Mountains Privacy Policy

Effective date: October 23, 2026 Last updated: October 23, 2026

This Privacy Policy explains how Twelve Twenty Seven LLC ("we," "us," or "our") collects, uses, shares, and protects information when you use the Mountains mobile app, the website at themountainsapp.com, and related services (together, the "Service").

If you have questions, email us at ryan.kuenneke@twelvetwentyseven.com.

1. The short version

• Mountains is a family and household planning app. We collect what we need to run it: your account details, your household ("Hut") information, and the plans, goals, and events you create.
• We don't sell your personal information. We don't show ads, and we don't use your data for advertising.
• Adults must be 18 or older. Teens 13–17 can join a Hut as members. Children under 13 can't create accounts. A parent or guardian can add a simple profile for a child.
• If the Hut owner connects Google Calendar, we send Hut events to that calendar, including events for kids. For each event we send only the title, start and end times, time zone, and whether it is all day. We never send member names or other identifiers.
• You can delete your account from Profile. Open Profile from the icon at the top of Home, then choose Delete Account. A deletion waits 30 days, and signing back in during those 30 days restores the account. You can also delete it permanently now. Deleting does not cancel an Apple subscription.

2. Key terms

• Hut: a household group in Mountains. A Hut has an owner and members.
• Mountain: a goal that you or your Hut is working toward.
• Step: a calendar event linked to a Mountain.
• Village: a coming-soon tab. It shows a note that Huts may later share household goals across families, and it does not create, join, or display a Village or any Hut data.
• Kid profile: a profile a parent or guardian creates for a child in the Hut. The child has no email and no login, and children don't sign up themselves.

3. Information we collect

3.1 Information you give us

3.2 Information from sign-in providers

If you sign in with Apple or Google, the provider shares basic information with us, usually your name, your email address, and a unique account identifier. If you use Apple's "Hide My Email," we receive a private relay address instead of your real email. We don't receive your Apple or Google password. The app sends the Apple or Google identity token to sign you in. When Apple gives the app an authorization code at sign-in, we exchange it for a refresh token and store that token encrypted. We do not keep the authorization code. When you delete your account, we ask Apple to revoke the refresh token. If the Sign in with Apple key is not set, or no refresh token is stored, we still delete the account and skip the revoke.

3.3 Information collected automatically

When you use the Service, our systems may automatically record limited technical information: device type, operating system and app version, time zone, IP address, timestamps, and error or crash logs. We use it to keep the Service working, secure, and reliable.

The mobile app does not include an analytics or crash-reporting SDK. It does not include Sentry, PostHog, or Expo Insights.

We don't use cookies or trackers for advertising. We don't track you across other companies' apps or websites.

3.4 Information we don't collect

We don't collect your precise location, your phone contacts, your photo library, or your health data. The only device permission the app requests is the camera, and only to scan a Hut invite QR code. Microphone access for that camera is turned off.

4. How we use information

We use information to:

1. Provide, operate, and maintain the Service, including Huts, Mountains, Steps, kid profiles, and the Village tab.
2. Create and secure your account, confirm your age, and prevent fraud and abuse.
3. Send service messages, such as sign-in links, Hut invitations, and important account notices.
4. Sync events to Google Calendar if the Hut owner turns this on, including events for kids, without member names or identifiers.
5. Respond to support requests.
6. Fix bugs and improve the Service.
7. Comply with the law and enforce our Terms of Service.

We don't use your information for advertising, and we don't sell it. If we ever want to use personal information for a purpose that is materially different from what this policy describes, we'll ask for your consent first.

5. How we share information

We share personal information only as described here.

5.1 Within your Hut

Mountains is a shared app. Other members of your Hut can see the information you add to the Hut, such as your name, birthday, the Mountains and Steps you share, and kid profiles. Think about this before adding information you don't want your household to see.

5.2 Service providers

We use a small number of service providers to run Mountains. They process data only on our behalf and under our instructions, and we require them to protect it at least as well as this policy does.

5.3 Legal and safety reasons

We may disclose information if we believe in good faith it's required to comply with the law or legal process, to protect the rights, safety, or property of our users, the public, or us, or to investigate fraud or security issues.

5.4 Business transfers

If we're involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal. We'll notify you, and this policy (or one at least as protective) will continue to apply. Where the law or a platform policy requires it, such as Google's policy for Google user data, we'll ask for your consent first.

