Privacy Policy

Surthrive is operated by Joshua White, trading as Surthrive, based in New South Wales, Australia. In this Policy, “Surthrive”, “we”, “us” and “our” refer to that entity.

You can contact us about privacy at contact@surthrive.app, or by writing to 60 Martin Place, Podium Levels 1, 2 & 3, Offices 312–316, 331, Sydney NSW 2000, Australia..

We collect the following categories of information when you choose to provide it or when it is reasonably necessary to operate the service:

Account information

• first and last name where you provide it
• email address
• account identifiers and account creation date
• authentication information — where authentication is handled by an external provider, Surthrive does not directly hold your password
• subscription status where applicable

Surthrive information

• your selected pathway and no-contact start date
• personal intentions and milestone or key dates you create
• Daily Check-In wellbeing scores and emotional tags
• regulation-tool usage and any optional before/after regulation ratings
• which Motivation content you view, save or mark as helpful — recorded only after you give consent

Journal and private reflection information

This may include journal entries and titles, emotion tags, guided reflection responses, private drafts, linked check-in information and saved reflections. This information may contain highly personal information supplied voluntarily by you.

Self-discovery information

• assessment responses and attachment-related results
• care and connection preferences, communication patterns and relationship needs
• conflict and repair preferences, and relationship values

These are self-reflection tools and are not clinical diagnoses.

Community information

• anonymous Community submissions, selected emotional tags and optional relationship context
• reports and “This helped” interactions

Community posts are displayed publicly within the Surthrive Community without your public name or profile. Surthrive retains an internal connection between a Community post and your account for moderation, deletion, abuse prevention, safety and support. Community posts are not technically untraceable or completely anonymous to Surthrive.

Support information

• support requests and replies
• relevant attachments you choose to provide
• moderation communications

Technical information

Where reasonably collected, this may include device and browser information, IP address, application logs, security information, cookie or local-storage information, usage information reasonably required to operate and secure the service, and the analytics described below.

Surthrive uses Google Analytics to understand how the site is used and roughly where visitors come from. This applies to everyone who loads a page, including visitors who never create an account. Google Analytics receives your IP address, which it uses to derive an approximate location — usually a city or region, not a street address — along with device and browser information, the pages you view and how you arrived at the site.

We use this information in aggregate to see which areas Surthrive is being used from and which parts of the site are useful. Google Analytics does not receive your Journal entries, Daily Check-In answers, self-discovery results or support messages, and we do not use it to identify you. Google Analytics sets its own cookies in your browser and handles this information under its own privacy terms. You can block or clear those cookies in your browser without affecting the rest of Surthrive.

Information you choose to provide may reveal information relating to your emotional or psychological wellbeing, your relationships, your personal experiences, or other information that may be sensitive under applicable privacy laws. We ask you to provide only information you are comfortable providing. Surthrive is not a medical-record system.

We collect information for the following purposes:

• creating and managing your account
• providing Daily Check-Ins and storing private Journal entries
• providing a personalised Surthrive experience and calculating user-selected milestones
• providing regulation and reflection tools, and generating self-discovery results
• operating and moderating the Community
• delivering customer support
• processing subscriptions where applicable
• maintaining security, preventing abuse, and improving product functionality
• complying with legal obligations

We use your information only for the purposes described in this Policy. We do not sell your information.

We do not use your information, including your Journal entries, check-ins, reflections or Community posts, to train artificial intelligence models, and we do not allow our service providers to do so on our behalf. If this ever changes, we will ask for your clear, separate consent first, and it will be off unless you turn it on.

Surthrive uses the following service providers to operate the application:

• Base44 — application hosting, database and file storage, backend processing, and account authentication
• Google — optional Google sign-in, if you choose to use it
• Google Analytics — visitor and usage analytics for the site

We will update this list if our providers change.

Your information may be stored and processed outside Australia, including in the United States, by the service providers listed above. We take reasonable steps to ensure these providers protect your information in a way consistent with the Australian Privacy Principles.

Journal entries are private to your account. They are not displayed in Community, are not automatically shared publicly, and Community moderators do not receive ordinary Journal access. You control Journal exports, and Journal content will not automatically become a Community post.

Journal entries you keep only on your device are not sent to us. Entries you save to your account are never visible to other Surthrive users. Authorised technical access may occur where reasonably necessary to operate or secure the service, investigate serious technical problems, or comply with law.

Community posts are publicly visible to other Surthrive users when approved. Your public name and profile are not shown with Community posts. Surthrive retains the internal account relationship for safety and moderation. Please do not include identifying information about yourself or others unnecessarily.

Surthrive is currently free. If we introduce paid features, we will update this Policy and tell you before you are asked to pay.

You may intentionally choose to share eligible Surthrive-owned Motivation content externally. External sharing only occurs when you initiate it. Journal content is never automatically shared, and another user’s Community contribution is not externally shared through Surthrive without the relevant sharing permission.

We use technical and organisational measures intended to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Information is sent over encrypted connections (HTTPS), and access to stored information is protected by sign-in and access controls. Stored information is also encrypted. No online service can guarantee complete security, but we work to protect your information and will tell you if a data breach is likely to cause you serious harm.

Access by staff and admins is role-limited. Community moderators do not ordinarily have access to Journals, private check-ins, private Discover responses, or private saved content. Support and admin personnel access user information only where reasonably necessary for their authorised role.

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, to meet legal requirements, resolve disputes, prevent abuse and maintain appropriate business records. Retention periods may differ by data category.

You may access much of your information through your account, correct account information, export your Journal, request access to personal information we hold about you, request correction of inaccurate information, and request a broader data export where available. To make a request, contact contact@surthrive.app.

You can initiate account deletion from Profile → Privacy & Data → Delete account and data. Some limited information may need to be retained where required or permitted by law, for fraud or abuse records, or for legitimate legal purposes. Deletion may not be instantaneous where backups or lawful retention apply.

You may contact us about privacy at contact@surthrive.app. We will investigate and respond to privacy complaints within a reasonable period. If you remain dissatisfied, you may have the right to contact the Office of the Australian Information Commissioner or another applicable regulator. Nothing in this Policy limits your right to complain to the Office of the Australian Information Commissioner.

Surthrive is currently intended for people aged 18 years or older and is not designed for children.

This Policy may be updated as Surthrive changes. The “Effective date” shown above reflects the latest update. If we make a significant change, we will tell you in the app before it takes effect and update the effective date at the top of this Policy. If a change affects how we handle your sensitive information, we will ask for your consent again rather than relying on your continued use of Surthrive.

For any question about this Policy or your information, contact contact@surthrive.app.