Privacy Policy

Google sign-in: what we receive and why

You can create an account or sign in with Google. When you do, Google shares your basic profile with us under the profile and email scopes only: your name, email address, Google account ID, and profile photo (if you have one). We use this solely to create and identify your Thrive account, sign you in, display your name and avatar in class, and send transactional email (booking confirmations, password and sign-in messages). We never see your Google password, and we never access your Gmail, Drive, or contacts through sign-in.

Google use disclosure: Thrive's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve Thrive features you use — never to sell it, never for advertising, and we share it only with the processors listed below as needed to run the service or as required by law.

You can revoke Thrive's Google access at any time in your Google account permissions. Revoking stops future Google sign-ins; your Thrive account remains until you ask us to delete it.

Teacher calendar linking (teachers only, optional)

A teacher can optionally link the primary Google Calendar of one Google account from Schedule → Availability. Thrive asks Google for read-only access to calendar events (the calendar.events.readonly permission). From the previous day through the next 90 days we store, for each event, its Google Calendar event id (used to match the event on the next sync), its title, its start and end time, whether it is an all-day event, whether Thrive treats it as blocking time and why (for example busy, free or declined), and a link that opens the event in Google Calendar. We do not store event descriptions, guests or locations. A teacher can also ignore a single event; we then keep that event's id only until the first successful sync that runs more than a day after the event ended, or until the teacher disconnects, whichever comes first.

We also store the email address of the linked Google account, and Google tokens are encrypted at rest. We use the calendar data only to work out when the teacher is free for bookings and class scheduling, and to show the teacher which events Thrive found. Event titles are visible only to the teacher on their schedule and dashboard (and to Thrive administrators acting as that teacher for support); students and other teachers never see them. We do not share this data, use it for advertising, or use it to train AI models. A teacher can disconnect at any time from Schedule → Availability: Thrive asks Google to revoke its access, then deletes the stored tokens, the linked account's email, the stored events and the ignored event ids. A teacher can also remove Thrive's access from their Google account permissions page. Thrive's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we store

• Your account: name, email, and password (stored as a one-way hash — we never see the password itself).
• Your learning activity: credit packages, bookings, class sessions, course progress, messages with teachers and staff, and teaching notes your teachers keep about your progress.
• Session cookies that keep you signed in: an HttpOnly session cookie (15 minutes, renewed silently while you use the site) and an HttpOnly refresh cookie (7 days). We use no advertising cookies.
• Usage analytics: first-party events (pages viewed, quiz steps, bookings) stored on our own servers, plus Google Analytics measurement when it is enabled — used only to understand how the site is used, never to advertise.
• Teacher Google Calendar link (teachers only, optional): encrypted Google tokens, the linked account's email, and each synced event's Google event id, title, and times. Details are in the teacher calendar section above.

Who processes it

• Stripe processes payments. Your card details go directly to Stripe; we keep only purchase records.
• Brevo sends transactional email (sign-in invites, password resets, booking confirmations, class reminders).
• Google provides optional Google sign-in; live classes run over Google Meet or Zoom, and the join link shows on your schedule.
• Zoom hosts the live classes taught on Zoom — joining a class connects you to Zoom's meeting service.
• OpenRouter powers Diego, the optional AI placement chat. What you tell Diego is used to estimate your level and point you to the right course or class.

Retention, security, and your choices

• We keep account and learning records while your account is active and as needed to run the school (e.g. purchase and booking history). Passwords are stored as one-way hashes; teacher calendar tokens are encrypted.
• We never sell your personal data and never share it for advertising. Processors above see only what they need to do their job, and only under confidentiality and data-protection terms.
• There is no self-serve export or deletion tool yet. To request a copy of your data or ask us to delete it, email hola@thriveinspanish.com and we will handle it personally.