Privacy Policy
Last updated: 21 October 2026
This policy explains what personal information iThrive collects, why, and your rights. It follows South Africa’s Protection of Personal Information Act (POPIA).
1. Who is responsible
Make a Life CC, trading as The Life You Want (registration CK 1998/040838/23), is the responsible party for your personal information. Our Information Officer is Hanna Kok, contactable at [email protected]. Our legal address is in section 13 of the Terms & Conditions.
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | First and last name, email address, date of birth, password (stored only in scrambled form) | You, when you sign up |
| Contact and profile | Mobile number with country code, time zone | You, and your device or browser (time zone) |
| Consents | Agreement to the Terms, newsletter choice, parent/guardian confirmation for ages 13–17 | You, when you sign up or change settings |
| Access and purchases | Free, subscription, Lifetime or stand-alone access; trial and renewal dates | Our payment and customer system (GoHighLevel) |
| Devices and sign-ins | A device ID, device type, sign-in dates, the devices on your account | The app, when you sign in |
| How you use iThrive | Topics pinned, modules completed | The app |
We do not collect or store:
- Your card details. Card payments are handled by Stripe; our payment system may show us only the card type and the last four digits, so we can help with billing questions.
- Your location (other than country and time zone), your contacts or your photos.
- Your daily reminder settings. These are kept only on your phone.
3. Why we use it
- To create and run your account and give you the content you have access to.
- To enforce the device limit and keep accounts secure.
- To process payments, trials and renewals, and send account emails (for example confirming your email address or a trial reminder).
- To send tips and updates, but only if you ticked the newsletter box. You can unsubscribe at any time.
- To understand, in general terms, where our members are (country codes) and which topics help people, so we can improve iThrive.
We rely on your consent (newsletter, parent/guardian confirmation), on what is needed to provide the Service you signed up for, and on our legitimate interest in keeping the Service secure.
4. Members aged 13 to 17
- A parent or guardian must agree before a 13–17-year-old uses iThrive. The member confirms this when signing up.
- We do not send marketing to members under 18, and they do not see paid offers.
- We do not knowingly collect information from children under 13. If we find an account belonging to a child under 13, we will delete it.
- A parent or guardian can ask us at [email protected] to see, correct or delete their child’s information.
5. Who we share it with
We never sell your personal information. We share it only with service providers who help us run iThrive, under agreements to protect it:
| Provider | What they do | Where the data is held |
|---|---|---|
| GoHighLevel | Customer records, email, payments set-up, trials and renewals | United States |
| Stripe | Card payments | United States and other countries |
| Our web hosting provider | Runs our server and database, and sends our account emails | South Africa |
| Google and Apple | App stores; Apple and Google receive information about app downloads under their own policies | International |
We may also disclose information if the law requires it.
6. Information sent outside South Africa
Some providers, including GoHighLevel, store information outside South Africa, mainly in the United States. We only use providers that are bound to protect it to a standard similar to POPIA. By using iThrive you are informed that your information is transferred this way.
7. How we keep it safe
- Passwords are stored only in scrambled (hashed) form, never in plain text.
- Information travels over encrypted connections (HTTPS).
- Audio and video are delivered only to signed-in members with access.
- Only authorised people at Make a Life CC can see member records.
If we become aware of a security breach that affects your information, we will tell you and the Information Regulator as POPIA requires.
8. How long we keep it
We keep your information while your account is open. If you close your account, we delete or anonymise your personal information within 30 days, except what we must keep by law (for example payment records for tax purposes, usually 5 years).
9. Your rights
You may ask us to:
- tell you what personal information we hold about you;
- correct or update it (you can also do most of this under Profile in the app);
- delete it, or close your account (you can also do this in the app under Profile → Delete my account);
- stop sending you marketing (use the unsubscribe link, or contact us).
Contact our Information Officer at [email protected]. We will reply within 30 days.
10. Deleting your account
You can ask for your account and personal information to be deleted in the app under Profile → Delete my account, or by emailing [email protected]. We stop sending you newsletters straight away and keep your account for 30 days in case you change your mind: signing in again within that time restores it. After that it is deleted.
11. Complaints
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to South Africa’s Information Regulator: inforegulator.org.za.
12. Changes to this policy
We will post any changes here and tell you about significant changes by email or in the app.
13. Members in the UK and European Union
If you live in the UK or the European Union, the UK GDPR or EU GDPR also applies to how we handle your information.
- Legal bases. We use your information to perform our contract with you (your account and access), with your consent (newsletter, parent/guardian agreement; you can withdraw consent at any time), for our legitimate interests (security, preventing account sharing, understanding which topics help people), and to meet legal duties (tax records).
- Extra rights. Besides the rights in section 9, you may ask us to limit how we use your information, object to uses based on our legitimate interests, and receive your information in a portable format.
- Children. In some countries a parent must consent for children up to 16. Our rule that a parent or guardian must agree for every member under 18 covers this.
- Transfers. Your information is processed in South Africa and the United States. We use providers that offer recognised safeguards, such as standard contractual clauses.
- Complaints. You may complain to the data protection authority where you live, for example the Information Commissioner’s Office in the UK.