Privacy Policy

iThrive OS is a youth development organization serving children and teens ages 6–18. Protecting the safety, dignity, and privacy of every young person in our care is the foundation of everything we do. This policy explains what information we collect, why we collect it, how it's protected, and the choices families have.

• Member profile: name, date of birth, age band, school, emergency contact, allergies, and medical notes provided by a parent or guardian during enrollment.
• Learning & growth data: lesson progress, assignments, reflections, assessment results, achievements, and attendance.
• Emotional check-ins: mood and reflection entries shared by members, visible to the member and their coach — never public.
• Community posts: showcase moments, reactions, and voice notes shared within Thrive Connect, visible only to the member's age band and the moderation team.
• Parent & billing information: parent contact details and payment records. We never store full card numbers — payments are processed securely by Stripe.
• Technical data: device and usage information needed to run the platform securely.

We apply extra safeguards for anyone under 18:

• Parental consent: a parent or legal guardian consents to their child's participation and data use before a member is enrolled.
• Age-band isolation: community content is scoped to a member's age band — younger members never see teens' posts and vice versa.
• No public minors' content: Thrive Connect posts, reflections, and check-ins are never visible to the public internet or to logged-out visitors.
• Content moderation: all posts are filtered for harmful language and reviewed by trained moderators. Members can report any post with one tap.
• Minimal data: we collect only what's needed to deliver and improve the program.

We use member information to deliver coaching, track growth, communicate with families, keep members safe, and meet grant and regulatory reporting requirements. We never sell member data. We share aggregated, de-identified data with funders to demonstrate impact.

We retain member records while a member is enrolled and for the period required by law and our grant agreements after a member leaves the program. Parents may request deletion of their child's personal data, subject to legal retention obligations, by contacting us.

Parents and guardians may request access to, correction of, or deletion of their child's personal data, and may withdraw consent at any time. Members 13 and older may also exercise rights over their own data where permitted. To make a request, contact us using the details below.

Questions about privacy or your child's data? Contact our Privacy Lead at privacy@ithrive.org or through our office. We respond to all privacy requests within 30 days.