01 Scope of This Privacy Policy
This Privacy Policy describes the privacy practices of [LEGAL ENTITY NAME], doing business as STRIVE ("STRIVE," "we," "us," or "our").
This Policy applies to information collected through the STRIVE website, applications, account services, subscription services, communications, and other products or services that link to this Policy (collectively, the "Services").
This Policy does not apply to websites, applications, products or services operated independently by third parties, even if STRIVE links to or integrates with them.
02 Information We Collect
The information we collect depends on how you interact with STRIVE and which features you use.
Account and Identity Information
When you create or maintain an account, we may collect:
- first and last name;
- email address;
- account identifier;
- account type and status;
- subscription status; and
- authentication and account-security information.
STRIVE stores a cryptographic representation of your password used for authentication. We do not intend to store your password in readable plain text.
Nutrition and Wellness Information
When you use STRIVE's nutrition, fitness or progress features, you may provide information such as:
- foods and meals;
- serving quantities and measurements;
- calories;
- protein, carbohydrates and fat;
- fiber, sugar, sodium and other nutritional values;
- nutrition goals;
- workout and exercise information;
- fitness goals;
- body weight;
- body-composition information;
- progress measurements;
- habits and activity information; and
- other health, fitness or wellness information that you choose to enter.
Subscription and Transaction Information
If you use a paid STRIVE subscription, we may collect and maintain information relating to:
- your selected subscription plan;
- subscription start and end dates;
- billing periods;
- invoice numbers and invoice status;
- payment amounts;
- payment status;
- payment dates;
- payment processor information; and
- transaction or payment reference identifiers.
Payment card or financial-account information may be collected directly by a third-party payment processor rather than by STRIVE. The payment processor's handling of that information is subject to its own privacy practices.
Communications and Support Information
If you contact us, we may collect your name, email address, the subject of your request, messages, correspondence, support information and other information you choose to provide.
Technical and Device Information
When you access or interact with the Services, we may automatically collect technical information including:
- Internet Protocol ("IP") address;
- device type;
- device model or device characteristics;
- browser type and browser version;
- operating system and version;
- screen resolution or display characteristics;
- language and regional settings;
- network and connection information;
- approximate geographic information derived from IP address;
- referring page or website;
- exit page or website;
- date and time of access;
- session identifiers;
- authentication and security events;
- application version information;
- server and application diagnostics;
- error and crash information; and
- other information generated when your device communicates with STRIVE.
Interaction and Usage Information
We may collect information about how you interact with STRIVE, including:
- pages and screens viewed;
- features accessed or used;
- navigation paths;
- links and buttons selected;
- form and interface interactions;
- session duration;
- page and component load times;
- response times;
- feature-performance information;
- application errors;
- failed requests;
- general usage frequency; and
- other interaction information used to understand and improve site and application performance.
03 How We Collect Information
We may collect information from the following sources.
Directly From You
We collect information that you provide when creating an account, entering nutrition or fitness information, setting goals, purchasing a subscription, contacting support or otherwise using STRIVE.
Automatically From Your Device
We collect certain device, network, interaction, diagnostic and usage information automatically when you access or interact with STRIVE.
From Service Providers
We may receive information from service providers that support STRIVE, such as hosting providers, payment processors, analytics providers, security providers, communication services or customer-support services.
From Features You Choose to Connect
If STRIVE later allows you to connect a third-party service, device or application, we may receive information from that source with your direction or authorization and subject to applicable law.
04 How We Use Information
We may use information for purposes including:
- creating and maintaining your STRIVE account;
- authenticating your identity and account;
- displaying and calculating your nutrition, workout and progress information;
- allowing you to establish and monitor personal goals;
- providing subscription features;
- processing billing and payment information;
- generating invoices and transaction records;
- personalizing the presentation of information within your account;
- maintaining user preferences and measurement preferences;
- operating, maintaining and supporting the Services;
- measuring website and application performance;
- understanding how features are used;
- identifying slow, confusing or underperforming portions of the Services;
- debugging errors and diagnosing technical problems;
- improving usability, navigation and application design;
- developing, testing and improving features;
- securing accounts and infrastructure;
- detecting, investigating and preventing fraud, abuse or unauthorized access;
- communicating with you regarding your account, subscription or Services;
- responding to support requests;
- enforcing our Terms of Service;
- complying with legal obligations; and
- establishing, exercising or defending legal claims.