5.5 With your permission

We'll share information in other ways only if you tell us to.

6. Google Calendar sync (optional)

The Hut owner can choose to connect one Google Calendar to the Hut. When it's connected:

• What we send to Google: for each synced Hut event, including events for kids, only the title, start and end times, time zone, and all-day flag, plus a repeat rule when the event repeats. We don't send member names, attendee lists, kid profiles, or other Hut data.
• We don't read other events from your Google Calendar. Sync only creates, updates, or deletes the Google event that corresponds to a Hut event.
• How we store access: we store the Google authorization tokens encrypted, and use them only to sync events you've asked us to sync.
• Disconnecting: the Hut owner can disconnect Google Calendar in the app at any time. You can also revoke access from your Google Account at https://myaccount.google.com/permissions. When you disconnect, we delete the stored tokens and mark the connection disconnected. Events already on the Google Calendar stay there. We do not ask Google to remove them. Events in the Hut stay too.

Mountains' use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, and we don't let people read it except as that policy allows (for example, with your consent, for security, or to comply with the law).

7. AI Assistant (planned feature; not currently available)

This section applies only if and when we launch the AI Assistant. As of the effective date, the feature is not live. We'll update this policy and ask for your permission in the app before the feature starts sending any of your data to a third party.

If the AI Assistant launches:

• What it does: you can speak or type a request, such as "add soccer practice every Tuesday," and the Assistant drafts a Mountain, Step, or event for you.
• Who processes it: your voice recording or text is sent to OpenAI to transcribe speech and draft suggestions. We'll ask for your explicit permission before the first time any data is sent.
• You stay in control: nothing is saved to your Hut until you review and confirm it.
• No AI for kids: the AI Assistant is not in the app today, and there is no kid session that could use it. Kid profiles are not sent to an AI provider.
• Retention: [PLACEHOLDER: state whether we keep the audio or text and for how long, and OpenAI's retention under our agreement, e.g. "We don't store audio after transcription. Under our agreement, OpenAI doesn't use API data to train its models and keeps it for no more than [X] days for abuse monitoring."]
• You can turn the Assistant off at any time in [PLACEHOLDER: settings location].

8. Children's privacy

Mountains is a general-audience family planning app. It is not directed to children, and children under 13 cannot create their own accounts.

Kid profiles are created by parents. An adult (18+) in a Hut who is the child's parent or legal guardian may create a kid profile. By creating one, you confirm that you are the child's parent or legal guardian and that you consent to us collecting and using the child's information as this section describes.

• What we collect for a kid profile: the child's name, a full birthday date, and gender only if the parent enters it. Gender is not required and may be left blank. The parent enters these. The child does not.
• How we use it: only to show the child within your Hut and to help your household plan, for example by showing birthdays and assigning Steps.
• Who sees it: members of your Hut. We don't share a child's information with third parties except the service providers who host and run the Service (Section 5.2), and never for advertising.
• Google Calendar and AI: when the Hut owner has connected Google Calendar, kid events sync with other Hut events. The Google event carries no member name or identifier, and we do not send the kid profile itself. The AI Assistant is not available, and kid information is not sent to it.
• There is no kid session. A child cannot sign in, and a child cannot enter information in the app. A parent or guardian adds the profile from Home: name, birthday, gender if they choose to enter it, and a confirmation that they are the parent or guardian. Gender can be skipped. The child has no email, no login, and no invite.

Parent rights. A parent or guardian can at any time:

• review the information in their child's kid profile;
• correct it;
• ask the Hut owner to remove the kid profile. Removal is a soft delete: the Hut seat is marked removed, the display name is cleared, and the seat's invited name is cleared. The profile row remains, including the birthday and gender if they were saved. Mountains that belong to that profile stay; and
• refuse further collection by asking the Hut owner to remove the profile. That removal is the soft delete above. It does not erase the birthday, gender, or Mountains.

You can review and edit a kid profile in the app. You can also delete your account from Profile, as Section 9 describes. For a question about a child's information, email ryan.kuenneke@twelvetwentyseven.com.

Teens (13–17). Teens may join a Hut as members with their own sign-in, usually by invitation from an adult in the household. We don't sell teens' personal information or use it for advertising.

If you believe we've collected personal information from a child under 13 without a parent's consent, contact us at ryan.kuenneke@twelvetwentyseven.com and we'll delete it promptly.

