Privacy and Terms

Thrive Research, Inc. (“Thrive,” “we,” or “us”) has adopted the following privacy policy to provide you with information about how we collect, use, and share information about you. Please review it carefully. By visiting and using this website (the “Site”), you are accepting the practices described in this privacy policy.

Scope of this Privacy Policy

This privacy policy applies to Thrive’s web sites at,,, and, and any other web site(s) operated by Thrive on which this privacy policy is displayed. The information practices of any other online or offline sites or services are not covered by this privacy policy.

Non-Personal Information We Collect

This Site may use "cookies" (small text files placed on your computer's hard drive) to facilitate use of the Site and track unique users, among other things.  Please refer to instructions provided by your web browser in order to delete, block or receive warnings about cookies.
Additionally, when you visit the Site, some information is automatically collected, such as your IP address, browser type, system type, the content and pages that you access on the Site, “referring URL” (i.e., the page from which you navigated to the Site), the pages you navigate to on the Site, and from which you leave the Site, as well as the time you spend on the Site.  We collect this information passively using technologies such as standard server logs, cookies, and clear GIFs (also known as “Web beacons”). We also keep track of these activities on the Site through the use of Google Analytics, a web analytic service provided by Google, Inc. Google uses "cookies" to analyze how users access and use the Site. Information obtained by Google about users of this Site is stored on Google servers and provided to us in a report containing aggregate data. For more information on Google's privacy policy, please review

Personal Information We Collect

If you register with this Site, we require you to submit Personally Identifiable Information and depending on the tool or service you have selected, we may also collect Personal Health Information. 

Personally Identifiable Information” is information that can be used to identify or contact a specific individual, such as a name, address, telephone number, or email address.  Personally Identifiable Information also includes information about a person’s activities, such as information about his or her activity on the Site; his or her responses to questionnaires, and behavioral and health-related logs that are administered on the Site; and demographic information, such as date of birth, gender, geographic area, and preferences, when any of this information is linked to information that identifies that individual.  As used in this policy Personally Identifiable Information does not include Protected Health Information.
Personal Health Information” is information that relates to: the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and identifies the individual involved or with respect to which there is a reasonable basis to believe the information may be used to identify the individual involved. The term “Personal Information” is used herein to refer to Personally Identifiable Information and Personal Health Information collectively.
A.  Personally Identifiable Information
We collect Personally Identifiable Information.  For example, certain features of the Site may ask you to give us your Personally Identifiable Information voluntarily (including, but not limited to, your name and email address).  For example, when you register for a Thrive account, update your Thrive profile, post content to our Site, request help or support, or otherwise communicate with us, we collect the Personally Identifiable Information that you provide to us. 
B.  Personal Health Information
We may also collect Personal Health Information.  For example, after you have registered as a member, you may choose to use certain interactive content, tools, and services that may ask you to voluntarily provide your Personal Health Information. 
C.  Information from Third Parties
We may also receive Personal Information about you from third parties, and may combine this information with other Information we maintain about you.  If we do so, this privacy policy governs any combined information that we maintain in a personally identifiable format.
D.  Newsletters and Marketing Materials
To receive some or all of our newsletters and marketing materials, you will be asked to provide us with your contact information, such as name and email address. You can unsubscribe from these services by clicking "unsubscribe" at the bottom of the email. In some cases, when you click on a link within an email newsletter, we may receive a report noting that response.
E.  Emails You Send to Us
This Privacy Policy does not apply to emails that you send to us.  If you want to keep the information in an email private, do not send it in an email to us.
F.  Message Boards, Shared Information, and Group Forums
Some features on the Site may allow you to post Personal Information or make Personal Information available to other users of the Site.  For example, we display some categories of Personal Information that you provide in your user profile in your profile page, and elsewhere on the Site, according to the preferences you set in your account settings. Additionally, if you post to a discussion forum on our Site, any Personal Information that you include with that submission will be made available to other Site users who view it.
As a service to our users, we also offer message boards, chat rooms and other group forums where users can share information and support one another or where users can post questions for experts to answer.  We also offer online discussions moderated by educational, medical or healthcare experts. 
Any information shared (including Personal Information) that you reveal in a chat room, message board, group session, posting or online discussion is by design open to the public and is not a private, secure service.  You should think carefully before disclosing any Personal Information in any public forum.  What you have written may be seen, disclosed to or collected by third parties and may be used by others in ways we are unable to control or predict, including to contact you for unauthorized purposes.  As with any public forum on any site, this information may also appear in third-party search engines like Google, Yahoo, MSN etc.
We may allow you to select privacy options that limit access to some types of Personal Information in your user profile, but no security measures are impenetrable or perfect. Additionally, even after information posted on the Site is removed, caching and archiving services may have saved that information, and third parties may have copied or stored the information available on the Site. We cannot warrant or guarantee that any Personal Information that you provide on and in connection with the Site will not be accessed, viewed, or used by unauthorized persons. We encourage you to think carefully about the information that you disclose about yourself in your user profile and in other publicly-available portions of the Site.
G.  Aggregate Data

