Privacy Policy

Our Core Principle

Your data belongs to you. Our tools are built so that we never see your personal or financial information and never ask for it. Your data lives on your devices and syncs only through your own private iCloud — never a Beacon server. This is a fundamental design decision, not an optional setting.

What Thrive Collects

• Nothing by default. The app runs on your own Mac and iPhone. No accounts are created with us. No telemetry or analytics are sent.
• iCloud sync: Your data syncs between your devices through Apple's encrypted CloudKit private database, tied to your Apple ID. It stays in your iCloud — we have no server and cannot read it.
• Household Sharing: If you invite someone — for example, a spouse on their own Apple ID — your budget is shared with that one person and no one else, peer-to-peer through Apple's CloudKit sharing. The person you invite has view-only access: they can see the shared budget but cannot change it. Shared data is never sent to us or any third party, and you can stop sharing at any time.
• Email scanning: If you connect your email for transaction import, credentials are stored only in your device's Keychain (device-only — never synced to iCloud or anyone you share with). We never see or transmit them.
• Optional market data: Ticker symbols only are sent to Yahoo Finance for price quotes. No account data or balances ever leave.

What We Do Not Do

• We do not track your activity inside the tool
• We do not collect or receive your financial data
• We do not build profiles or sell user information
• We do not require accounts or data uploads
• We do not have access to the records you work with

Subscriptions & the Web

When you subscribe to Premium directly on our website (the path we prefer), we process payment through standard secure processors. We store only the minimal information needed to manage your subscription and provide support. We do not receive or store the detailed financial data inside your Thrive app.

This Website

The Thrive app and this website are separate systems. Nothing described in this section touches the financial records inside your app — we have no way to reach them.

Visitor measurement. We use GoatCounter, an open-source analytics tool, to count page views on this site. It sets no cookies, assigns no persistent identifier, and cannot follow you to any other website. It records the page visited, the site that referred you, and coarse details like browser, screen size, and country. That is the whole list. We use it to learn which pages are worth writing more of — nothing else. No advertising network receives anything.

Newsletter. If you choose to enter your email address, it is stored by Buttondown, our email provider, and used only to send you Thrive updates. We do not track whether you open a message. Every email carries a one-click unsubscribe, and leaving deletes your address. We never add app users to this list — the only way onto it is to type your address yourself.

Your Rights

You own your data. You can delete everything from within the app at any time. Because we don't have your data on our servers, there is very little we can "hand over" even if compelled. We design the product this way on purpose.

Why We Work This Way

We believe the information people use in our tools remains their own. Good software should not ask users to give up control of their data. We design with that responsibility from the beginning.