United Kingdom, we process personal data on these legal bases: to perform our contract with you (providing the Service you request); with your consent (for example, product analytics and, where required, certain communications), which you can withdraw at any time; for our legitimate interests (securing and improving the Service, preventing abuse), balanced against your rights; and to comply with legal obligations. Where we process special-category data (such as health information you choose to store), we rely on your explicit consent or another lawful basis.

Within your Hive. Content is shared with the members of your household according to the roles and visibility settings you choose. Some records are private by design and are not shared even with admins.

Service providers (sub-processors). We share information with vendors who help us run the Service under contracts that limit their use of it to providing their service to us. Our current sub-processors include: cloud hosting and storage and email delivery via Resend; payment processing via Stripe (web) and the Apple App Store and Google Play (mobile purchases); mobile subscription management via RevenueCat; product analytics via PostHog; and bot protection via Cloudflare Turnstile. We will keep this list current as vendors change.

Legal and safety. We may disclose information if required by law or valid legal process, or to protect the rights, safety, or property of our users, the public, or whyuascii LLC.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction; we will notify you of any change in who controls your information.

We do not sell your personal information and do not share it for cross-context behavioral advertising.

Some features let you store health, medical, and emergency information. We treat this as sensitive and apply extra protections.

Access to another member's protected emergency record uses a "break-glass" flow: the person accessing it must state a reason, the access is written to a permanent, tamper-resistant log, the record owner is notified, and access is time-limited. Sensitive records are filtered on our servers before they are returned, so members only receive what they are permitted to see.

Please only store health or emergency information about other people when you have the right to do so. Thrivin Hive is a consumer product and is not a HIPAA-covered entity; it is not a medical or emergency service.

We use essential cookies and similar technologies to keep you signed in, remember your preferences, and keep the Service secure — these are always on because the Service needs them.

Product analytics and any advertising technologies are off by default and load only after you opt in. You can change your choice at any time using "Cookie Settings" in the site footer, and your choice is remembered across thrivinhive.com and app.thrivinhive.com. On our marketing site, analytics do not load at all until you consent. We honor recognized browser opt-out signals where required by law.

We keep your information for as long as your account is active and as needed to provide the Service. When you delete content or close your account, we remove it from the active Service within a reasonable period, subject to limited backup retention (typically rotated within a short window) and any records we are required to keep by law or for security — such as the emergency-access audit log and records needed to resolve disputes or enforce our agreements.

Depending on where you live, you may have the right to access, correct, export (portability), and delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update or delete much of your information directly in the Service.

For other requests, email privacy@thrivinhive.com and we will respond within the time the law requires (generally within 30–45 days). We may need to verify your identity first. You may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.

If you are a California resident, the CCPA/CPRA gives you specific rights: to know the categories and specific pieces of personal information we collect, use, and disclose; to delete and to correct your personal information; and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined, and we do not use or disclose sensitive personal information beyond the purposes the law permits.

In the past 12 months we have collected these categories: identifiers (name, email), commercial information (subscription status), internet activity (usage and device data), and the content you choose to store, which may include health information. We disclose these categories to the service providers listed above only to run the Service. To exercise your rights, email privacy@thrivinhive.com. California's "Shine the Light" law: we do not share personal information with third parties for their own direct marketing.

Thrivin Hive is intended to be set up and managed by adults, and we do not knowingly allow children under 13 to create their own accounts or knowingly collect personal information directly from them.

A parent or guardian may add a child to their Hive and enter information about that child to help run the household. If you do, you are responsible for that information and for deciding who in your Hive can see it, and you consent to our processing it to provide the Service. If you believe a child has provided us information without a parent's involvement, contact privacy@thrivinhive.com and we will take appropriate steps to delete it.

We use technical and organizational measures — including encryption in transit, access controls, tenant isolation so one household's data cannot reach another, and audit logging for sensitive access — to protect your information. No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong. If a breach affects your personal information, we will notify you and any regulators as required by applicable law.

whyuascii LLC is based in the United States, and we and our service providers process information there and in other countries. If you use the Service from outside the United States, you understand your information may be transferred to and processed in the United States and other countries, where privacy laws may differ from those where you live. Where required for transfers from the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

If you use Thrivin Hive on behalf of an organization and act as a data controller for personal data of others under GDPR or similar laws, a Data Processing Addendum is available on request at privacy@thrivinhive.com. For everyday household use, this Privacy Policy governs.

We may update this Privacy Policy as the Service changes or the law evolves. If we make material changes, we will take reasonable steps to notify you before they take effect. The "last updated" date above shows when it last changed.

Questions about your privacy or this policy, or to exercise your rights, email privacy@thrivinhive.com, or reach the team at hello@thrivinhive.com. Thrivin Hive is operated by whyuascii LLC, which is the data controller for your information.