Skip to main content
TEXIAN

Privacy Policy

Last updated: March 2026.

1. Introduction

Texas Nationalist Movement Inc. ("TNM," "we," "us," or "our") operates the TEXIAN platform ("the Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform, including our website and mobile application.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, chosen handle (username), and county of residence. You may optionally provide a phone number and profile photo.

User-Generated Content: Posts, comments, replies, images, videos, GIFs, and other content you create or share on the Platform.

Relational Organizing Data: If you use the Network feature, you may record names of personal contacts and conversation notes. When using the "Find Your People" phone contact matching feature, your phone numbers are hashed (SHA-256) on your device before being sent to our servers. We never receive or store your raw phone numbers from this feature.

Location Data: With your explicit permission, we collect foreground GPS location data solely for event check-in verification. We do not track your location in the background or at any other time. Location data collected for event verification is retained only for the duration of the event and deleted within 30 days after the event concludes.

Device Information: Push notification tokens (via Expo Push Notification service) to deliver notifications to your device. We do not collect device identifiers for advertising purposes. We do not collect or use advertising identifiers (IDFA/GAID).

Usage Data: We collect information about how you interact with the Platform, including pages visited, features used, and actions taken, to improve the Platform and your experience. This data is collected and stored on our own infrastructure and is not shared with third-party analytics providers.

Payment Information: If you make a donation or purchase a membership, payment information is collected and processed directly by Stripe (web) or Apple/Google (mobile in-app purchase). We do not store your credit card number or bank account details on our servers.

Address Information: If you provide your address for district mapping, it is transmitted to our geocoding providers (Geocodio and/or Google Maps API) solely to determine your county, state house district, and state senate district. Your full address is not stored by these providers beyond the geocoding request.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform
  • Authenticate your identity and secure your account
  • Deliver notifications via email, SMS, and push notifications (see Section 4)
  • Facilitate county-level organizing, events, and community features
  • Operate our gamification system (points, tiers, badges, leaderboards)
  • Moderate content and enforce our Community Guidelines
  • Respond to your requests and provide customer support
  • Analyze usage patterns to improve features and performance (using only first-party data on our own infrastructure)

4. Communications

Email: We send emails from three domains: mail.texian.app (account verification, password resets, and other transactional messages), notify.texian.app (notification emails such as replies, mentions, event reminders, and organizing alerts), and news.texian.app (periodic digests and organizational updates). By creating an account, you consent to receive transactional emails necessary for account operation. Notification and digest emails are enabled by default but you may manage your preferences per category or opt out entirely in Settings. Every non-transactional email includes a one-click unsubscribe link compliant with RFC 8058 and CAN-SPAM requirements.

SMS: If you provide your phone number during registration or onboarding, you consent to receive SMS messages from Texas Nationalist Movement Inc. via Twilio, including account verification codes and messages from your County Coordinator. Message frequency varies. Standard message and data rates may apply. You may opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance. Carrier surcharges may apply.

Push Notifications: If you enable push notifications on your mobile device, we send notifications via the Expo Push Notification service. You may manage notification categories or disable push notifications entirely in your device settings or within the app under Settings.

5. Third-Party Service Providers

We share information with the following service providers only as necessary for them to perform services on our behalf:

  • Supabase — Database hosting, user authentication, file storage, and real-time features
  • Stripe — Payment processing for memberships and donations (web)
  • Apple App Store / Google Play — In-app purchase processing (mobile)
  • Twilio — SMS message delivery for verification and County Coordinator outreach
  • Mailgun — Email delivery for transactional, notification, and digest emails
  • Mux — Video streaming and processing for livestreams and media library
  • Jitsi — Video meeting infrastructure
  • Expo — Mobile app push notification delivery and over-the-air updates
  • Giphy — GIF search functionality (search queries are sent to Giphy)
  • Vercel — Web application hosting and deployment
  • Geocodio / Google Maps API — Address geocoding for county and legislative district determination
  • Cloudflare Turnstile — Bot protection and CAPTCHA verification
  • Givebutter — Donation transaction synchronization

We do not sell your personal information to third parties. We do not share your information with third parties for their own marketing purposes. We do not share data with political data brokers, voter file services, or advertising networks.

