Skip to main content
BridgetAI
Sign in

Privacy Policy

Version 1.2 · effective 28 August 2026

1. Who is responsible

Quantum Co-Creation Pty Ltd (Quantum), ABN 22 162 325 484, develops and operates Bridget AI Coach as a Rise & Thrive Global product. Quantum determines how Bridget account, coaching, service, security and support information is processed and is the principal privacy controller for the platform.

Quantum's address is Level 7, World Trade Center Tower 4, 18–22 Siddeley Street, Melbourne VIC 3005, Australia. Privacy enquiries and complaints may be sent to support@riseandthriveglobal.com.

Where a subscription is billed in euros, Inspira separately handles the billing, invoicing, refund and statutory records it must keep. Quantum performs the equivalent billing role for Australian-dollar subscriptions. Stripe processes payment details for both providers.

2. Information Bridget handles

Depending on how you use Bridget, we handle:

Account and eligibility information:

  • name, email address and country;
  • account type, invitation, activation and subscription status;
  • organisation membership, administrator role and seat status;
  • password credentials in protected hashed form; and
  • consent and acknowledgement records.

Coaching information:

  • the words you enter in a coaching conversation;
  • Bridget's replies;
  • private conversation titles you choose;
  • conversation dates and status; and
  • crisis-detection severity flags, without the matched words being copied into the audit event.

Billing, service and security information:

  • billing country, postcode, tax information, subscription, invoice and payment-status identifiers;
  • IP address and browser or device information;
  • sign-in, consent, account and security events;
  • request identifiers, timestamps and technical errors; and
  • support, privacy, accessibility, billing and incident communications.

Stripe handles full card and bank-account details. Bridget does not store full payment-card numbers or security codes.

3. Where information comes from

We receive information:

  • directly from you when you register, consent, use Bridget, subscribe or contact us;
  • from an organisation when it invites you or manages your eligibility and seat;
  • automatically from the service and your device;
  • from Stripe about subscription, invoice and payment status; and
  • from service providers when they report delivery, security or operational events.

4. Why information is used

We use information to:

  • create, secure and administer your account;
  • provide AI coaching and return your conversation history;
  • enforce consent, privacy, billing, rate and access controls;
  • manage subscriptions, invoices, refunds and organisation seats;
  • protect Bridget and its users from misuse;
  • provide support and respond to privacy or accessibility requests;
  • provide privacy-protected organisation-level adoption information;
  • meet accounting, security and legal obligations; and
  • establish, exercise or defend legal rights where necessary.

Where law requires a legal basis, we rely on the basis appropriate to the activity. This may include performing our contract with you, taking steps you request before a contract, your consent, legitimate interests in safely operating Bridget, and compliance with legal obligations. Withdrawing an essential consent may mean Bridget can no longer provide coaching access.

5. Artificial-intelligence processing

Bridget is an AI system. To generate each reply, the relevant context of your conversation is sent through an encrypted connection to the configured AI provider, currently Anthropic.

This is automated provider processing, not routine human review. Quantum does not use individual conversations for advertising, routine quality review or model training. Anthropic processes the content under its commercial terms and data-processing commitments; API data is not used to train its models by default.

6. Who can and cannot read coaching content

Only you can retrieve your coaching conversations through your authenticated Bridget account. An employer, organisation administrator, Bridget Platform Admin or routine support person cannot read your coaching content through the product.

If an organisation provides your access, it may see membership and privacy-protected organisation-level totals. It cannot see what you discuss, your private titles, when you use Bridget or individual activity after you have joined.

This is a product-access promise, not a claim that decryption is technically impossible. Quantum's backend holds the encryption key so it can return your content to you and prepare your export. Privileged infrastructure access is restricted and audited; no routine support or administrative task requires a person to decrypt coaching content.

7. Service providers and disclosures

We use providers to operate Bridget:

  • Anthropic for AI reply generation;
  • Render and managed PostgreSQL for backend and database hosting;
  • Vercel for frontend hosting;
  • Resend for service email; and
  • Stripe for subscriptions, tax calculation and payments.

Providers receive only the information needed for their role and process it under contractual, security and confidentiality requirements. We may also disclose information where required by law, to protect rights or safety, or as part of a properly managed business transaction.

We do not sell personal information or coaching content and do not use it for advertising.

8. International processing

Quantum is based in Australia and our providers operate internationally. Information may be processed in Australia, the United States, the European Union and other locations used by those providers. Where required, we use contractual and other safeguards for international transfers, including recognised data-protection clauses.

9. Storage and security

Conversation messages, completed conversation backups and private titles are encrypted at application level using AES-256-GCM before storage. Information is also protected by encrypted network connections, access controls, protected environment secrets, logging and monitoring.

The active production encryption key is stored in protected platform secret storage. A separately protected recovery copy is limited to named authorised leaders and used only for controlled recovery. No security measure can remove every risk, so we also maintain incident and recovery procedures.

10. Retention

  • Account data is retained while your account is active.
  • Session transcripts are normally retained for two years after the session date unless you delete them earlier.
  • Billing and tax records are retained for the period required by applicable accounting and tax law.
  • Consent, security and audit records are retained only for the period needed to demonstrate consent, protect the service and meet legal obligations.

A legal hold, dispute, security incident or other lawful exception may require particular information to be kept longer. We delete or de-identify information when the applicable retention period ends.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, export or delete personal information; object to or restrict certain processing; withdraw consent; and complain to a privacy regulator. Withdrawing consent does not affect processing that was lawful before withdrawal.

Available account controls let you export or delete conversations and manage your account. For another privacy request, contact support@riseandthriveglobal.com. We may need to verify your identity. Some information cannot be deleted immediately where law requires retention or a lawful exception applies.

12. Privacy complaints

Send a privacy concern or complaint to support@riseandthriveglobal.com. Please describe what happened and the outcome you are seeking. We will acknowledge and investigate the concern and explain our response.

You may also complain to the privacy regulator available where you live. In Australia this is the Office of the Australian Information Commissioner. In France this is the CNIL. EU and EEA residents may contact the supervisory authority in their country.

13. Adults only

Bridget is for people aged 18 or older. We do not knowingly provide accounts to children. Contact us if you believe a child has supplied personal information.

14. Changes to this policy

The current version and effective date appear above. If we make a material change, we will explain it and, where required, ask for fresh consent before you continue. Earlier versions and consent records are retained where needed to show which information was presented.

Questions about subscriptions and refunds are also covered in the Terms of Service and Refund and Withdrawal Policy.