9. Data retention and deletion

• While your account is active, we keep your information so we can provide the Service.
• Deleting your account: from Home, open Profile with the icon at the top, then choose Delete Account. You can delete the account in 30 days, or delete it permanently now. During those 30 days your name is hidden from other Hut members. Signing back in during those 30 days restores the account. After 30 days, or if you choose Delete permanently now, we permanently delete the account, including the sign-in record. We also ask Apple to revoke the Sign in with Apple token. If that revoke cannot run, the account is still deleted.
• An owner's Hut: permanent deletion does not transfer ownership. If you own a Hut, permanently deleting your account deletes that Hut and everything in it: its kid profiles, Mountains, steps, and any Google Calendar connection and tokens. Other members lose access to that Hut. Their own accounts stay. Before you delete, the confirm sheet says this and offers Transfer ownership first. Transfer ownership is separate. You pick another adult member who is 18 or older, confirm, and ownership moves. You stay in the Hut as a member.
• A member's account: if you are not the owner, the Hut stays for the other members. Mountains, steps, and events that belong to your profile are deleted with your account. Kid profiles you added are deleted with your account.
• Backups: deleted data may remain in encrypted backups for up to [PLACEHOLDER: e.g. 30] days before it's overwritten.
• Legal holds: we may keep limited information when the law requires it, for example purchase records. If so, we'll tell you what we keep.
• Children's information is kept while the kid profile exists. A soft delete by the Hut owner clears the display name and marks the seat removed. The profile row, birthday, optional gender, and that profile's Mountains remain. Those are deleted when the Hut is permanently deleted with the owner's account, or when the guardian's account is permanently deleted.
• Subscriptions: deleting your account does not cancel an Apple subscription. Cancel it in your Apple ID settings (https://apps.apple.com/account/subscriptions). The confirm sheet says this and links there.

10. Your choices and rights

Wherever you live, you can:

• Access and update your information in the app.
• Delete your account from Profile. Open Profile from the icon at the top of Home, then choose Delete Account (Section 9). Signing out does not delete your data.
• Disconnect Google Calendar. When you delete your account we ask Apple to revoke the Sign in with Apple token. You can also revoke Apple or Google sign-in in that provider's account settings.
• Withdraw consent for optional features, such as the AI Assistant, at any time, once those features exist.
• Contact us at ryan.kuenneke@twelvetwentyseven.com to request a copy of your data or to ask any privacy question.

We'll respond within a reasonable time, and within any deadline the law sets. We may need to verify your identity first. We won't treat you differently for exercising your privacy rights.

10.1 California residents

If the California Consumer Privacy Act (CCPA), as amended by the CPRA, applies to us, California residents have the right to:

• Know what personal information we collect, use, and disclose, and to get a copy;
• Delete personal information;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information. We don't sell or share personal information for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the information of consumers under 16;
• Limit the use of sensitive personal information. We use sensitive information, such as account sign-in credentials, only to provide the Service; and
• Not be discriminated against for exercising these rights.

Categories collected in the past 12 months: identifiers (name, email, account ID, IP address); personal information under Cal. Civ. Code § 1798.80 (name); characteristics of protected classifications (age or birthday, and optional gender for kid profiles); internet or other electronic network activity (app usage and error logs); and, if the AI Assistant launches, audio information (voice input). Sources: you, members of your Hut, and sign-in providers (Apple, Google). Purposes: those in Section 4. Disclosed to: the service providers in Section 5.2, for business purposes only.

To make a request, email ryan.kuenneke@twelvetwentyseven.com. You may use an authorized agent. We'll verify your identity and the agent's authority before acting on the request.

10.2 Other U.S. states and other countries

Residents of other states with privacy laws may have similar rights, and we'll honor them as those laws require. Mountains is operated from the United States, and data is stored in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. [PLACEHOLDER: decide whether to offer the app outside the U.S. If you do, have counsel add GDPR/UK sections.]

11. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. These include encryption in transit, encrypted storage of third-party access tokens, access controls that limit who can see Hut data, and limited staff access. No system is perfectly secure, so please use a strong password and keep your devices secure. If a data breach affects you, we'll notify you as the law requires.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you in the app or by email before they take effect, and update the "Last updated" date above. If a change affects children's information or how we use Google user data, we'll ask for consent again where required.

13. Contact us

Twelve Twenty Seven LLC 1481 Russell Dr N, St. Petersburg, FL 33710, USA Email: ryan.kuenneke@twelvetwentyseven.com