Privacy Policy — Twelve (Twelve Foundations)
Last updated: 2026-08-15
Twelve is a personal well-being tracker made by PinyaLabs (contact: info@pinyalabs.com).
The short version
Everything you log stays on your phone by default. Creating an account is optional; only then is your data backed up to our server so you can sync across devices. You can delete your account and its server data at any time. We also collect anonymous crash reports. If you choose to send optional product feedback, that feedback is stored on our server so we can improve the app.
Data you create
Your pillar choices, daily scores, cycle history and any text you write in the app are stored in a local database on your device. “Text you write” means anything a feature invites you to type in your own words: notes on a day, the cue you set for a habit, and any similar short text we may add later. Deleting the app deletes this local data.
Optional account and sync
Signing in is entirely optional and off by default. If you create an account:
- What we store: your email address and the data you create — pillar choices, daily scores, cycle history and the text you write (see “Data you create” above) — are uploaded to and stored on our server so they can be backed up and synced to your other signed-in devices.
- How long: for as long as your account exists. We do not expire or archive your content on our own; it stays available to you until you delete it in the app or delete your account.
- Where: on a server operated by PinyaLabs in the European Union. We do not sell or share this data with third parties.
- Email: your address is used only for sign-in, password reset and (optional) email verification. Email delivery for these messages is handled by our transactional mail provider, Brevo (Sendinblue SAS, EU).
- Deletion: you can delete your account from Settings at any time. This permanently removes your account and all data synced to the server. Data already stored locally on your device stays there until you delete it or uninstall the app.
If you never sign in, none of the above applies — your wellness data never leaves your device. The only optional exception is product feedback you explicitly choose to share (see below).
Your consent and your rights (GDPR)
Creating an account is the only point where personal data leaves your device, so we ask for your consent there: the signup form requires you to tick a box accepting this Privacy Policy and the Terms of Service before an account is created. We record which version of these documents you accepted, and when, on your account. If we make a material change, we bump that version and ask you to accept again.
The lawful basis for processing your account email and synced content is this consent, which you can withdraw at any time by deleting your account. You also have the right to access your data, correct it, export it and have it erased:
- Access / export: everything stored for you is the content you created; you can see it in the app on any signed-in device.
- Erasure: delete your account from Settings — this permanently removes your account and all server-side data (see “Deletion” above).
- Withdraw consent: same action — deleting the account stops all server processing.
For any of these requests you can also contact us at info@pinyalabs.com.
Data we collect
Crash reports, via Firebase Crashlytics: technical stack traces, device model and OS version, sent only when the app crashes. Crash reports contain no scores, notes, identifiers or anything you typed, and are not linked to your identity. We use them solely to fix bugs.
Optional product feedback: if you answer that the app is not helping and choose to send a short comment, we store that comment (and that you declined to rate) on our EU server so we can improve the product. When you are signed in, the feedback is linked to your account and is deleted with your account. When you are signed out, we only send feedback if you explicitly tick a box to share it with the developer; that feedback is not linked to an account. Feedback is never used for advertising and is not sold.
What we don’t do
- No analytics or behavioral tracking beyond the optional feedback above.
- No advertising, no ad identifiers.
- No selling or sharing of your data with third parties.
Notifications
The optional daily reminder is scheduled entirely on your device.
Children
Twelve is a general-audience app and does not knowingly collect personal information from anyone, including children.
Changes
If this policy changes, the updated version ships with the app update and is posted at this page. For material changes we bump the consent version so returning users can be asked to accept the new policy.