6. Cookies & Tracking

We use essential cookies for authentication and session management (Supabase session cookies). These are necessary for the Platform to function and cannot be disabled. We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking or ad networks.

We track clicks on shared content cards (using first-party analytics only) to measure the effectiveness of organizing campaigns. No data from this tracking is shared with third parties.

7. Data Retention & Deletion

We retain your account data for as long as your account is active. Specific retention periods:

  • Account data: Retained while your account is active
  • Location data: Event check-in GPS data is retained for 30 days after the event, then deleted
  • Supporter claims: Unclaimed supporter matches expire after 60 days
  • Push notification tokens: Removed when you log out or uninstall the app
  • Email/SMS logs: Delivery status logs retained for 90 days for troubleshooting

You may:

  • Export your data at any time via Settings > Privacy, which provides a downloadable file containing your profile, posts, comments, contacts, conversations, and gamification data.
  • Delete your account via Settings > Privacy. Account deletion removes your profile and personal data. Some content (such as posts in group discussions) may be retained in anonymized form to preserve conversation context.

We may retain certain information as required by law or for legitimate business purposes such as fraud prevention and legal compliance.

8. Children's Privacy

The Platform is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected information from a minor, we will take steps to delete that information promptly.

9. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption in transit (TLS/HTTPS) for all data transmission
  • Row-Level Security (RLS) policies on all database tables
  • Secure authentication via Supabase Auth with session management
  • Rate limiting on API endpoints and sensitive actions
  • Webhook signature verification for all third-party integrations
  • Client-side SHA-256 hashing of phone numbers before transmission for contact matching

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email within 60 days of discovering the breach, as required by the Texas Data Privacy and Security Act. We will also notify the Texas Attorney General if the breach affects 250 or more Texas residents.

11. Your Rights Under the Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you have the following rights under the TDPSA (effective July 1, 2024):

  • Right to Know: You may request confirmation of whether we process your personal data, and access the categories and specific data we hold
  • Right to Correct: You may correct inaccurate personal data via your profile settings or by contacting us
  • Right to Delete: You may request deletion of your personal data via Settings > Privacy or by contacting us
  • Right to Data Portability: You may export your data in a portable format (JSON) via Settings > Privacy
  • Right to Opt Out of Sale: We do not sell your personal data. If we ever change this practice, we will provide a clear opt-out mechanism
  • Right to Opt Out of Targeted Advertising: We do not engage in targeted advertising. No advertising SDKs or tracking pixels are used on the Platform
  • Right to Opt Out of Profiling: We do not engage in profiling that produces legal or similarly significant effects

To exercise any of these rights, visit Settings > Privacy or contact us at support@texian.app. We will respond to your request within 45 days. If we need additional time, we will notify you of the extension (up to 45 additional days) and the reason.

If we deny your request, you may appeal by contacting us at support@texian.app with the subject line "Privacy Rights Appeal." We will respond to your appeal within 60 days. If we deny your appeal, you may file a complaint with the Texas Attorney General at texasattorneygeneral.gov.

12. Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal as required by the TDPSA. When your browser sends a Sec-GPC: 1 header, we treat it as a valid opt-out request. Since we do not sell personal data or engage in targeted advertising, the GPC signal is already satisfied by our default data practices.

13. Do Not Sell My Personal Information

We do not sell your personal information. We have not sold personal information in the preceding 12 months. If you have questions about our data sharing practices, contact us at support@texian.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact

For questions about this Privacy Policy or our data practices, contact us at:

Texas Nationalist Movement Inc.
Email: support@texian.app

Text messaging and mobile data

We do not sell, rent, or share your mobile phone number or your SMS opt-in and consent information with third parties or affiliates for their marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party. We use your mobile number only to send the messages you opted in to receive and to operate the messaging program. Reply STOP to any message to opt out.

No mobile information (including text messaging originator opt-in data and consent) will be shared with third parties or affiliates for marketing or promotional purposes.