Privacy Notice

Thrive After 30 With Jessie Andoscia operates the Thrive After 30 app. We are the data controller for the personal data described in this notice, which means we decide how and why it is used.

• Account data — name or display name, email address and login credentials, used to create and secure your account. Legal basis: performance of our contract with you.
• Onboarding and wellness data — goals, age range, activity level, dietary preferences, injuries or limitations you choose to share. Used to personalize your program, meals and workouts. Legal basis: contract performance, and your consent where health-related.
• Tracking data — weight, measurements, habit and streak logs, check-ins, walks and completed workouts, used to show your progress over time. Legal basis: contract performance.
• Progress photos — optional images you upload, stored privately and visible only to your account. Legal basis: your consent, which you can withdraw by deleting the photos.
• Support messages — anything you send us, used to answer you. Legal basis: legitimate interests in supporting our members.
• Technical data — device information, IP address and basic usage/telemetry, used for security, fraud prevention and improving the app. Legal basis: legitimate interests.

We do not see or store your card details. Payment information is collected and processed directly by Paddle.

• Service providers / subprocessors — hosting, database, authentication, file storage and AI providers that power the app's features, acting on our instructions.
• Paddle, our Merchant of Record, for the sale of the membership, subscription management, payments, invoicing and tax compliance.
• Google, if you choose to sign in with a Google account, for authentication only.
• Professional advisers (legal, accounting) and authorities where we are required to disclose by law.

We do not sell your personal data and we do not share it for third-party advertising.

We keep your account and wellness data for as long as your account is active, so your progress history stays intact. If you delete your account or ask us to, we delete or anonymise your data, except where we must keep records (for example transaction records for tax purposes) for a limited period required by law.

Depending on where you live, you have rights to access, correct, delete, export or restrict the use of your personal data, to object to certain processing, and to withdraw consent at any time. You can exercise most of these directly in the app — editing your profile, deleting photos or entries, or deleting your account. If you are in the UK or EEA you may also lodge a complaint with your local supervisory authority, and we will respond to requests within one month. Data may be processed on servers in the United States; where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level database rules so that each member can only read and write their own records. Progress photos are stored in a private bucket that is not publicly accessible.

We use only essential cookies and browser storage — to keep you signed in and to remember your progress between visits. We do not use advertising or third-party marketing cookies. You can clear this data in your browser settings, though doing so will sign you out.