Privacy Policy

When you use LunaList, we may collect: menstrual cycle data, mood and symptom logs, pregnancy tracking data, and health information entered by you. Account data: your nickname and, if you sign in with Apple or Google, the email address that service provides. Posts, comments and photos you share in the community, and your reports and blocks. Your device's push token, to deliver notifications. A technical log for security and abuse prevention: IP address, device identifier, platform and app version (kept for 180 days; health logs are never written to it).

Data is used solely to provide app features: building your health profile, providing cycle predictions, and sending reminders. Your data is never sold to third parties.

Data is encrypted in transit using TLS. Your health data (cycle, symptoms, mood, sleep, pregnancy, PCOS, menopause) is NOT kept only on your device. It is stored on our servers, linked to your account, so that your history survives a device change and predictions can be computed server-side. On anonymous posts, the author’s name, avatar and identifier are never sent to other users.

The app uses the following third-party services: Google Firebase (push notifications and, if you allow it, anonymous usage statistics and crash reports; see section 5), RevenueCat (subscription status; see section 6), Cloudflare R2 (image storage), OpenAI (moderation of community posts) and Google Gemini (generating your personalised daily tip). To generate a daily tip, your health logs from the last 7 days and your cycle data are sent to Google Gemini without your name or contact details; the text of your community posts is sent to OpenAI for moderation. These services operate under their own privacy policies. Your data is never shared for advertising and is never sold.

Only if you allow it, anonymous usage statistics are sent to Google Firebase Analytics to help us understand how the app is used: which screens are opened, where a log was saved from (not its content), notification taps, community actions (without text), Pro page views and the plan chosen. Symptoms, mood, cycle dates, pregnancy, your goal, and post or comment text are never sent. The statistics are not linked to your account, no advertising identifier (IDFA/AAID) is collected, and nothing is used for advertising; data is kept for 2 months. With the same permission, if the app crashes a technical crash report is sent to Firebase Crashlytics: the error, stack trace, screen name, device model and OS version (without your user ID, name or any health data); reports are kept for 90 days. You can withdraw permission at any time in Profile. This also resets the analytics identifier on your device. App settings may be updated through Firebase Remote Config; no health or account data is sent to it.

LunaList Pro is purchased through the App Store or Google Play. We never see your payment details (card, etc.); Apple and Google process them. We use RevenueCat to manage subscription status: RevenueCat receives your account's internal identifier and the store's purchase information (product, date, price, country, subscription status). Your health data is never sent to RevenueCat, Apple or Google.

LunaList is intended for users aged 17 and over. We do not knowingly collect data from persons under 17.

You can delete your account at any time from app settings. The account is closed immediately; if you sign in again with the same Apple, Google or email within 14 days, it is restored. After 14 days your health and profile data is permanently erased from our servers. Community content (posts, comments, their edit versions and images) is not erased: it is removed from public view and kept, together with the authorship link, in a restricted-access archive used only to answer lawful requests from law-enforcement authorities, for 3 years, after which it is permanently erased (content tied to an open legal request or investigation may be kept until it is closed); health data never goes into this archive. Guest use (no account): guest accounts that never finish onboarding and contain no logs are deleted automatically after 14 days; guest accounts with logs are not deleted. Logs you made as a guest move to your account when you sign in with Apple or Google; if the account already has logs, you choose whether to merge them, keep the account's, or keep this phone's.

We may update this policy from time to time. We will notify you through the app when significant changes are made.

For questions about this privacy policy: [email protected]