Thrive (“Thrive – Wellness Coach”) is a personal wellness and training app for iPhone and Apple Watch, developed by Ahmed Shaheed as an individual developer. This policy explains, in plain language, what data the app handles and where it goes. The short version: your data lives on your device, nothing is sold, there are no ads, no analytics, and no accounts.
Thrive has no login and no user account. It does not use analytics, advertising, or any third-party tracking SDKs. It does not track you across other apps or websites, and it never asks for or receives an advertising identifier.
Everything you log — meals and macros, protein and water, body weight, strength and cardio workouts, heart-rate summaries, and sleep and recovery summaries — is stored on your device using Apple’s on-device database (SwiftData). Thrive does not run its own accounts server and does not keep a copy of your data on any server.
Because this data is part of the app’s normal storage, it is included in your iCloud device backups if you have iCloud Backup turned on. Those backups are managed by Apple under Apple’s privacy terms, not by Thrive.
Thrive’s core tracking works entirely on-device. The optional AI features — free-form logging, meal-photo logging, daily coach notes, sleep verdicts, cardio debriefs, and AI workout generation — are powered by Claude, Anthropic’s AI model. AI features send data off your device only when you actively use them. When you do, the request may include:
No health context, message, or photo is ever sent unless you use an AI feature that needs it. Thrive does not send your data anywhere in the background. AI features run only after you give explicit consent — a consent step during setup (or on first use of the coach) — and you can withdraw it at any time in Settings → AI & Privacy, which pauses every AI feature.
AI requests pass through a lightweight proxy server (a Cloudflare Worker) run by the developer, which forwards them to Anthropic’s Claude API. The proxy does not keep logs of your message content, photos, or health context. It records only anonymous usage metering — a running total of what your requests have cost that month, and nothing about what they said — keyed to an anonymous subscription identifier so the monthly fair-use limit can be applied. That identifier comes from your App Store subscription and is not tied to your name, email, or Apple ID. Each month’s counter is deleted automatically about five weeks after that month begins.
The one-off plan generation offered during setup, before any subscription exists, is capped per device instead. To do that, Thrive generates a random identifier for your installation the first time it is needed, stores it on your device, and sends it with that request so the proxy can count free generations. It is a random value created by the app — not a device serial number, advertising identifier, or anything Apple provides — it is never sent to Anthropic, and it is used for nothing but this cap. Deleting the app removes the copy on your device. The proxy keeps its own record of that identifier and a count, so the free generation can’t simply be re-run by reinstalling; that record deletes itself automatically one year after your last setup generation, and it holds nothing but the identifier and a number.
Anthropic processes each request to generate a response and handles that data under its own commercial terms and privacy policy. Anthropic does not use data submitted through its commercial API to train its models. See anthropic.com/legal/privacy.
Third-party protection. Anthropic PBC is the only third party Thrive shares any user data with, and we confirm that it provides the same or equal protection of your data as is stated in this policy. Its commercial terms commit it to process your request solely to generate the response, not to train its models on data submitted through the commercial API, and not to sell it or use it for advertising — the same commitments made here. No other company, service, analytics provider, advertiser or data broker receives your data.
Thrive does not sell your personal data, and does not share it for advertising, marketing, or any purpose beyond delivering the features you request.
Because your data is stored on your device, deleting the app deletes the data. If you also want to remove it from backups, delete it from your iCloud backup as well. Individual entries (meals, workouts, weights, etc.) can be removed inside the app at any time. AI request content is not retained by the developer’s proxy, so there is nothing on that side to delete beyond the two anonymous counters described above, each of which expires on its own.
Thrive is not directed at children and is intended for a general adult audience managing their own fitness and nutrition.
If this policy changes, the updated version will be posted at this address with a new “last updated” date.
Questions about privacy? Email shaheedpharma@gmail.com.