Privacy Policy

What we collect

• Account data. Your email address and display name when you sign up, handled by Supabase Auth.
• Profile and progress. Your questionnaire answers, wellness level and score, streak, daily challenge completions, preferred daily start hour, and reminder preference.
• Device metadata. App version and platform, attached to completion events for support and product quality.
• Optional location. Only if you enable a location feature in the future. It is not required for the daily challenge and is not collected today.

We do not sell your personal data, and Twelvia Lite contains no third-party advertising trackers.

How we use your data

• To authenticate you and sync your progression map across your devices.
• To unlock your next daily challenge at the local hour you chose.
• To schedule the optional daily reminder on your device.
• To improve reliability and fix bugs.

We do not use your data for advertising or profiling.

Legal basis

We process account, profile and progress data to perform the service you asked for when you created an account. Optional reminders and any optional location feature rest on your consent, which you can withdraw at any time in Settings. Limited technical data is processed under our legitimate interest in keeping the app working.

Where your data is stored

Data is stored in Supabase, on EU-hosted Postgres, with row-level security so that each user can read and write only their own rows. Authentication tokens are handled by Supabase Auth. Supabase acts as our hosting processor.

Retention and deletion

We keep your data while your account exists. You can delete your account from Settings inside the app, or by writing to support@twelvia.com. We delete or anonymise account and progress data within 30 days of a valid request, except where retention is required by law. Step-by-step instructions are on the deletion page.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, and receive a portable copy. To exercise any of these, email support@twelvia.com. If you are in the European Union you may also lodge a complaint with your national data protection authority.

Children's privacy

Twelvia Lite is not directed at children under 13. Do not create an account if you are under 13. If you believe a child has given us personal data, contact us and we will delete it.

Security

Data is transmitted over encrypted connections and protected at rest by our hosting provider. Row-level security isolates each account. No system is perfectly secure, so we keep our dependencies current and limit what we collect in the first place.

Changes to this policy

We may update this policy. Material changes are reflected by updating the "Last updated" date at the top of this page.

Contact

Questions about privacy: support@twelvia.com.