Twelvie App 隱私權政策

Twelvie App Privacy Policy

This policy applies to version 1.0 of the Twelvie app for iOS and iPadOS, provided by Twelvie (月令科技有限公司). Our corporate website has a separate privacy policy.

Accounts, calendars, and sharing

You can use a calendar on your device. Signing in does not automatically upload the local trial calendar. When you use account features, we process your email address, account ID, and display name, if present, for sign-in, verification, password reset, sync, sharing, and support. Our sign-in provider handles your password; the Twelvie calendar service does not receive it.

Events, locations, notes, quick captures, and permissions in your account calendars are stored and synced across devices. We record when an account last used sync or sharing to maintain account and sharing status. People who accept your invitation can see your display name and access the shared calendar or selected events within the permissions you set. Cloud sync and sharing require an account.

Optional device features

• Apple Health: With permission, the app reads steps and active energy for display on this device. These values are not uploaded to Twelvie, added to shared calendars, or used for advertising. You can change access in your device’s Health permissions.
• Voice capture: When you start voice input, the app uses Apple’s microphone and speech recognition features. Apple may process speech online depending on language and device. Twelvie does not retain or upload recordings to its servers. Transcribed text can sync if you save it to an account calendar or inbox.
• Device calendars: With permission, the app reads the source calendars you select. Confirmed items are imported into the selected Twelvie calendar. Items imported into an account calendar sync to the cloud. If you separately turn on automatic copying to the iPhone calendar, eligible events are written to a Twelvie calendar under the device’s default calendar account, including their titles, dates and times, locations, and notes. The copies sync according to that account’s settings when cloud sync is enabled.
• Weather: Forecast requests send the approximate coordinates of your selected city or device location to Twelvie’s weather service on Cloudflare. The app rounds coordinates to two decimal places before they leave the device. City searches send the place name you enter, the interface language, and an optional country code. You can select a city manually, revoke location access in device settings, or turn off Show Weather to stop forecast requests. Calendar event searches are processed on the device.

You can decline or revoke these permissions in your device settings. Doing so stops the corresponding access or feature; the rest of your calendar remains available.

Service providers, protections, and processing locations

• Auth0 (Okta): Handles sign-in and verification. Security records may contain account IDs, timestamps, sign-in outcomes, browser information, IP addresses, and approximate regions inferred from IP addresses. Tenant logs expire under the applicable Auth0 plan. Okta’s data processing terms describe security and confidentiality safeguards.
• Google Workspace: Delivers verification and password reset emails, processing recipient addresses and the email information needed for delivery. Retention depends on mailbox settings and necessary support, security, and legal purposes. Where we instruct permanent deletion and the applicable conditions are met, Google deletes its copies under its data processing terms.
• Cloudflare: Provides network protection, calendar sync, storage, and the weather relay. The relay receives your connection IP address and uses it to limit request rates and prevent abuse. Weather requests forwarded to Open-Meteo exclude the visitor’s IP address, account and device identifiers, sign-in credentials, calendar entries, and health data. Cloudflare retains technical records such as request times, paths, and outcomes according to service settings for diagnostics and security. Database restore points expire under the D1 plan. Cloudflare’s data processing terms describe access restrictions, confidentiality, and security safeguards.
• Open-Meteo: Provides forecasts and city lookup. Its privacy notice for paid services explains that request logs may include the Cloudflare relay’s outgoing IP address and request URLs containing approximate coordinates or city search terms, for service usage monitoring. These logs are associated with Twelvie’s commercial subscription and are not linked to individual Twelvie accounts. Open-Meteo removes individual logs after 90 days and retains aggregate figures such as daily API call counts. Its notice describes safeguards against unauthorized access, loss, or disclosure.

Data may be processed in Taiwan and where providers operate, including the United States and Europe. Under providers’ data protection terms and safeguards, we require those processing personal data on our behalf to limit processing to what is necessary for their respective functions, security, and troubleshooting, and to provide protection equivalent to this policy. Twelvie does not sell personal data or use it for advertising tracking across apps or websites.

Retention and account deletion

We keep account and cloud calendar data as long as necessary for accounts, sync, sharing, and support. To request deletion, go to Settings → Account, plan, and data → Delete Account and authenticate the same account again. Deletion removes your account, personal cloud calendar, quick captures, and events you added to shared calendars. Other members’ independent data, your local trial calendar, and exported copies remain.

You can check deletion status for 30 days after completion. To prevent an old sign-in or backup restore from bringing back deleted data, necessary deletion markers (such as hashed identifiers) and access-restricted backups may remain. They are retained under service schedules or as needed for deletion verification, security, recovery, or legal obligations. When restoring data, we apply deletion and access revocation records.

For help deleting an account, or to ask about, access, obtain a copy of, correct, restrict collection or use of, or delete your personal data, contact Twelvie at [email protected]. We may verify your identity before processing your request.