Privacy

What we know about you, and why

We keep as little as we can and we would rather tell you plainly than bury it. This page covers what we collect when you join the tribe, who else touches it, and how to make us stop.

Last updated 27 July 2026

The short version

You give us a name, an email and a phone number so you can have an account and we can reach you about gatherings. That data stays inside the tribe. We do not sell it.

One thing does leave: if you tick the box on your account page, we share your email and phone with Meta so we can show the tribe to you and to people like you on Instagram and Facebook. That box is off unless you turn it on, and you can turn it off again whenever you like.

What we collect

Your email address: Required. It is your account, and it is where sign in links go.
Your name and phone number: Required when you complete your profile, so the tribe knows who you are and we can reach you about a gathering.
A password: Optional, and stored only as a hash. Nobody at the tribe can read it.
Anything else you choose to add: A photo, a short bio, where you are based, your membership tier, the gatherings and collaborators you heart, and the skills you offer to the tribe. All optional, all editable, all deletable by you.
Your facilitator profile: Only if you are a facilitator and only once you publish it. This one is genuinely public, which is the point of it.
Your invite code: Every member gets one. If you joined through someone else's link, we record who invited you.

Why we hold it

To give you an account and let you sign in. To tell you about gatherings and answer you when you write. To run the members side of the site, which is what your tier and your role are for.

That is the whole list. We do not profile you, we do not score you, and no decision about you is made automatically.

Sharing for advertising

This one only happens if you say yes. There is an unticked box when you sign up, and the same box sits on your account page: use my email and phone to show me The Rooted Tribe on social media and advertising platforms, and to help find people like me. It is never required, and saying no changes nothing else about your membership.

Today that means one company: Meta, who run Facebook and Instagram. If you tick the box, your email and phone are included the next time we upload our member list to Meta as a Custom Audience. Meta matches those details against existing accounts so we can show tribe posts to you, and so we can ask Meta to find people who resemble our members. Meta acts as a joint controller for that audience under its own terms. If we ever add another platform we will name it here first.

Untick the box and you are removed from the next upload. If you would rather be pulled out of Meta's side immediately, write to us and we will do it by hand.

We do not run advertising or tracking pixels on this website. If that changes, you will be asked before anything loads.

Who else touches it

Supabase: Our database, sign in and file storage. Everything above lives here.
Vercel: Hosting. Serves the site and keeps short lived server logs.
Resend: Sends your sign in links and the occasional account email.
Meta: Only your email and phone, only if you ticked the box above. Separately, the WhatsApp groups we gather in are Meta's, so anything you post there is between you and WhatsApp under their terms, not ours.

Cookies

We use three, none of which track you across other sites, which is why you are not being nagged by a banner.

Your session: Set when you sign in, so you stay signed in. Strictly necessary.
tt_location: Remembers which tribe location you were last looking at, so the calendar link goes somewhere sensible. A preference, like a language setting.
tt_ref: Set only if you arrived through a member's invite link, so we can credit them once you sign up. Cleared as soon as that happens.

How long we keep it

For as long as you are a member. Ask us to delete your account and we remove your profile and everything attached to it. Some of it may sit in backups for a short while after that before it ages out.

Your rights

You can see, correct, export or delete your data, and you can withdraw any consent you have given without it costing you anything else. Most of it you can do yourself on your account page. For the rest, write to us and we will sort it out.

Depending on where you live, these rights come from the GDPR, the UK GDPR, Indonesia's Personal Data Protection Law or your own state's law. We apply the same standard to everyone rather than sorting members by passport. If you are in the EU or the UK and you think we have got something wrong, you are entitled to complain to your local data protection authority.

Talk to us

Questions, corrections, or you want your account gone: contact@therootedtribe.org. A person reads it.

Your choices live on your account page.