Last updated: 18 August 2026.
Your privacy is important for you and for 12andus. This policy explains what personal data we collect, why we collect it, what we do with it, and the rights you have over it. It is part of our Terms of Service.
The data controller is Apogeeks Pte. Ltd., Company Registration No. 201500663W, a company incorporated in the Republic of Singapore, which owns and operates 12andus.com.
We have appointed a Data Protection Officer, Ivo Giuseppe Quartiroli, whom you can reach at support@12andus.com for any question about this policy or about how your data is handled. Please write "Data protection" in the subject line so your message reaches the right person quickly.
12andus is a site offering personalized astrological reports. The astrological reports are based on the birth data that you insert. In our site there are social features where members can befriend each other, send messages to each other, and discover compatibilities based on astrological placements. We also offer a mobile application which is covered by this same policy.
12andus is for people 16 years old and older. Please don't register if you are less than 16 years old. We don't knowingly store information about children under 16 years old. If you believe a child has registered, write to support@12andus.com and we will delete the account.
Under the EU General Data Protection Regulation (GDPR), every use of your data needs a legal basis. Ours are set out below.
| Data | Why we process it | Legal basis |
|---|---|---|
| Username, password, email address, registration IP address | To create and secure your account, to authenticate you, and to prevent abuse of the service | Performance of the contract between you and us (Art. 6(1)(b)); our legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Date, time and place of birth; gender | To calculate your astrological charts and reports — the core of the service you asked for | Performance of the contract (Art. 6(1)(b)) |
| Birth data of other people that you choose to add to your private list | To calculate reports on those charts for you. This list stays private to you and is never shared with other members or with anyone else | Performance of the contract (Art. 6(1)(b)) |
| Spoken languages, city of residence, "About me" text, profile picture | Optional. To power the social features, searches and the language of your experience | Consent (Art. 6(1)(a)) — you choose whether to provide these |
| Messages you send to other members, comments you post, friendships | To deliver the social features you use | Performance of the contract (Art. 6(1)(b)) |
| Questions you ask our AI features, and the conversation history | To answer you, and to let you return to a conversation later | Performance of the contract (Art. 6(1)(b)) |
| Payment email address and purchase records | To deliver what you bought, to provide support, and to meet our accounting and tax obligations | Performance of the contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Usage and audience-measurement data: pages viewed, referring page, browser, operating system, screen resolution, approximate location derived from your IP address, and your IP address | To understand how the site is used and to improve it. See "Analytics" below, including how to opt out | Our legitimate interest in measuring and improving our own service (Art. 6(1)(f)) |
| Device push token (mobile app only) | To deliver the notifications you enabled | Consent (Art. 6(1)(a)) — you enable notifications yourself and can turn them off at any time |
| A memory of your conversations with the AI chatbots: a short summary of each conversation, and a list of things you told them about your own life | So that later answers can take account of what you said earlier, instead of starting from nothing every time | Our legitimate interest in giving you answers that follow on from your earlier ones (Art. 6(1)(f)). Where what you said concerns your health, your sexuality, your religious or spiritual beliefs or your politics, we rely instead on your explicit consent (Art. 9(2)(a)) and keep nothing of the kind unless you have separately asked us to — see Chatbot memory below |
The sources of your personal data are the information you enter yourself and the data generated by your use of the site. We do not buy personal data from third parties.
When you talk to our AI chatbots we keep what you tell us and use it to build a memory of your conversations, so that later answers can take account of earlier ones. This memory has two parts: a short written summary of each conversation, and a list of specific things you have said about your own life — your work, the people around you, your plans, and how you prefer to be answered. It is built automatically by an AI model reading your past exchanges. It is never built from what the astrologer said about you, only from what you said yourself.
We do not keep anything you say about your health, your sexuality, your religious or spiritual beliefs, or your politics, unless you have separately asked us to. You can turn each of those four on or off individually, at any time, and turning one off deletes what had been remembered under it. Those options are available from the age of 16.
Turning them off never limits what the chatbots will discuss with you — it only limits what we write down. Your saved readings and saved questions are yours: none of this ever deletes them, and you can remove them yourself whenever you like.
You can read everything held about you, and delete any part of it, from the chatbot memory page linked on your profile.
If you set your profile as "Social", the information you provided about your gender, your city of birth, the "About me" text and your spoken languages will be available to users opening your profile, and other members may search for you by those attributes, ask for your friendship, or send you a private message. Your birth date and time are visible only to your friends. If you set your profile as "Non social", other members cannot send you messages unless you have befriended them.
