Privacy Policy

Recovery deserves privacy. This page lays out exactly what Twelva collects, why, and what is yours to control — for the app, and separately for this website.

1. Data Controller

Twelva is the data controller for the information you provide. We treat your privacy with the seriousness recovery deserves — your data is handled in accordance with applicable privacy laws, including the EU GDPR, the California Consumer Privacy Act (CCPA), and the South African Protection of Personal Information Act (POPIA).

2. About this website

Sections 3 onward describe the Twelva app. This section is about twelva.app, the website you are reading now — because a marketing site and an app are not the same thing, and the site loads measurement and advertising tags that the app does not.

This website loads four measurement tools. The first three run on every page; the fourth runs on the home page only.

• Google Analytics 4 (property G-4L2TCZRX2N) — counts page views and clicks on the App Store and Google Play buttons, so we know which pages actually help people find the app. It sets first-party cookies (_ga) in your browser.
• Google Ads (account AW-713080237) — measures conversions when someone reaches a store from an ad, and builds remarketing audiences, which means Google can show you a Twelva ad later because you visited this site. Google sets its own cookies for this, including on google.com and doubleclick.net. This is advertising, and we are naming it rather than leaving it implied.
• Vercel Web Analytics — aggregate traffic and page-performance figures from our host. No cookies, no cross-site identifier.
• A first-party visit counter on the home page — our own endpoint, on our own Supabase project. It records the page path, the referring site, any campaign (UTM) tags on the link you arrived by, a coarse platform label (iOS, Android or desktop), and a random session identifier held in your browser’s sessionStorage so a single visit is not counted twice. No cookies, no name, no email, no account.

What that means honestly: which pages of this website you visit can be seen by Google, and some of those pages are about recovery. If that matters to you — and on a subject like this it reasonably might — you can stop it. Any of the following works:

• Use a browser or extension that blocks tracking scripts, or a private/incognito window.
• Install Google’s own Analytics opt-out add-on.
• Turn off ad personalization in Google My Ad Center.
• Skip the site entirely — go straight to the App Store or Google Play listing. Nothing here is required to use Twelva.

None of this touches your recovery data. These tags run on the website only. They are not in the app, they never see your journal, check-ins, step work, relapse logs or sponsor conversations, and no data you enter in the app is ever sent to an analytics or advertising service.

3. Information We Collect

We collect only what Twelva needs to support your recovery:

• Sobriety date, streaks, and milestones you record
• Step progress and reflections you write
• Mood and HALT check-ins
• Sponsor chat messages you send
• Your name, email, and a stable account ID when you sign in
• Subscription status (managed by Apple or Google)
• Anonymous diagnostics and crash reports

4. How We Use Your Information

Your reflections, journal entries, and check-ins exist to support your recovery — nothing more. We use this data to keep your progress in sync across your devices when you opt in to cloud backup, to let your sponsor companion respond with relevant context, and to make the app stable. We do not profile you, sell your data, or use it to train models.

5. Data Storage & Security

Your reflections and journal entries are stored on your device. They are never uploaded to our servers unless you turn on cloud backup, which is opt-in and stores your data inside our Supabase project (EU region) using row-level security tied to your account. One short, redacted record of your own recovery work does travel with each message you send your sponsor, so that it can answer you and not a stranger. It is not stored on our servers, you can read and delete it, and you can turn it off — see “Sponsor Chat & AI Processing” below. We use industry-standard encryption in transit and at rest. We never sell your personal information, and nothing you write in the app is shared with an advertising service. (The website you are reading does carry advertising and analytics tags — see “About this website” above.)

6. Sponsor Chat & AI Processing

When you send a message to your sponsor companion, the message is routed through FastRouter (an AI gateway) to a large language model — currently Anthropic Claude — to generate a reply. The provider does not retain your messages for training. We do not store your sponsor chat history on our servers; conversations live on your device unless you have cloud backup turned on.

So that your sponsor is the same companion you spoke to last time, it keeps a short record of what you have told it, and that record is sent with each message you write. It lives on your device. It holds only things you actually said or wrote: why you started (from your Step One answer), where your step work has reached — the step and how recently you wrote, never what you wrote — what has helped you through a craving you logged, the relationship (never the name) of anyone in your support network, and from your conversations: what you talked about, anything you said you would do, triggers you named, and what you said helps.

It never contains another person’s name. Names are removed before anything is saved, not only before it is sent. What you write in Steps 4, 8 and 9 — the harms, the amends, the resentments, anything you have never told anyone — is never kept in it and never sent to your sponsor, unless you specifically ask it to review a step with you.

This record is sent to generate a reply and is never stored on our servers. Nothing is sent at all in the two weeks after you log a slip. Your sponsor may use what you wrote you had learned after a past slip; it never uses the slip record itself — not the date, not the count, not the outcome. You can read everything it keeps, and delete any of it or all of it, under Settings › Privacy & Security › “What your sponsor remembers”. You can switch the whole thing off under Settings › Privacy & Security › “Sponsor Knows Your Story”. It is on by default so your sponsor knows you from your first conversation; turning it off takes effect immediately.

7. Third-Party Services

Twelva uses a small set of carefully chosen vendors:

• Apple and Google for authentication, app distribution, and subscription billing
• Supabase for optional cloud backup of your data
• RevenueCat for subscription management
• FastRouter and Anthropic for sponsor-chat AI responses
• Sentry for crash and error reporting

Each vendor sees only the minimum data needed to do its job.

8. Sensitive Information

Recovery is sensitive. Mood check-ins, HALT entries, relapse logs, journal entries, and sponsor chat messages may reveal mental-health and addiction-recovery information about you. We treat all of it as sensitive personal data. It is collected solely to power Twelva's features, never used for advertising or analytics profiling, and never sold. That is a statement about the app: none of it reaches Google Analytics, Google Ads, or any other third-party measurement service. The website’s own tags, described in “About this website” above, see only which pages of twelva.app a browser requested — never anything you have written.

9. Your Rights

You have the right to access your data, correct inaccuracies, request deletion, object to processing, and request a portable copy. You can erase your local data at any time from Settings → Reset All Data. To request deletion of any cloud-synced data tied to your account, see our account deletion page or email us using the address below.

10. Children's Privacy

Twelva is intended for adults in recovery. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Crisis & Safety

Twelva is a recovery companion, not a substitute for professional medical, psychiatric, or emergency care. If you are in crisis, please reach out to 988 (Suicide & Crisis Lifeline, US), SAMHSA at 1-800-662-4357, or your local emergency services. Crisis resources are also available in-app under the SOS tab.

12. Changes to This Policy

We may update this policy as Twelva evolves. We will note material changes in-app and update the date at the top. Continued use after changes constitutes acceptance of the updated policy.

13. Contact

Questions, requests, or concerns about your privacy can be sent to the email below. We read every email.