twelvo

Privacy

Privacy Policy

How Twelvo handles account, wellness tracking, subscription, analytics, and deletion data.

Last updated: May 28, 2026

Who We Are

Twelvo is operated by Ekklo SAS, 229 rue Saint-Honore, 75001 Paris, France.

Twelvo is a wellness tracking app for people following a GLP-1 routine prescribed by their healthcare provider. It is not a medical device and does not provide medical advice.

Information We Collect

Account information: your app user identifier and, when you use Apple or Google sign-in, the authentication information needed to create and secure your account.

Wellness tracking information: routine, dose logs, symptoms, weight, protein, water, reminder preferences, check-ins, and doctor-summary exports that you choose to enter.

Subscription information: entitlement, product, and purchase-state information from RevenueCat and the App Store so we can unlock Premium features, restore purchases, and handle subscription status.

Usage information: privacy-safe product events such as first open, onboarding started, paywall viewed, purchase succeeded, and Today viewed, when app analytics are enabled. Website analytics, if enabled after consent and privacy validation, may measure page views and App Store CTA clicks without app wellness log content.

How We Use Information

We use your information to provide the app, save your routine, show your Today screen, create your doctor summary, manage subscription access, improve reliability, and respond to support or deletion requests.

We do not sell your personal information. We do not run ads in Twelvo. We do not sync your data with clinics, electronic health record systems, or Apple Health in the MVP.

Legal Bases

Depending on the context, processing may rely on contract performance, user consent, legitimate interests such as service security and reliability, or legal obligations.

Health and wellness information can be sensitive. Twelvo is designed around user-entered tracking and user-controlled sharing.

Service Providers

We use service providers to operate Twelvo, including hosting, authentication, subscription processing, analytics, support, and app distribution providers.

RevenueCat and Apple process subscription and purchase information so Premium access can be purchased, restored, and managed.

Google and Apple may process information when you use their sign-in systems, according to their own terms and privacy policies.

Analytics

If enabled, Twelvo app analytics are sent through Twelvo's first-party API relay and are designed to avoid medication notes, symptoms, receipts, account emails, and provider secrets.

Website marketing analytics may use Google Analytics 4 only after consent and privacy validation, and must stay limited to page views and web CTA clicks.

Analytics are used to understand product reliability and conversion, not to sell data or target ads.

Sharing

You control doctor-summary sharing. When you export a summary, Twelvo opens the native share sheet and you choose where it goes.

We may disclose information if required by law, to protect the service, or to respond to valid legal requests.

Account Deletion

You can delete your Twelvo account from Settings in the app. Account deletion removes your Twelvo account data from our API, including routine data, daily check-ins, dose logs, reminder preference, doctor export records, and related account records.

For Sign in with Apple accounts, Twelvo stores revocation material server-side where available and attempts to revoke the Apple token before deleting Twelvo account data.

Deleting your Twelvo account does not automatically cancel an Apple subscription. You must manage or cancel App Store subscriptions from your Apple account settings.

Retention and Security

We keep account and wellness tracking information while your account is active, unless you delete your account or we need to retain limited records for security, legal, billing, or operational reasons.

We use safeguards appropriate for an early consumer wellness product, including authenticated API access, server-side account deletion, encrypted storage for Apple revocation tokens when configured, and production checks to prevent local subscription bypass.

Your Rights

Subject to applicable law, you may have rights to access, rectify, delete, restrict, object to, or port your personal data.

To exercise these rights, contact Ekklo through twelvo.app/contact or [email protected].

Changes

We may update this policy to reflect product, legal, or operational changes. The version published on this page is the current version.