The private list of other people's birth data that you create is never visible to anyone but you.
Comments on our articles are public. Please do not post sensitive personal data in a comment: comments remain publicly accessible even if you later delete your account.
12andus administrators can access private messages where this is necessary to provide support or to investigate abuse.
Your data is stored on our own dedicated servers hosted by Hetzner Online GmbH in Falkenstein, Germany — inside the European Union. We are the only ones with access to those servers. All traffic between your browser and 12andus is encrypted with HTTPS/TLS on every page.
12andus is operated by a company established in Singapore, and a small number of our service providers are established outside the EU. This means that some of your data may be accessed from, or processed in, countries outside the European Economic Area. Where that happens we rely on the safeguards provided for in Chapter V of the GDPR — in particular the European Commission's Standard Contractual Clauses, or an adequacy decision where one exists for the country concerned. The table in the next section indicates where each provider processes data. You can ask us for more detail at support@12andus.com.
We do not sell your personal data. There is exactly one case in which we pass it to someone else for their own marketing, it never happens to your account data, and it never happens unless you asked for it — see "Readings requested through a partner" below. Apart from that, we use the service providers listed here, each of which receives only the data it needs to perform its function and is bound to process it on our instructions only.
| Provider | What it does for us | Data it receives | Where it may be processed |
|---|---|---|---|
| Hetzner Online GmbH | Hosts our servers | All data stored by the service | Germany (EU) |
| Mailgun (Sinch) | Delivers our emails | Your email address and the content of the message | EU / United States |
| Stripe (Stripe Payments Singapore Pte. Ltd.) | Processes card payments | Your payment email address and payment details, which you give to Stripe directly | Singapore and the United States |
| PayPal | Processes membership payments | Your PayPal email address and payment details, which you give to PayPal directly | United States |
| Apple and Google | Process in-app purchases made in our mobile application | Purchase and subscription records, under their own store policies | United States |
| OpenAI | Generates our AI astrological insights, essays and chat answers, and the spoken voice for them | Your question and the astrological information needed to answer it (such as chart placements, and where relevant gender and language). We do not send your email address or password | United States |
| Cloudflare | Protects our forms from automated abuse (Turnstile) and serves some static files | Your IP address and browser information at the moment of the check | United States |
| Apple / Google (Firebase) | Deliver push notifications to your device, if you enabled them | Your device push token and the notification content | United States |
When you pay through PayPal, Stripe, Apple or Google, we never see your credit card data. It stays with the payment provider. We receive only the email address connected to your account with them and a record of the purchase. We suggest you refer to their own privacy policies for more information.
If you choose to sign in with Google or with Apple, we receive from them your email address and basic profile information, and only at the moment you click that button. We never receive your password for those accounts.
Some shops, salons, publishers and other businesses display a card, a QR code or a link that leads to a page carrying their name, where you can ask for a free personalised reading by email. This is the one place where your data reaches someone outside our list of service providers.
Before you can submit that form you are shown two boxes, neither of them pre-ticked. The first is required: it accepts the partner terms and asks us to send you your reading. The second is optional and concerns messages: tick it and you will receive occasional messages from us, and your name and email address are passed to that partner so that it can contact you about its own offers. The partner then becomes a separate and independent controller of the copy it holds: what it does with your address afterwards is governed by its own privacy practices, and its messages have to be stopped with the partner directly. Ours you can stop with the one-click link at the bottom of the reading email, which works across every partner at once. The full detail is in the partner privacy notice and the partner terms, which are also linked from the form itself.
If you leave the second box unticked you still receive your reading, and the partner never sees your email address.
The partner receives your name, your email address, the country of your birth city and your age. It does not receive your exact date or time of birth, your birth city, or the text of your reading.
Requests made this way are stored separately from 12andus.com accounts, and asking for a reading through a partner does not create an account for you. If you already are a 12andus.com member and you use a partner's page, that submission is treated like anyone else's: your name and email address reach that partner. Nothing else does — your account, the birth data list you keep on the site, your messages and your activity on 12andus.com are never shared with any partner.
We produce short daily horoscope videos — one per zodiac sign, based on the astrological transits for that day — and publish them to our own channels on YouTube, Instagram, Facebook and TikTok. This is a one-way publishing pipeline: we send our own content out to our own accounts.
