Privacy Policy

1. Who operates TWELVE

TWELVE is operated by The Reign Group, a Washington-based spiritual organization organized under Section 508(c)(1)(A). The Reign Group is the current operator. Its mailing address is 16315 Inglewood Place Northeast, Kenmore, WA 98028, USA.

For privacy questions or requests, email admin@thereigngroup.org. This policy is effective November 9, 2026.

2. Information the platform handles

Depending on the features you use, TWELVE may process:

• Account and sign-in information: email address, Supabase Auth account identifier, authentication status, and account-security/session information. Password authentication is handled through Supabase Auth.
• Google sign-in information: if you choose Google sign-in, Google and Supabase Auth process the account identifier and identity details returned under the permissions shown during sign-in, which may include your email address, name, or profile image.
• Member profile and preferences: name or display name, headline, pronouns, biography, city, state, country, avatar, website and social links, profile visibility, and member-provided skill information.
• Membership information: membership tier and plan, active status, start or creation dates, founding status, and related access or entitlement information. The current application has no active checkout integration and public membership enrollment is closed; it does not currently collect payment-card details through the reviewed app.
• Stay Close information: name, email, optional city/community, skills and hopes, the page where a request began, consent date and version, informational tier interest, and email preference or unsubscribe status. A tier-interest selection is not a membership application or purchase.
• Community and participation content: depending on the feature, posts and updates, messages, skills, nominations or applications, Community Development Fund proposals, votes, project and milestone records, Turnout responses, and participation history. Some of this may be visible to other members or publicly when the relevant visibility or publication controls allow it.
• CREATΣ Handbook information: daily wellbeing scores, intentions, weekly reflections, Life Area Analysis scores and weights, assessment results and strengths, causes, and goals or milestones. These are member-provided personal records and may reveal sensitive experiences.
• Media: profile images and Turnout media stored through Supabase Storage, and Vlog video and related metadata processed through Mux when that feature is used.
• Technical information: session cookies and operational request or service logs generated by the application and its hosting or service providers. Exact log fields and retention periods have not been verified.

3. How information is used

• To sign members in and maintain account sessions.
• To verify membership access and provide the features associated with the member’s current tier.
• To operate profiles, community participation, the CREATΣ Handbook, Turnouts, and member-created media features.
• To send Stay Close messages when the person has given the required email consent, to process confirmation requests, and to honor unsubscribe choices.
• To protect the platform, investigate technical problems, enforce access rules, and administer the community.

4. Visibility and community sharing

Profile fields can have public, member-only, or private visibility where the feature offers those choices. Updates, participation activity, and Vlogs may be displayed to the audiences allowed by their publication and access settings. Review those settings before posting or publishing.

Direct messages are restricted to their conversation participants by the current application controls. Admin status alone does not grant access to read private message contents. Other records, such as nominations, assessments, or Handbook entries, have their own access controls and are not intended to be public by default.

Uploading a Vlog or accepting the general Terms does not, by itself, grant TWELVE production rights. Those rights require express authorization through a separate participation agreement.

5. Service providers and external services

The current application uses service providers to operate specific features. They receive information needed for those services and handle it under their own terms and privacy practices.

• Replit: application hosting and runtime.
• Supabase: authentication, database services, and storage for profile and participation media.
• Resend through Replit Connectors: delivery of Stay Close welcome, confirmation, and campaign emails. Email addresses and message content needed for delivery are shared with this service.
• Mux: video upload processing, playback, and related media delivery for Vlogs.
• Google Fonts: the site requests the JetBrains Mono font from Google Fonts. That browser request can disclose technical connection information to Google.
• Google OAuth through Supabase Auth: when you use Google sign-in, Google and Supabase process the information needed to authenticate you and establish your TWELVE account session.
• YouTube: a privacy-enhanced YouTube embed may load when a public preview video is configured and a visitor chooses to play it. YouTube may then receive browser and connection data.

The Reign Group does not sell personal information. It may disclose information to the service providers above when needed to operate TWELVE, deliver a feature, protect the service, or comply with law. These service-provider disclosures are not sales of personal information. No analytics or advertising-pixel integration was found in the application source reviewed for this policy; that source review does not establish what technical logs a hosting or infrastructure provider may create.

6. Cookies and security

Supabase session cookies are used to maintain sign-in and support protected routes. The reviewed application source does not show an advertising-cookie or analytics-cookie system. External services, such as an embedded video provider, may apply their own technologies when loaded.

TWELVE uses authenticated sessions, server-side membership and administrator checks, and database access controls such as row-level security where configured. No online service can promise perfect security; exact security and incident-notification language requires operator and legal review.

7. Storage and retention

Account and community records are stored in Supabase services. Profile and Turnout media may use Supabase Storage; Vlogs use Mux. Emails are sent through Resend via Replit Connectors. The code reviewed does not establish a complete retention schedule or provider data locations. TWELVE does not promise a fixed deletion period in this policy.

TWELVE intends to delete or de-identify personal information when it is no longer needed, subject to legitimate legal, security, contractual, and operational retention requirements. Appropriate historical records of community projects, milestones, and collective accomplishments may be preserved. Private drafts and unpublished personal material are not public content and receive access protections. Media already authorized for a TWELVE production may remain available only as allowed by the separate participation agreement for that production.

8. Your requests and profile choices

You can update selected profile details and visibility in your account profile. You can unsubscribe from Stay Close email using the unsubscribe link in the message.

You may request access to, correction of, or a copy of your personal information, and request account closure or deletion, by emailing admin@thereigngroup.org. TWELVE may ask for information needed to verify your identity before acting. There is no self-service account-deletion or general data export feature in the application; requests are handled through the contact address. Deletion may be limited where information must be retained for legitimate legal, security, contractual, or operational reasons. Closing an account does not remove rights or obligations that legitimately continue after closure.

9. Age and policy changes

TWELVE is for adults aged 18 and older. People under 18 may not create an account or participate. If The Reign Group learns that a person under 18 has provided personal information, contact us at admin@thereigngroup.org so we can review and take appropriate steps, subject to applicable law.

The Reign Group may update this policy by posting a revised version here with its effective date. Where applicable law requires a different notice or consent process, that process will apply.