Privacy Policy

ThriveWell PLLC (“ThriveWell,” “we,” “us”) operates jointhrivewell.com. This policy describes what information we actually collect, why, and who we share it with — nothing here describes a practice we don’t follow.

Information we collect

• Waitlist signups: the email address you provide, and, if you joined via a referral link, which referral code brought you here.
• Consultation requests: your name, email, phone number (if provided), state of residence, and scheduling preferences. This form is deliberately scoped to scheduling logistics only — we do not collect health information through it. If you book a consultation, we collect health history separately, by phone or secure channel, after your appointment is confirmed.
• Account information: if you create an account, your email address and authentication credentials (passwords are hashed, never stored in plain text).
• Usage analytics: pages viewed, searches run, and questions asked of the AI Evidence Assistant, along with a session identifier and, for Instagram-referred visits, campaign attribution (UTM) parameters. This is never linked to health information.

How we use it

To send waitlist and consultation-request confirmations, to schedule and follow up on consultations you request, to maintain your account if you create one, and to understand which pages and features are actually useful so we can improve them. We do not sell your information to anyone, and we do not use it to train AI models.

Who we share it with

We use a small number of service providers to run ThriveWell, each of which processes data only on our behalf:

• Supabase — our database and authentication provider, where the information above is stored.
• Resend — sends transactional emails (waitlist and consultation confirmations). No health information is included in these emails.
• Vercel — hosts the site and provides privacy-focused, aggregated web analytics.

We do not otherwise share your information with third parties, except where required by law.

Health information

ThriveWell is not yet able to store Protected Health Information (PHI) under HIPAA — that requires a signed Business Associate Agreement with our database provider, which is in progress but not yet complete. Until it is, our consultation request form is deliberately limited to scheduling details, and any health history you share for a confirmed consultation is collected through a separate, secure process, not through this website.

Cookies

We use a session cookie to keep you signed in if you create an account. We don’t use third-party advertising or tracking cookies.

Your choices

You can ask us to access, correct, or delete the information we hold about you, or to remove you from the waitlist, at any time by contacting us at the address below. If you created an account, you can also update most of this directly from your profile.

Children’s privacy

ThriveWell is not directed to children under 18, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes in a way that affects how we handle your information, we’ll update the date at the top of this page and, for material changes, notify waitlist members and account holders by email.

Contact

Questions about this policy or your information: reach us at privacy@jointhrivewell.com.