No member data is involved. These videos are general astrological content for a zodiac sign and a date. They are not personalised to any individual, and we do not send your name, email address, birth data, charts, reports or messages to any of those platforms. We do not ask you to connect a social media account for this, and you cannot post to those platforms through 12andus.
We do not run the TikTok pixel, or any equivalent advertising or tracking code from those platforms, on 12andus.com. The cookies we do set are listed under "Cookies" below.
Our TikTok integration in particular is described in detail on our TikTok integration page.
We use Matomo to measure how 12andus is used. Matomo runs on our own servers in Germany: your audience-measurement data is not sent to any advertising network or analytics company, and it is never combined with data from other websites.
Matomo processes the following data: a first-party cookie identifying your browser, your IP address, your user ID if you are logged in, the date and time, the title and address of the page viewed, the address of the page you came from, your screen resolution, files you clicked or downloaded, the approximate location of your Internet provider, and your browser language.
We do not use Google Analytics, Google Ads conversion tracking, Google AdSense, the Facebook SDK, or any advertising tracker on this website.
You can opt out of our audience measurement at any time using the control below. Your choice is stored in a cookie on your own browser, so you will need to repeat it if you clear your cookies or use another browser or device.
A cookie is a small piece of data that a website stores in your browser and that your browser sends back on your next visit. 12andus uses the following:
_pk_id, _pk_ses) — audience measurement, as described above. The identifier cookie lasts about 13 months; the session cookie lasts 30 minutes. Use the opt-out control above to refuse them.Most browsers allow you to block or delete cookies. If you block the strictly necessary ones, parts of 12andus will not work — you will not be able to stay logged in.
We send emails to notify you about messages from other members, friendship requests, changes to the site, new features and suggestions about how to use the service. We use Mailgun to deliver them; Mailgun uses your email address only to send our messages and does not share it. Our emails contain a small image hosted on our own servers that tells us whether the message was opened, and links to 12andus in our emails pass through our own servers so that we can count clicks. We use this only to measure whether our emails are useful and to stop emailing people who never read them; it is hosted by us, not by an advertising network.
You can opt out at any time from the "Notifications" page linked from your "Settings" page, or by using the unsubscribe link at the bottom of any email.
We may keep specific data beyond these periods where the law requires it, or where a claim or dispute makes it necessary.
If you are in the European Union or the United Kingdom, you have the right to:
To exercise any of these rights, write to support@12andus.com. We answer within one month, as the GDPR requires; if a request is complex we may extend that period and will tell you why. We may need to verify your identity before acting, to make sure nobody else is asking for your data.
We cannot provide, rectify or erase data that belongs to other members.
If you believe we have handled your data improperly, please contact our Data Protection Officer first — most issues are resolved quickly that way. You also have the right to lodge a complaint with the data protection authority of the country where you live or work. In France that is the CNIL; in Italy the Garante per la protezione dei dati personali; in Germany the supervisory authority of your federal state.
The astrological reports, compatibility scores and AI insights on 12andus are generated automatically from the data you provide. They are entertainment and self-reflection content: they produce no legal effect and no similarly significant effect on you, and no decision about you is taken on their basis. We do not carry out automated decision-making within the meaning of Article 22 of the GDPR.
Our servers use HTTPS/TLS on every page of the site, passwords are stored hashed and never in readable form, and access to production systems is restricted to those who need it. No system is perfectly secure, so security is partly your responsibility too: choose a strong password, do not reuse it on other sites, and never reveal it to anyone. If we become aware of a personal data breach that presents a risk to your rights, we will notify the competent supervisory authority within 72 hours and inform you where the law requires it.
You can choose to invite friends to 12andus by entering their email addresses, in which case we send them an invitation showing your email address as the inviting person, or by using the social sharing buttons. We use the addresses you enter only to send that invitation. We never receive your social media credentials.
We may update this policy from time to time. When we do, we will change the date at the top of this page and announce it on our home page and other key pages. If a change materially affects how we use your data, we will notify affected users by email. Please review this page from time to time.
12andus is property of Apogeeks Pte. Ltd., Company Registration No. 201500663W, a company based in Singapore. For anything concerning your personal data, write to our Data Protection Officer at support@12andus.com. For anything else, use the Contact page linked at the bottom of every page; we use the email address you give there only to answer your message.
Follow us on social media for the daily astrological mood and occasional free PDF coupon codes for personalized readings.