Privacy Policy

Last updated: July 19, 2026

    TL;DR: Luna keeps your cycle records on your device. We do not run our own cloud servers. Your data never reaches our infrastructure. You choose exactly how — and whether — your data is backed up.
  

Medical Disclaimer: Luna is a personal tracking and planning tool. It is not a medical device and does not diagnose, treat, prevent, or monitor any medical or reproductive health condition. Always seek professional advice from a licensed healthcare provider regarding medical concerns.

1. What Data Luna Collects

All logs you enter into Luna are stored exclusively in the app's local database on your device hardware. This includes:

Your period dates, cycle patterns, and logs.
Flow intensity levels and irregular cycle markings.
Daily symptoms (13 categories) and mood states (7 options).
Private notes (a completely un-analyzed text journal).

Luna processes this data in real-time, on-device, in milliseconds. No server calculations or external processing models are involved in analyzing your cycle inputs.

2. Where Your Data Lives

Luna is designed with a local-first architecture. Your records stay on your device unless you explicitly export an encrypted backup file yourself.

Local Only (default): Your cycle logs, symptoms, and notes exist exclusively on your physical device. Nothing is uploaded to any cloud service. If you delete the app or switch phones without exporting a backup file, your history cannot be recovered.

Device Transfer Mode: Luna can export an encrypted .lbk backup file for occasional backups, phone upgrades, and cross-device or cross-OS moves that you manage yourself. Luna does not upload that file to any third-party storage provider or any Luna-operated service.

Private Vault Mode: You can additionally lock the exported backup file with a private 12-word recovery phrase. No one — not Luna nor anyone who finds the file — can decrypt it without that phrase.

3. Secure Offline Partner Sharing

Luna Premium includes Private Partner Sharing. This feature is designed to share cycle phases with one trusted person while maintaining total confidentiality:

The sharing is done using peer-to-peer offline mechanisms (or end-to-end encrypted direct data paths) without intermediate cloud server aggregation.
The other person only sees your current or upcoming cycle phase name and phase-aware helpful tips.
Your partner never has access to your private symptom list, mood states, log intensity, calendar details, or personal journal notes.

4. Analytics, SDKs, and Surveillance

Luna is completely ad-free and is not integrated with behavioral profiling networks or data broker SDKs. We do not run background telemetry to track app engagement habits or cycle patterns.

5. How Luna Uses the Internet

Luna is designed to function entirely offline for cycle tracking. The app uses the internet only for:

Retrieving critical app updates from the App Store or Google Play.
Verifying purchase and subscription status with Apple App Store or Google Play's billing APIs when you buy Luna Premium or the PDF export pass.

Your cycle logs, symptom entries, private notes, and health data are completely isolated from any Luna-controlled network requests.

6. App Permissions & Hardware Access

To operate securely, Luna requests minimal system permissions:

Android

POST_NOTIFICATIONS: To dispatch local push alerts for upcoming cycles. Notifications are scheduled locally and are not managed by a push notification server.
USE_BIOMETRIC / USE_FINGERPRINT: To lock the app locally. Biometric authentication is handled securely by Android's keystore APIs; Luna never accesses your biometric data.
SCHEDULE_EXACT_ALARM: To deliver period notifications exactly at the configured time.
RECEIVE_BOOT_COMPLETED: To reschedule local notifications when you restart your phone.

iOS

Local Notifications: To schedule upcoming cycle and fertile window reminders. All notification logic runs on-device; no push notification servers are used.
Face ID / Touch ID: To lock the app locally using your device biometrics. Luna never accesses your biometric data — authentication is handled entirely by iOS's Secure Enclave.

7. Data Retention & Deletion Rights

Because Luna has no access to your data, you hold full administrative power over your files:

Retention: Your data remains on your hardware for as long as you keep the app installed. There is no automatic expiration.
Deletion: You can wipe all logs instantly in the app using Settings → Clear All Data, or by uninstalling Luna. Once deleted, the records are gone forever and cannot be recovered by us.
Portability: You can export a full backup of your records as a CSV or JSON file anytime via the backup settings page.

8. Legal Requests & Subpoenas

Because Luna maintains no central database or user accounts, we have nothing to produce in response to a government subpoena, court order, or law enforcement request.

If you keep your history only on-device or export a Private Vault Mode backup file, Luna has no readable copy to produce, decrypt, or hand over. Any exported file remains under your own custody.

9. GDPR and Regional Protections (EU & US)

For users in the European Union (under GDPR) and the United States (including state reproductive data laws like CPRA and Washington's My Health My Data Act):

Our local-first structure aligns directly with data minimization standards. Because your data does not populate external databases, you maintain permanent sovereignty over your personal records. There is no need to file a "right to be forgotten" or "data erasure" request with us, as you can erase all data directly from your device at any time.

10. Contact

If you have any questions or feedback regarding this policy, please reach out to us at:
support@trackluna.com