Privacy Policy

Luna needs no account. Everything you log — periods, cycle data, symptoms, moods, temperature, weight, sleep, notes, reminders and settings — is stored in a database on your device and is never uploaded or sent to us. We do not run analytics in the App. The only data that leaves your device is what the advertising and purchase services described below need to work; none of them receive your health data.

Luna shows ads served by Google AdMob, which keeps the App free. To deliver, measure and limit ads (for example frequency capping and fraud prevention), Google may collect information from your device such as its advertising ID, IP address, device type, approximate location and how you interact with ads. Ad requests never include your cycle or health data, and the App sends no keywords or content information with them. On iOS, Luna requests non-personalized ads only and does not ask to track you across other apps. If you are in the EEA, the UK or Switzerland, Google's consent form asks for your choice before any ad is requested, and you can change it at any time under Settings › About › Ad privacy options. Google's use of this data is described at https://policies.google.com/technologies/partner-sites.

Premium is an optional one-time purchase. On Android it is processed by Google Play Billing; on iOS by the App Store, with RevenueCat managing the purchase record for us (it receives the transaction details and an anonymous app user ID, never your health data). We never receive or store your payment details. Whether Premium is unlocked is also remembered on your device.

Your logs are used only on your device: to predict your next period and fertile window, show your history and insights, and send the reminders you turn on (these are local notifications scheduled on your device). Predictions are estimates, not medical advice, and must not be used as contraception.

We do not sell or share your data with anyone. The only third-party services in the App are Google AdMob with Google's User Messaging Platform (ads and ad consent) and, for purchases, Google Play, the App Store and RevenueCat — each under its own privacy policy. When you export a CSV, a PDF report or a backup file, it goes only where you send it through your device's share sheet, and the App deletes its temporary copy afterwards.

Your data is kept in the App's private storage, which other apps cannot access. You can add an app PIN and, where your device supports it, fingerprint or face unlock; the PIN is kept in your device's secure storage (Keychain / Android Keystore). The database itself is not encrypted by the App, so also protect your device with a passcode. Backup files are scrambled with a key built into the App, which keeps them from being read as plain text but is not strong protection: store them somewhere private.

On Android, your cycle database is included in your Google device backup (if you have it turned on), so your history can move to a new phone; ad, reward and PIN settings are deliberately left out. On iOS, the App's data can be part of your iCloud or computer backup of the device. These backups belong to your own account; we have no access to them.

We keep none of your data on our servers. Settings › Clear All Data deletes your logs, reminders and settings from the device at once; uninstalling the App removes all of its data from the device (copies in your own device backups or exported files stay until you delete them).

The App is not directed at children under 13 and shows ads, so it is not part of the Google Play Families program. We do not knowingly collect personal information from children under 13; if you believe a child has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time to reflect changes in the App or for legal reasons. Changes are effective when they are posted on this page, so please review it periodically.