Privacy Policy
Last updated: July 15, 2026
This Privacy Policy explains how Mandelbrot Productions LLC (“The Tribe of Giants,” “we,” “us”) collects, uses, shares, and protects your personal information when you use The Tribe of Giants at tribeofgiants.com(the “Service”), and the rights you have over your information. We are the “controller” of your personal information.
1. Information we collect
- Account information — your name and email when you sign up, or the basic profile details Google shares if you use Google sign-in. Passwords are handled by our authentication provider and stored only in hashed form.
- Profile & community content — an optional profile photo, bio, and location; posts, comments, reactions, and private messages you choose to create.
- Your journey data — your intake answers, growth focus, progress, and the reflections and notes you write. Some of this may reveal sensitive information about your emotional or mental wellbeing. We treat it as private to you (see Section 4) and use it only to provide the Service.
- Payment information — processed by Stripe. We never receive or store your full card number; we keep only a customer/subscription reference and your subscription status.
- Usage & device data — standard log and device information (such as IP address, browser type, and pages viewed) needed to operate, secure, and improve the Service, including for rate-limiting and bot/abuse prevention.
- Attribution data — how you arrived at the Service (for example, a referral code or campaign tag), stored in a first-party cookie. See our Cookie Policy.
2. How we use your information
We use your information to:
- provide the journeys, community, and AI features, and save your progress across devices;
- create and secure your account and process your subscription;
- respond to you and provide support;
- send you service and, if you opt in, engagement or marketing emails (you can unsubscribe anytime);
- detect, prevent, and address fraud, abuse, and security issues; and
- comply with law and enforce our Terms.
Legal bases (for users in the EEA/UK). We process your information to perform our contract with you (providing the Service), based on your consent (for optional marketing and any sensitive data you provide), for our legitimate interests (securing and improving the Service), and to comply with legal obligations. You can withdraw consent at any time.
3. How AI features use your information
Journey content is assembled with AI (such as OpenAI and Anthropic) strictly from Nicholas Townsend Smith’s own source material. When you use an interactive AI feature such as Rimi, the messages you send are processed by our AI providers to generate a response. We do not sell this information, and our providers act as our processors. Full details, including limits and how to avoid sharing sensitive details, are in our AI Usage Policy.
4. Your reflections are private
Your reflections, notes, and progress are protected at the database level by row-level security so that only you can access them — plus any coach or person you explicitly choose to share with, which you can revoke at any time. Our staff do not read your private reflections except in the narrow cases needed to operate the Service (for example, diagnosing a technical problem you report, or where required by law).
5. When we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with:
- Service providers (processors)who run the Service under contract: Supabase (database & authentication), Vercel (hosting), Stripe (payments), Resend (email delivery), Cloudflare (bot/abuse protection), OpenAI and Anthropic (AI features), Google (optional sign-in), and Giphy (optional GIF search). They may process your information only on our instructions.
- Other members — but only the information you choose to make visible (your profile, community posts, and messages you send).
- Legal & safety — when required by law, to enforce our Terms, or to protect the rights, safety, and property of our members or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. Data retention
We keep your information while your account is active and as needed to provide the Service. When you delete your account, we remove your profile, progress, reflections, entitlements, and sharing records, and cancel any active subscription. We may retain limited records where we must for legal, tax, security, or dispute-resolution reasons, and backups are cycled out on a rolling basis.
7. Data security
We protect your information with encryption in transit, database-level row-level security so users can reach only their own data, hashed passwords, rate-limiting, and bot protection. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you and regulators of a breach where required.
8. Your privacy rights
You can view and update much of your information, and permanently delete your account and associated data, under Account settings. Depending on where you live — for example under the EU/UK GDPR or the California CCPA/CPRA — you may also have the right to:
- Know / access the personal information we hold about you and how we use it;
- Correct inaccurate information;
- Delete your information;
- Port a copy of information you gave us;
- Opt outof any “sale” or “sharing” of personal information (we do neither) and limit the use of sensitive information;
- Withdraw consent and object to or restrict certain processing (EEA/UK); and
- be free from discrimination for exercising these rights.
How to exercise your rights. Email mandelbrotllc@gmail.com from the address on your account, or use the tools in your settings. We will verify your request and respond within the time the law requires. You may use an authorized agent, and if we decline a request you may appeal by replying to our response. EEA/UK and other users may also complain to their local data-protection authority.
9. Cookies
We use only essential and first-party cookies — for example, to keep you signed in and to remember how you found us. We do not use third-party advertising trackers. See our Cookie Policy.
10. International transfers
We operate in the United States, and our providers may process information there and in other countries. Where we transfer information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.
11. Children
The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy and will revise the date above; material changes will be highlighted or notified where appropriate.
How to reach us
Mandelbrot Productions LLC (“The Tribe of Giants,” “we,” “us”). You can reach us by email at mandelbrotllc@gmail.com for any question about this or any other policy.
Our policies: Terms of Service · Privacy Policy · AI Usage Policy · Billing & Refund Policy · Disclaimers · Community & Acceptable Use · Cookie Policy · Copyright / DMCA