Privacy

12Moons is a carefully designed program that brings your attention to the energy-draining patterns running in the background of your life. It identifies the archetypes that recycle through your relationships and your days, and it gives you a 21-day work of small daily exercises to close the program that runs them. The diagnostic names the pattern. The 21 days are where you close it. The work only works if you do the work.

12Moons is the data controller responsible for the personal information described in this policy. This page tells you what we collect from you, why, how long we keep it, and what you can ask us to do with it.

What we collect

When you take the diagnostic, we collect:

• A name. You can choose any name you like — your full name, a first name only, or a nickname. The field is optional.
• Your email address. This field is required. We use it to send you your card after the diagnostic, and to send you a link back to your journey, so you can come back on another device.
• Your date of birth. This is optional but strongly recommended, because it makes the diagnostic significantly more accurate. We use it silently inside the diagnostic — you will never see it shown back to you — and we do not share it with anyone.

Over your 21-day journey, we also collect:

• The card the diagnostic named for you.
• The daily marks you type into the app — short lines, numbers, names, and yes/no answers — that build up the evidence of your work over the 21 days.

We do not collect anything else. No tracking, no location data, no contacts, no scrolling behaviour, no third-party analytics, no advertising identifiers.

How we use it

• Your birth date helps the diagnostic name a more accurate card for you. It is not shown back to you, not shared with anyone, and not used for anything else.
• Your email is used to send you your card reveal once, and to send you a link back to your journey if you ask. We do not send marketing emails. We do not share your email with anyone.
• Your marks are stored so you can see them across the 21 days, and so the app can read them back to you on day 21. They are not shared with anyone.

Where it is stored

Your data is stored by service providers compliant with EU data protection law — a database provider, a hosting provider, and an email provider. We do not transfer your personal information outside the European Union.

How long we keep it

While you are using 12Moons, we keep your data so the app can work. If you ask us to delete it, we delete everything tied to you within 30 days, and we confirm when it is done.

Security

Your data is stored on servers that use industry-standard encryption and access controls. No system can be guaranteed 100% secure, but we follow current best practices to protect your information. If we ever become aware of a breach that affects your personal information, we notify you within the time limits required by law.

Cookies

We use one cookie, called tm_session. It identifies your session, so the app remembers which card you are on and which days you have completed. The cookie is required for the app to work. We do not use cookies for advertising or analytics.

Your rights

Under the GDPR, you can ask us at any time to:

• See what we have about you.
• Correct anything that is wrong.
• Delete your data.
• Receive a copy of your data, in a portable format.
• Stop using your data.
• Withdraw your consent for any optional processing.

To make any of these requests, use the contact form on this site.

If you think we are not handling your data properly, you can also complain to the data protection authority in the country where you live.

Children

12Moons is not designed for people under the age of 16. We do not knowingly collect data from anyone under 16. If you are a parent or guardian and you believe a child has used 12Moons, contact us through the form on this site and we will delete the data.

Changes to this policy

If we change anything material in this policy — what we collect, how we use it, who we share it with — we update this page and the last updated date at the top, and we send a notice to anyone with an active account.

Contact

To make a request, ask a question, or report a concern, use the contact form.