Privacy Policy
Recovery deserves privacy. This page lays out exactly what Twelva collects, why, and what is yours to control.
1. Data Controller
Twelva is developed and operated by 8t20 Capital LLC. We treat your privacy with the seriousness recovery deserves — your data is handled in accordance with applicable privacy laws, including the EU GDPR, the California Consumer Privacy Act (CCPA), and the South African Protection of Personal Information Act (POPIA).
2. Information We Collect
We collect only what Twelva needs to support your recovery:
- Sobriety date, streaks, and milestones you record
- Step progress and reflections you write
- Mood and HALT check-ins
- Sponsor chat messages you send
- Your name, email, and a stable account ID when you sign in
- Subscription status (managed by Apple or Google)
- Anonymous diagnostics and crash reports
3. How We Use Your Information
Your reflections, journal entries, and check-ins exist to support your recovery — nothing more. We use this data to keep your progress in sync across your devices when you opt in to cloud backup, to let your sponsor companion respond with relevant context, and to make the app stable. We do not profile you, sell your data, or use it to train models.
4. Data Storage & Security
By default, every reflection and journal entry stays on your device. Cloud sync is opt-in and stores your data inside our Supabase project (EU region) using row-level security tied to your account. We use industry-standard encryption in transit and at rest. We never sell or share your personal information with third parties for advertising.
5. Sponsor Chat & AI Processing
When you send a message to your sponsor companion, the message is routed through FastRouter (an AI gateway) to a large language model — currently Anthropic Claude — to generate a reply. The provider does not retain your messages for training. We do not store your sponsor chat history on our servers; conversations live on your device unless you have cloud backup turned on.
6. Third-Party Services
Twelva uses a small set of carefully chosen vendors:
- Apple and Google for authentication, app distribution, and subscription billing
- Supabase for optional cloud backup of your data
- RevenueCat for subscription management
- FastRouter and Anthropic for sponsor-chat AI responses
- Sentry for crash and error reporting
Each vendor sees only the minimum data needed to do its job.
7. Sensitive Information
Recovery is sensitive. Mood check-ins, HALT entries, relapse logs, journal entries, and sponsor chat messages may reveal mental-health and addiction-recovery information about you. We treat all of it as sensitive personal data. It is collected solely to power Twelva's features, never used for advertising or analytics profiling, and never sold.
8. Your Rights
You have the right to access your data, correct inaccuracies, request deletion, object to processing, and request a portable copy. You can erase your local data at any time from Settings → Reset All Data. To request deletion of any cloud-synced data tied to your account, see our account deletion page or email us using the address below.
9. Children's Privacy
Twelva is intended for adults in recovery. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Crisis & Safety
Twelva is a recovery companion, not a substitute for professional medical, psychiatric, or emergency care. If you are in crisis, please reach out to 988 (Suicide & Crisis Lifeline, US), SAMHSA at 1-800-662-4357, or your local emergency services. Crisis resources are also available in-app under the SOS tab.
11. Changes to This Policy
We may update this policy as Twelva evolves. We will note material changes in-app and update the date at the top. Continued use after changes constitutes acceptance of the updated policy.
12. Contact
Questions, requests, or concerns about your privacy can be sent to the email below. We read every email.