05 Health, Nutrition and Wellness Information
STRIVE collects this information when you choose to use features that require or allow you to enter it.
We use this information primarily to provide the features you request, including tracking, calculations, dashboards, trends, analytics, reports and goal comparisons.
STRIVE does not use your nutrition, fitness, body measurement or other consumer health information for targeted advertising.
STRIVE does not sell your consumer health information.
Unless we expressly tell you otherwise in a particular context, STRIVE is not acting as a healthcare provider, health plan or healthcare clearinghouse. Information maintained through STRIVE therefore may not be subject to the federal HIPAA Privacy Rule. Other federal and state privacy laws may nevertheless protect this information.
Depending on your location and applicable law, we may request additional consent before collecting or processing certain categories of consumer health or sensitive information.
06 Performance Analytics and Device Interaction
STRIVE collects IP address, technical device information and information about interactions with the Services for operational and performance analytics.
For example, we may use interaction information to determine:
- which pages or features are being used;
- how long pages or features take to load;
- whether application requests succeed or fail;
- where errors occur;
- how users generally navigate between STRIVE features;
- whether a particular browser or device type is experiencing performance problems;
- how effectively new application features perform;
- whether unusual activity may indicate abuse or a security issue; and
- how the overall usability and performance of STRIVE can be improved.
These analytics may associate technical and interaction information with an account or session where reasonably necessary to operate, troubleshoot or secure STRIVE.
STRIVE does not use the performance and interaction analytics described in this section to build advertising profiles or serve targeted advertisements.
08 How We Disclose Information
We may disclose personal information in the following circumstances.
Service Providers and Processors
We may provide information to vendors that perform services on our behalf, such as:
- cloud and application hosting;
- database hosting;
- payment processing;
- email delivery;
- customer support;
- performance monitoring;
- application analytics;
- security and fraud prevention;
- logging and diagnostics; and
- other technology infrastructure services.
We expect service providers that process information for STRIVE to use it only for authorized purposes and subject to applicable contractual and legal requirements.
Legal Requirements and Protection of Rights
We may disclose information if we reasonably believe disclosure is required by applicable law, regulation, subpoena, court order or other valid legal process.
We may also disclose information where reasonably necessary to investigate fraud, protect account or system security, enforce our agreements, protect the rights or safety of STRIVE or others, or establish, exercise or defend legal claims.
Business Transactions
Information may be transferred or disclosed in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets or other corporate transaction, subject to applicable law.
With Your Direction or Consent
We may disclose information when you direct us to do so or otherwise provide valid consent.
Aggregated or De-identified Information
We may use or disclose information that has been aggregated or de-identified so that it is not reasonably capable of identifying or being associated with an individual, subject to applicable law.
09 Sale of Personal Information and Advertising
STRIVE does not sell personal information for monetary consideration.
STRIVE does not sell consumer health information.
STRIVE does not currently use personal information or consumer health information for targeted or cross-context behavioral advertising.
If our practices change in a manner that creates new notice, consent or opt-out obligations under applicable law, we will update this Policy and provide any required privacy controls before using information for those purposes.
10 Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by law.
Factors that influence retention periods may include:
- whether your account remains active;
- whether information is needed to provide a feature you use;
- operational, security and fraud-prevention needs;
- transaction, accounting and tax requirements;
- legal, regulatory and contractual requirements;
- dispute-resolution and legal-claim requirements;
- the sensitivity and volume of the information; and
- backup and disaster-recovery cycles.
When information is no longer reasonably necessary, we may delete it, anonymize it or otherwise render it inaccessible in accordance with our retention practices and applicable law.
Information may remain temporarily within backups or archival systems after deletion from active systems until those backups are overwritten or otherwise removed through ordinary retention processes.
11 Information Security
We use administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss or destruction.
