LUNA01Introduction
LUNA ("we," "us," "our") builds a cycle tracking and wellness application. This Privacy Policy explains what information LUNA collects when you use the app or this website, how it is used, who can access it, and the choices available to you. By creating an account, you agree to the practices described here.
LUNA is designed around one rule: your health data belongs to you. We built every feature — from encryption to Partner Mode — with that rule as the starting point, not an afterthought.
02Information we collect
We collect only what is needed to run LUNA and improve its predictions. This falls into three categories:
| Category | Examples | Purpose |
|---|---|---|
| Account information | Name, email, profile photo (if using Google Sign-In) | Authenticate you and sync your data across devices |
| Health & cycle data | Period dates, flow, symptoms, mood, notes | Power cycle predictions and your personal timeline |
| Usage data | App version, crash logs, feature interactions | Fix bugs and improve reliability |
We do not collect precise device location, contacts, photos outside what you explicitly attach, or browsing history from other apps.
03Health data
Health entries — period dates, flow level, symptoms, mood and private notes — are treated as sensitive data and encrypted on your device before syncing to our servers.
This data is used only to generate your personal predictions and insights. It is never used for advertising, never sold to third parties, and never shared with data brokers. You can export a full PDF copy of your health history at any time from Settings → Export Data.
04Partner data
If you enable Partner Mode, you choose exactly what your partner can see — typically your current cycle phase and a general wellness status, never raw symptom notes or entries unless you explicitly choose to share them. Partner Mode is off by default and can be disabled at any time from Settings → Partner Mode.
Your partner's account information (name, email) is stored only to manage the connection between your accounts, and is removed immediately if you disconnect Partner Mode.
05Firebase services
LUNA is built on Google Firebase. We use the following Firebase products, each governed additionally by Google's own privacy practices:
- Firebase Authentication — manages sign-in via email or Google OAuth.
- Cloud Firestore — stores your encrypted cycle and profile data.
- Firebase Cloud Messaging — delivers reminder notifications.
- Firebase Crashlytics — collects anonymized crash reports to improve stability.
06Authentication
You may sign in using Google OAuth or an email and password. We receive only your name, email address and profile photo from Google — we never receive your Google password, and we never post to your Google account on your behalf.
07Notifications
With your permission, LUNA sends reminders for logging, upcoming periods, and predicted ovulation via push notification. You can disable any or all notification types from Settings → Notifications, or from your device's system settings, at any time.
08Data storage
Data is stored in Google Cloud data centers used by Firebase, with an offline-first copy kept securely on your device so LUNA works even without a connection. Backups sync automatically once you're back online.
09Security
We apply AES-256 encryption to sensitive health fields before they leave your device, enforce strict Firestore security rules so only your authenticated account can read your data, and review access controls regularly. No method of transmission or storage is 100% secure, but protecting your data is treated as a first-order engineering priority, not an add-on.
10User rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate information directly within the app
- Export your full cycle history as a PDF
- Withdraw notification or Partner Mode permissions at any time
- Request permanent deletion of your account and all associated data
11Delete account
You can permanently delete your account and all associated data from Settings → Delete Account inside the app, or through our dedicated Delete Account page. Deletion removes your Firebase Authentication record, Firestore documents, and any files in Firebase Storage within 30 days.
12GDPR
For users in the European Economic Area, LUNA acts as a data controller for the personal information described in this policy. Our legal basis for processing health data is your explicit consent, given when you create an account and begin logging entries. You may withdraw consent at any time by deleting your account.
13Google Play compliance
LUNA complies with Google Play's Health Apps and User Data policies, including prominent in-app disclosure before requesting sensitive permissions and a working in-app and web-based account deletion path.
14Contact
Questions about this policy or your data can be sent to tkwebsolution1301@gmail.com. We aim to respond within 3 business days.