Privacy Policy — Twelve (Twelve Foundations)
Last updated: 2026-07-11
Twelve is a personal well-being tracker made by PinyaLabs (contact: info@pinyalabs.com).
The short version
Everything you log stays on your phone by default. Creating an account is optional; only then is your data backed up to our server so you can sync across devices. You can delete your account and its server data at any time. We also collect anonymous crash reports.
Data you create
Your pillar choices, daily scores, notes and cycle history are stored in a local database on your device. Deleting the app deletes this local data.
Optional account and sync
Signing in is entirely optional and off by default. If you create an account:
- What we store: your email address and the data you create — pillar choices, daily scores, notes and cycle history — are uploaded to and stored on our server so they can be backed up and synced to your other signed-in devices.
- Where: on a server operated by PinyaLabs in the European Union. We do not sell or share this data with third parties.
- Email: your address is used only for sign-in, password reset and (optional) email verification. Email delivery for these messages is handled by our transactional mail provider, Brevo (Sendinblue SAS, EU).
- Deletion: you can delete your account from Settings at any time. This permanently removes your account and all data synced to the server. Data already stored locally on your device stays there until you delete it or uninstall the app.
If you never sign in, none of the above applies — your data never leaves your device.
Your consent and your rights (GDPR)
Creating an account is the only point where personal data leaves your device, so we ask for your consent there: the signup form requires you to tick a box accepting this Privacy Policy and the Terms of Service before an account is created. We record which version of these documents you accepted, and when, on your account. If we make a material change, we bump that version and ask you to accept again.
The lawful basis for processing your account email and synced content is this consent, which you can withdraw at any time by deleting your account. You also have the right to access your data, correct it, export it and have it erased:
- Access / export: everything stored for you is the content you created; you can see it in the app on any signed-in device.
- Erasure: delete your account from Settings — this permanently removes your account and all server-side data (see “Deletion” above).
- Withdraw consent: same action — deleting the account stops all server processing.
For any of these requests you can also contact us at info@pinyalabs.com.
Data we collect
Crash reports, via Firebase Crashlytics: technical stack traces, device model and OS version, sent only when the app crashes. Crash reports contain no scores, notes, identifiers or anything you typed, and are not linked to your identity. We use them solely to fix bugs.
What we don’t do
- No analytics or behavioral tracking.
- No advertising, no ad identifiers.
- No selling or sharing of your data with third parties.
Notifications
The optional daily reminder is scheduled entirely on your device.
Children
Twelve is a general-audience app and does not knowingly collect personal information from anyone, including children.
Changes
If this policy changes, the updated version ships with the app update and is posted at this page. For material changes we bump the consent version so returning users can be asked to accept the new policy.