DRAFT for General Counsel’s review

Privacy

Last updated October 14, 2026

TLC Thrive (tlcthrive.com) is run by TLC Management, of Marion, Indiana (“TLC”, “we”). It is where TLC learns how residents, staff and families experience each senior living community TLC serves. This page says what we collect, why, who can see it, and how long we keep it.

Who this covers

TLC team members who sign in with their TLC Microsoft account.
Members of the public who sign in with their own Google account.
Residents, family members and staff who take part in a Thriving Conversation or share a story.
Visitors who open the public pages without signing in.

What we collect

When you sign in with Google

We ask Google only for your basic profile: your name, your email address, your profile picture and Google’s ID for your account. We do not ask for your contacts, files, calendar, email or anything else in your Google account. We keep your name, email address, Google account ID, profile picture and the date your account was made, plus your answers and results if you take the Leadership Fingerprint. None of this is joined with TLC’s own data or counted in TLC’s numbers. A public sign-in lasts 4 hours.

When a TLC team member signs in with Microsoft

We keep your name, work email, and your Microsoft account IDs. Once at each sign-in we copy your job title, department, office, start date, manager and work photo from TLC’s staff directory. We do not keep your phone number, home address or employee number.

Thriving Conversations and shared stories

A Thriving Conversation is recorded on a TLC tablet only after the person agrees. A story may be typed or recorded. Nothing leaves the tablet until the person taps Submit. The recording is turned into written words, and then the recording is deleted. Names of residents, and names in criticism, are removed from the written words. If you share a story and tick “Marketing may contact me”, we keep the name and phone number you give us.

Using the site

For signed-in TLC team members we record which kind of page was opened and when, and errors the site runs into, so we can keep it working. We use your internet address only for a minute, to stop too many sign-in tries; we do not store it.

Why we use it

To sign you in and show you your own page.
To understand and improve life for residents and work for TLC’s people.
To keep the site safe and working.

We do not sell your information. We do not use it for advertising. We do not share it with data brokers.

Google user data

TLC Thrive’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use your Google information only to sign you in and to show your name and picture on your own page. We do not share it, sell it, or use it to train AI models.

Who can see it

If you signed in with Google, your page shows only your own things, and only to you.
No conversation transcript or quote ever reaches a community’s leaders.
Written conversations are read only by a small number of named TLC people, and only after names have been removed. Every time one is opened, it is logged.
Quotes never carry a unit, shift, room or medical condition.
Where a group is small, some results are combined or held back so no one can be picked out.

Companies that help us

These companies process information for us, only to run TLC Thrive:

Vercel hosts the site (in the United States).
Supabase stores the data (in the United States).
Microsoft and Google sign people in.
AssemblyAI turns recordings into written words. Its copy is deleted once that is done.
Anthropic helps remove names from written conversations and sort what people said.
Spreaker plays TLC’s podcast.

Cookies

We use only the cookies the site needs to work: to keep you signed in, to finish a sign-in safely, and to remember a visit in progress. Pages can’t read them. We use no advertising cookies and no outside analytics or tracking. A Thriving Conversation that is not finished is kept on the tablet itself until it is sent, so it is not lost.

How long we keep it

Recordings are deleted once the written words are made.
Public accounts and their sign-in records are kept until you ask us to delete them. We plan to clear sign-in records after 90 days and accounts not used for 24 months; that clean-up is not running yet.
Other information is kept while it helps TLC serve residents and staff, or as the law requires.

Your choices

You can ask to see, correct or delete your information, or to close your account. Email nathan.metz@tlcmgmt.com and we will answer. There is no delete button yet. When we delete a public account, it is removed from TLC Thrive’s own database. Your name, email address and picture are also held by the separate service that handles Google sign-in; ask, and we will remove them there too. Depending on where you live, you may have more rights under your state’s law; we honor them.

Children

TLC Thrive is not meant for anyone under 18. We do not knowingly collect information from children.

Keeping it safe

Information is sent over secure connections, stored with access limits, and opened only by people whose work needs it. No system is perfectly safe; if something goes wrong that affects you, we will tell you as the law requires.

Changes

If we change this page, we will update the date at the top.

Contact

TLC Management, Inc.
1800 N. Wabash Avenue, Marion, IN 46952
nathan.metz@tlcmgmt.com