Personal Information does not include "aggregate" or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of items, services, or users that is not personally identifiable or from which individual identities are removed. We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes.

How We Use Your Personal Information

We are not in the business of selling, renting, or leasing your Personal Information to third parties. Except as described in this Privacy Policy or as specifically agreed to by you, we will keep your Personal Information private and will not share it with others.  The following sections describe different ways that we may disclose your Personal Information. Some information such as certain drug and alcohol information, HIV information and mental health information is entitled to special restrictions related to its use and disclosure.  Thrive abides by all applicable state and federal laws related to the protection of this information.

We may use your Personal Information for:

Requested Services.  We may use your Personal Information to provide you with information and services that you have requested.  For example, we use the results of health risk assessments, and the information you may provide in behavioral and other health-related logs, to make recommendations for healthier lifestyles, monitor progress toward goals, and to otherwise assess your behavioral health.
Operations.  We may disclose Personal Information about you as necessary for our operations, in order for us to comply with law and regulation, for contractual obligations, claims, grievances or lawsuits, health care contracting, legal services, business planning and development, business management and administration, the sale of all or part of Thrive to another entity, underwriting and other insurance activities and to operate the delivery of services.  Information about our users, including Personal Information, may also be disclosed as part of any merger, acquisition, debt financing, sale of company assets, or similar transaction, as well as in the event of insolvency, bankruptcy, or receivership in which Personal Information could be transferred to third parties as one of our business assets.
Research Studies.  If you consent to participate in a research study, we may disclose Personal Information about you in compliance with the terms of the study.
Payment. We may also use your Personal Information for payment purposes.  For example, we may disclose your Personal Information when we prepare bills, process payment of credit cards, or undertake collection efforts. 

We also use your Personal Information to correspond with you, to improve the Site and our program offerings, to prevent fraudulent use of the Site and our services, to tailor and personalize your user experience, to maintain a record of our dealings with you, and for related administrative purposes.
We may also use Personal Information you provide to contact you regarding products, services, and offers of Thrive Research or of third parties that we believe you may find of interest. We allow you to opt-out from receiving marketing communications from us as described in the “Choice” section below.
We may also provide Aggregate Information to third parties.  Depending on the circumstances, we may or may not charge third parties for this Aggregate Information.  We require parties with which we share Aggregate Information to agree that they will not attempt to make this information personally identifiable, such as by combining it with other databases.

We also use reports from Google, and other passively-collected information that we collect, to administer, operate, and improve the Site and our other services and systems, and to provide customized services and content.  If we link or associate any information gathered through passive means with Personal Information, we treat the combined information as Personal Information under this policy.  Otherwise, we use information collected by passive means in non-personally identifiable form only.

Uses and Disclosures without an Authorization

In some limited situations, the law allows or requires us to use or disclose your Personal Information without your permission.  Not all of these situations will apply to us and some may never happen at all.  Such uses and disclosures are:

Public Health Purposes.  We may disclose Personal Information about you for public health purposes, such as contagious disease reporting, and notices to or from the Center of Disease Control. 
To Report Abuse.  We may disclose your Personal Information to governmental authorities about victims of suspected abuse, neglect, or domestic violence.
To Avert a Serious Threat to Health or Safety. We may use and disclose Personal Information about you when necessary to prevent or lessen a serious and imminent threat to your health and safety or the health and safety of the public or another person. Any disclosure would be to someone able to help stop or reduce the threat.
For Legal Proceedings.  In connection with lawsuits or other legal proceedings, we may disclose Personal Information about you in response to a court or administrative order, or in response to a subpoena, discovery request, warrant, summons or other lawful process.
Medical Examiners or Funeral Directors. We may disclose your Personal Information to medical examiners to identify a dead person or to determine the cause of death; or to funeral directors to aid in burial; or to organizations that handle tissue or organ donation.
Health Related Research.  We may disclose your Personal information for health related research.
Health Oversight Activities, Law Enforcement, and National Security.  We may disclose Personal Information to law enforcement or governmental, licensing, auditing, accrediting agencies, or officials as authorized or required by law.
Business Associates.  We may share your Personal Information with third parties that perform services on our behalf in connection with the Site and our related services (including, for example, service providers who provide data storage, maintenance services, database management, and otherwise help us maintain and improve the Site and to provide our services).  Access to your Personal Information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for us. We also contractually require that our operations and maintenance contractors 1) protect the privacy of your Personal Information consistent with this Privacy Policy, and 2) not use or disclose your Personal Information for any purpose other than providing us with products and services.
As Required By Law.  We will disclose Personal Information about you when required to do so by federal or state law.

Children's Privacy

We do not knowingly collect Personal Information from children under the age of 13.  We do not obtain information from minors without obtaining parental consent. Certain features and services accessible on the Site may include a registration process with a parental/legal guardian permission component.
The “Use of Personal Information” and "Disclosure of Personal Information" sections of this policy, above, describe the manners in which we use and disclose Personal Information pertaining to minors.  Additionally, we encourage parents to review the information under the section entitled “Message Boards, Shared Information, and Group Forums” above.
Parents/legal guardians may revoke their consent to our collection, use, and disclosure about Personal Information from their child by contacting us. We will delete the child's account upon the parent's request. We may request information from the parent/legal guardian in order to verify the identity of the parent.  The revocation of consent shall be effective only with respect to action not already taken and shall apply only to Thrive’s use or disclosure of Personal Information created or received after notification of the termination.  If a parent/legal guardian revokes consent, the Child’s Thrive account will be terminated.

External Links

The Site may contain links to third-party web sites and other services. If you leave our Site, this privacy policy will not apply to your activities or to any information you may disclose while interacting with third parties. We are not responsible for the privacy practices or content of any third-party web sites or services.


The Site has reasonable security measures in place to protect the loss, misuse, and alteration of information under our control.

Here are some of the security procedures that we use to protect your privacy:

  • We require both a personal username (log-in name) and a password in order for users to access their Personally Identifiable Information or Personal Health Information.
  • We may require a public 'nickname' different from the username and password, used for any public forums like message boards.
  • We use firewalls to protect information held in our servers.
  • We utilize Secure Socket Layer (SSL) encryption in transmitting Personal Information to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption.
  • We closely monitor the limited number of Thrive employees who have potential access to your Personal Information.
  • We require all Thrive employees to abide by our Privacy Policy and to be subject to disciplinary action if they violate it.
  • We back-up our systems to protect the integrity of your Personal Information.

We provide additional protection for your Personal Health Information as follows:

  • We provide secure messaging so that information related to your personal health related characteristics is sent through a secure, encrypted connection.
  • We limit access to Personal Information only to authorized users.

Despite our efforts to protect your Personal Information, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet may be intercepted.  Data transmission over the Internet or wireless networks cannot be guaranteed to be secure, and no data security measures can be guaranteed to be completely effective. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.

Accuracy of Your Personal Information

You are responsible for ensuring the accuracy of the Personal Information you submit to us.  Inaccurate information will affect the information and analysis you receive from using our Site and may impair our ability to contact you as described in the Privacy Policy.  Therefore, you should provide accurate information at all times and your profile information and email address should be kept current because that is how we communicate with you.

Access to Update or Change Your Information

You may review, update, correct or delete certain types of Personal Information provided when you registered, or subsequently may have provided, by logging in to your Thrive account and making the appropriate changes to your account settings, profile, or your assessment record.