Depending on the system and information involved, safeguards may include access controls, authentication, encryption during transmission, credential protection, logging, system monitoring, database controls, software updates, backups and security review.
No Internet-connected service or information-storage system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and should notify us if you believe your account has been compromised.
12 Your Privacy Rights and Choices
Depending on where you live and applicable law, you may have rights relating to your personal information.
These rights may include the right to:
- confirm whether we process personal information about you;
- access personal information associated with you;
- obtain information about the categories of personal information we process;
- correct inaccurate personal information;
- request deletion of personal information;
- obtain a portable copy of certain personal information;
- withdraw consent where processing is based on consent;
- opt out of certain forms of targeted advertising, sale or profiling if STRIVE engages in such activities and applicable law provides that right;
- appeal certain decisions we make regarding a privacy request where applicable; and
- exercise privacy rights without unlawful discrimination.
Submitting a Privacy Request
You may submit a privacy request through our Contact page or by contacting us at the privacy contact information below.
We may need to verify your identity before fulfilling certain requests. Verification helps protect your account and prevents personal information from being disclosed or deleted at the request of an unauthorized person.
Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof of the agent's authority and may independently verify your identity.
Appeals
If applicable law gives you a right to appeal our decision regarding a privacy request, you may submit an appeal through our Contact page and identify the request as a "Privacy Appeal."
13 Supplemental U.S. State Privacy Rights
Certain U.S. states provide residents with additional privacy rights. These rights apply only to the extent the applicable law applies to STRIVE and to the particular processing activity.
Texas Residents
If the Texas Data Privacy and Security Act applies, Texas consumers may have rights that include confirming and accessing personal data, correcting inaccuracies, deleting certain personal data, obtaining certain data in portable form, and opting out of certain targeted advertising, sale or profiling activities.
Texas residents may also have a right to appeal certain decisions concerning privacy requests.
California Residents
If the California Consumer Privacy Act, as amended, applies to STRIVE, California residents may have rights including requesting information concerning personal information collected, requesting access, requesting deletion, requesting correction, opting out of certain sales or sharing, and limiting certain uses or disclosures of sensitive personal information where applicable.
STRIVE will not unlawfully discriminate against you for exercising applicable California privacy rights.
Washington Consumer Health Data
Washington law may provide additional rights concerning consumer health data, including rights relating to access, withdrawal of consent and deletion.
Where STRIVE is subject to the Washington My Health My Data Act, STRIVE will provide any additional consumer health data notice, consent mechanism, authorization or other rights required by that law.
Residents of Other States
Residents of other jurisdictions may have similar or additional rights. STRIVE will honor applicable privacy rights as required by law.
14 Children's Privacy
STRIVE is intended for adults and is not directed to children under thirteen (13).
Our Terms of Service currently require account users to be at least eighteen (18) years old.
We do not knowingly solicit personal information from children through accounts that they are not permitted to create. If we learn that information was collected from a child in violation of applicable law, we will take appropriate steps to address the information.
15 Data Storage and Location
STRIVE and its service providers may process and store information in the United States and in other locations where our service providers maintain infrastructure.
Privacy and data-protection laws in those locations may differ from the laws where you reside. Where required, we use legally recognized mechanisms or safeguards for applicable transfers of personal information.
16 Security Incidents and Data Breach Notification
If STRIVE becomes aware of a security incident affecting personal information, we will investigate and respond to the incident in accordance with our security practices and applicable legal requirements.
Where applicable law requires notification to affected individuals, regulators, government agencies or other parties, STRIVE will provide notices in the manner and within the time required by applicable law.
Depending on STRIVE's functionality and the nature of information maintained, certain health-information breach notification requirements may also apply.
17 Changes to This Privacy Policy
We may update this Privacy Policy as STRIVE evolves, our information practices change, or legal requirements change.
When we update this Policy, we will revise the "Last Updated" date shown at the top of this page.
If a change materially affects how we collect, use or disclose personal information, we will provide additional notice or obtain consent where required by applicable law.
18 Contact Us
If you have questions about this Privacy Policy or would like to submit a privacy request, please contact us through the STRIVE Contact page .