Privacy Policy

Work the 12 Steps is a private tool for people in recovery. We collect only what the app needs to connect you with your sponsor, sponsees, and recovery friends. We display only your first name and last initial. We do not sell your information, we do not show ads, and we are not a social network.

This Privacy Policy explains how Philip C Mount LLC ("we," "us," or "Work the 12") collects, uses, and protects your information when you use the Work the 12 Steps application and the website at workthe12steps.com (together, the "Service").

1. Information We Collect

We collect only the information needed to operate the Service:

• Phone number. Your phone number is your primary identity in the app and is used to create your account and to send and receive invitations.
• Name. We collect your first name and last initial only. We do not ask for or display your full last name.
• Sobriety date. Used to calculate your recovery milestones and to display sobriety length within your circle.
• Email address (optional). If you choose to provide it, we use it to send you app updates, account and transactional messages, and support communications.
• Password. Stored only as secure cryptographic hashes and cannot be viewed by us.
• Relationship information. The sponsor, sponsee, and recovery-friend connections you create.
• Recovery activity you enter. Information you choose to record in the app, including meeting logs and attendance history, saved meetings, step-work progress, step assignments and completions, milestones, journal entries, and notes.
• Notification tokens. If you enable push notifications, a device token used only to deliver those notifications to you.

Recovery-related information

Some of the information above - your sobriety date and your recovery relationships - reflects your participation in recovery. We treat this information with heightened care, restrict access to it using the database access controls described in Section 7, and use it only to provide the Service to you and the people you connect with.

2. How We Use Your Information

We use your information solely to provide and improve the Service, specifically to:

• Create and secure your account;
• Connect you with your sponsor, sponsees, and recovery friends through invitations you initiate;
• Track step work and display recovery milestones;
• Send account-related communications you would expect, such as verification codes and important updates.

We do not use your information for advertising, profiling, or sale.

3. What We Show to Others

Work the 12 Steps is built to disappear into the sponsorship relationship, not to broadcast it. Within the app, the people you are connected to may see limited details consistent with recovery practice:

• Your first name and last initial only - never your full name;
• Your sobriety date, sobriety length, and milestones;
• Your phone number, only with people you are directly connected to (for example, your sponsor or a sponsee), so you can reach one another.

We do not expose your email address, your password, or your wider network to other users beyond what these connections require. We do not provide a public directory, and we do not make your profile searchable to strangers.

4. Contacts Access

When you choose to invite someone, the app may help you select that person from your device's contacts. If you do this, the contact information you select is used only to pre-fill that single invitation. We do not upload, store, or retain your address book, and we do not access contacts you do not select.

5. Service Providers

We rely on a small number of trusted third-party providers to operate the Service. These providers process information only to perform services for us:

• Supabase - secure database hosting and authentication;
• Cloudflare - website and application delivery and security;
• Twilio - SMS delivery, invitations, and account verification;
• Resend - sending account and signup-related email.

Each provider is bound to handle information consistent with this Policy. We do not sell or rent your information to anyone.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. You may request account deletion by contacting us at [email protected]. We will take reasonable steps to delete or de-identify the personal information associated with your account, subject to legal, operational, security, and record-integrity requirements.

7. Security

We use industry-standard safeguards to protect your information, including encrypted transport, hashed passwords, and database access controls that restrict each person's data to that person and the connections they have made. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit who can see it.

8. Your Choices and Rights

You may:

• Access or update your profile information within the app;
• Request a copy of your information or ask us to delete your account;
• Decline to provide optional information, such as your email address.

Depending on where you live, you may have additional rights under applicable privacy laws. To exercise any of these, contact us at the address below.

9. Children

The Service is intended for adults in recovery and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you within the Service. Your continued use of the Service after a change means you accept the updated Policy.

11. Contact Us

This Service is operated by Philip C Mount LLC, located in the State of Texas, United States. If you have questions about this Policy or your information, contact us at:

[email protected]

This Policy is governed by the laws of the State of Texas, United States, without regard to its conflict-of-laws principles.