Your Rights Regarding Your Personal Health Information

The information that you post or self-report on this Site is the property of Thrive.  You have the following rights, however, regarding your Personal Health Information that we maintain about you:

Right to Inspect and Copy.  To the extent that your Personal Health Information is not accessible to you through your Thrive account, you have the right to inspect and/or receive a copy of your Personal Health Information with certain exceptions.  Generally, you will be able to review or obtain a copy of your records within 30 days of asking us.  By law, we can have one 30-day extension of the time for use to give you access or photocopies of your Personal Health Information if we send you a written notice of the extension.
We may deny your request to inspect and/or to receive a copy in certain limited circumstances. If you are denied access to your Personal Health Information, in most cases, you may have the denial reviewed.  The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.
To inspect and/or to receive a copy of your Personal Health Information, you must submit your request in writing to: Thrive Research Inc., 170 State Street, Suite 205, Los Altos, CA 94022.  Attn:  Privacy Officer.  If you request a copy of the information, there is a fee for these services. 
Changing or Amending Your Information.  If you feel that the Personal Health Information that we have about you is incorrect or incomplete, you may update, correct or delete it by logging in to your Thrive account and making the appropriate changes.  To the extent that you cannot make changes to your Personal Health Information through your individual Thrive account, you may ask us to amend the information or add an addendum (addition to the record).  You have the right to request an amendment or addendum for as long as the information is kept by or for us.

Amendment. To request an amendment, your request must be made in writing and submitted to: Thrive Research Inc., 170 State Street, Suite 205, Los Altos, CA 94022.  Attn:  Privacy Officer.  In addition, you must provide a reason that supports your request.
We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that:

  • was not created by Thrive;
  • is not part of the health information kept by or for Thrive;
  • is not part of the information which you would be permitted to inspect and copy; or
  • is accurate and complete in the record.

Addendum. To submit an addendum, the addendum must be made in writing and submitted to: Thrive Research Inc., 170 State Street, Suite 205, Los Altos, CA 94022.  Attn:  Privacy Officer.

Right to Request Restrictions. You can ask us to restrict our uses and disclosures of your Personal Health Information.  To request a restriction, you must make your request in writing to: Thrive Research Inc., 170 State Street, Suite 205, Los Altos, CA 94022.  Attn:  Privacy Officer.  In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply. We are not required to agree to your request.  If we do agree, our agreement must be in writing, and we will comply with your request unless the information is needed to provide you emergency treatment.
Right to an Accounting of Disclosures. You have the right to receive a list of certain disclosures we have made of your Personal Health Information within the past six years (or shorter period if you want), except disclosures for purposes of treatment, payment, or operations, disclosures made in accordance with an authorization signed by you, or some other limited disclosure.  You are entitled to one accounting within any 12-month period at no cost. If you request a second accounting within that 12-month period, there will be a charge for the cost of compiling the accounting. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
To request this accounting of disclosures, you must submit your request in writing to: Thrive Research Inc., 170 State Street, Suite 205, Los Altos, CA 94022.  Attn:  Privacy Officer. 
Right to a Paper Copy of This Notice. You have the right to a paper copy of this Notice. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice.  You may ask us to give you a copy of this Notice at any time by sending an email to or by post to:

Privacy Officer
Thrive Research Inc.
170 State Street
Suite 205
Los Altos, CA 94022


If you receive commercial email from us, you may unsubscribe at any time by following the instructions contained within the email. You may also opt-out from receiving certain communications from us by making the appropriate changes to your “account settingsa while logged in to your Thrive account.

Use of Site

Your access to and use of the Site are subject to certain terms and conditions, which are contained in our Terms of Use.

Contacting Us

If you have any questions about this privacy policy, the practices of this Site, or your dealings with this Site, you can contact us by email at or by post to:

Privacy Officer
Thrive Research Inc.
170 State Street
Suite 205
Los Altos, CA 94022

Changes to this Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently.
We will inform you if a material change is made to the privacy policy, which means a change that expands the permissible uses or disclosures of Personal Information allowed by the prior version of the Privacy Policy. Your consent to a material change of the Privacy Policy will be required in order to continue using the Site.  You may of course choose to Opt-out of continuing to use this Site if you do not agree to the terms of any revised policy do not to use the Site.  If you do not agree to the terms of any revised policy notify us through email or post at the addresses listed above and we will terminate your account.

For all other changes to the privacy policy, we may not notify you of such non-significant changes.

If we decide to change our privacy policy, we will post those changes to this privacy policy and will note the date of the revisions below.  We may also notify you of changes to the privacy policy the next time you log-in to your Thrive account, or by alerts on your home page and other places appropriate throughout our site, or through email.

If we make material changes to this policy, we will notify you here, by email, and by means of a notice on our home page.

Effective Date

The effective date of this privacy policy is September 1, 2009.