Privacy Policy
What we collect
- Phone number — used to sign you in via one-time SMS code, and to let people in your circle reach you. We don't share it publicly.
- Display name — first name or initials. You choose what to show.
- Messages, check-ins, and signals — content you create in the app, stored so the app works across devices.
- Approximate location — only when you tap "Find Meetings," used to look up nearby meetings. We don't track your location in the background.
- Push notification token — only if you opt in to notifications. Used to send the reminders and alerts you've requested.
- Basic usage events — taps and screen views, used to fix bugs and improve the product. No advertising profiles.
What we don't collect
- We don't ask for your last name, email, address, or government ID.
- We don't access your contacts, photos, microphone, or camera.
- We don't track you across other apps or websites.
- We don't sell or rent your data to anyone, ever.
How we use it
- To run the app: sign-in, your circle, messages, check-ins, meetings.
- To send notifications you've opted in to.
- To diagnose problems and improve the product.
- To send AI-assisted support replies when you use the Need Support or Sponsor features. The text of those messages is sent to OpenAI to generate a response (see "Service providers" below).
Service providers
We use a small number of trusted vendors to operate the app. They process data only to provide their service to us:
- Supabase — database and storage for your account and content.
- Twilio — sends the SMS code when you log in.
- Heroku — hosts the app servers.
- OpenAI — generates AI replies in the Need Support and Sponsor features. Your messages are sent only when you use those features.
Anonymity and your circle
Anonymity is a tradition of the recovery program and we treat it that way. Other people in the app see only what you choose to share with them: your display name, your check-ins, and any messages you send them directly. People outside your circle don't see your activity.
How long we keep it
We keep your data while your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to keep records (for example, abuse logs).
Your choices
- Edit or delete your data — most data can be edited in the app. To delete your account or request a copy of your data, email us (below).
- Notifications — turn them on or off any time in Settings → Notifications.
- Location — only requested when you tap "Find Meetings"; you can deny it.
Children
Fellowship is intended for adults (17+). We don't knowingly collect data from anyone under 13. If we learn we have, we'll delete it.
Security
We use industry-standard practices: HTTPS for all traffic, encrypted database storage, HttpOnly session cookies. No system is perfect; if you believe you've found a security issue, please email us.
Changes to this policy
We'll update the date at the top when we change this policy. For material changes, we'll notify you in the app.
Contact
Questions, deletion requests, or security reports: privacy@thefellowship.app