Privacy policy
Last updated: 11 November 2026
This policy explains how Monstrum (“we”, “us”) collects, uses and protects your information when you use the Thrivr app, web app and this website. We process personal data in line with applicable law, including India’s Digital Personal Data Protection Act, 2023 and, where it applies, the UK and EU GDPR.
What we collect
- Account details: name, email, phone number, country, age and gender.
- Health and lifestyle information: your PAR-Q+ answers, body metrics, goals, sleep, stress, activity, nutrition and hydration habits, and daily check-ins.
- Training information: your plan, sessions you complete and notes you share with your coach.
- Payment information: handled by our payment provider; we do not store full card details.
- Device and usage data: device type, app version and basic diagnostics to keep the service reliable.
How we use it
- To assess readiness, write and adapt your programme, and deliver live coaching.
- To route any medical flag to physician review before training begins.
- To manage your membership, payments and support requests.
- To send service messages such as session reminders and renewal notices.
We never sell your data. Your PAR-Q+ answers are visible only to the clinical team; coaches see what they need to train you safely.
Consent and your choices
We ask for your consent before collecting health information. You can withdraw consent, access, correct or delete your data at any time from the app or by emailing us. Withdrawing consent may mean we can no longer provide coaching.
Reserving a spot on our website
If you reserve a spot before launch, we collect your name, email, WhatsApp number, the plan you are interested in and the days and times that suit you. We use them only to contact you about your reservation and the early-bird offer. If you do not join, we delete them within 90 days of launch. Ask us at any time and we will delete them sooner.
Employer-sponsored memberships
If your organisation pays for your membership, it receives only aggregate, anonymised reports. It does not see your individual answers, logs or notes.
Sharing
We share data only with service providers who help us run Thrivr (hosting, email, payments, video calls), including Netlify, which hosts this website and receives reservations, under contracts that require them to protect it, or where the law requires.
Security and retention
Data is encrypted in transit and stored with access controls. We keep it while your account is active and delete or anonymise it within a reasonable period after you close your account, unless the law requires us to keep it longer.
Grievance Officer
To access, correct or delete your data, withdraw consent, or raise a complaint about how we handle it, write to our Grievance Officer, Shubham Vashist, Founder and Director, at grievance@thrivr.in, or by post to Monstrum, New Delhi, India. We acknowledge requests within 48 hours and respond within 30 days.
Contact
Questions or requests: contact us, or see our contact page.