Privacy Policy

1. Information We Collect

We collect information you provide directly to us, data synced from wearables and health apps you choose to connect, and the technical data any web service receives.

Account information. The name you enter, your sign-in email address (from Sign in with Apple — including Apple’s Hide My Email relay if you use it — or Google sign-in), your birth date, gender, and goals.

User-inputted health data. Life-stage information such as cycle details, pregnancy or postpartum status, and due date; menstrual cycle dates; symptoms you log (for example cramps, mood, or energy); and manual food, personal-record, and body-metric entries.

Connected device data (via Terra API). If you choose to connect a wearable or fitness account (for example Oura, WHOOP, Fitbit, or Garmin), we retrieve data through our integration partner, Terra API. This includes:

• Activity & sleep: workouts, step and activity summaries, daily summaries, sleep stages, and rest duration.
• Biometrics: heart rate, heart-rate variability (HRV), resting heart rate, and — if your device records them — blood pressure, blood glucose, and blood oxygen (SpO2).
• Body metrics: weight and body measurements.
• Menstruation and nutrition data, where your connected app provides them — plus other metrics your device includes with these records.

What we deliberately do not keep from wearables: GPS coordinates, route maps, city/state/country fields, and device serial or hardware details. These are filtered out when the data arrives and are never stored.

Content you create. Your chat with the coach, victories and records, and the coach’s saved memories about your preferences and history.

Purchases. Your subscription status via Apple-signed transaction records (product, status, trial state, expiry). Payment is processed entirely by Apple — Lunaro never sees your card or bank details.

Usage and diagnostics. Which features you use (as events with timestamps — deliberately without health values in them), daily usage counters for the AI allowances, and error reports (a scrubbed error message and technical context) so we can fix failures. Like any web service, our servers also automatically receive technical request data — your IP address and basic device/browser information — in server logs as part of normal request handling.

Profile photo. If you add a profile photo, the image is stored only on your device, in the app’s local storage — it is never uploaded to or stored on Lunaro’s servers.

What we do not collect: your microphone audio, your device’s location (we never request location access), your contacts, advertising identifiers, or your browsing outside the app. Photos are never uploaded (see the profile-photo note above). Lunaro’s AI coaching is text-only — the app never records, transmits, or stores audio or video. There are no advertising or third-party analytics SDKs in the app.

2. How We Use Your Information

We use your data to provide a personalized health coaching experience and to run the Service. We do not sell your health or personal data.

• To coach you: generating personalized guidance, briefs, and answers from your profile, logs, and connected health data — including relating wearable signals (like sleep and activity) to the cycle information you log, so insights reflect where you are.
• To run the Service: accounts, sign-in, subscriptions, usage allowances, support, and abuse prevention.
• To keep the Service secure and working: error diagnostics and security audit records.
• Never for advertising or marketing profiles, never sold, and never used to track you across other companies’ apps or websites.

3. AI Processing and Your Consent

Lunaro’s coaching runs on Google’s Gemini API. Before any of your data is processed by the AI provider, Lunaro asks for your explicit consent and records it (including the version of the consent text you saw). AI coaching features do not run without it. You can revoke consent at any time in the app; revoking stops AI processing of your data. If the consent text materially changes, you will be asked again.

4. Data Integration and Third-Party Processors

Lunaro shares data only with the service providers that operate the Service, and only what each needs. Most act as our data processors; Apple provides its App Store services under its own privacy policy:

• Terra API (tryterra.co) — our wearable-integration partner. Terra securely authenticates your wearable account and standardizes incoming metrics; it connects directly to your wearable vendor’s account, so it receives and handles your wearable’s health records itself in order to relay them to Lunaro, and from Lunaro it receives your account identifier as a reference. Terra states that data routed through it is encrypted in transit and at rest and that it maintains SOC 2 Type II certification. Your wearable vendor keeps its own copy of your data under its own policy. You can disconnect at any time in the app, or by revoking access in your wearable provider’s account.
• Google (Gemini API) — the AI provider. Only after your explicit AI-processing consent, and only from data sources you have allowed, it receives what the coach needs to answer you: your coach messages and recent chat history; the name you entered in your profile; your life-stage details (including your exact due date if you are pregnant, or your cycle day and length if you track cycles); summaries of your connected health data; your saved coach memories; and the text of your manual log entries (such as symptoms, meals, or victories) when you or the coach look them up. Google processes this under its API terms, retains prompts for a limited period for abuse monitoring, and is prohibited from using them for advertising. If you sign in with Google, Google separately acts as your sign-in identity provider.
• Apple — Sign in with Apple, App Store billing, and subscription notifications, operated by Apple under Apple’s own privacy policy. Payment details stay with Apple. Apple-signed purchase records embed the internal account token they were issued for (see deletion below).
• Supabase — our database and authentication host. Stores your account and all app data described above.
• Vercel — our application host. Runs the app’s servers; server logs can include your account identifier and IP address as part of normal request handling.

5. Data Sharing and Disclosure

We maintain extreme confidentiality over your reproductive and physical health data. Cycle, menstruation, pregnancy, and postpartum data get the strictest handling in Lunaro: they are used solely to personalize your coaching, are never used for advertising or shared beyond the service providers listed above, are excluded from usage-analytics events, and are deleted with your account.

No commercial sharing. None of the providers above are advertising networks or data brokers. We do not share your health data with data brokers, advertisers, or third-party marketing networks, do not sell or rent personal data, and do not share it for cross-app tracking.

Legal disclosures. We will only disclose your data beyond the list above if the law requires it — for example under a binding subpoena, court order, or other valid legal process — and only to the minimum extent required by law.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your health data: encryption in transit, per-account row-level security on stored data, strict least-privilege access controls, and redaction of sensitive values from server logs by default. We keep your data for as long as your account exists; when you delete your account, everything except the narrow records described in the next section is removed from our systems immediately (provider copies and backups expire as described there).

7. Your Rights and Choices

Depending on your location (such as the EU under GDPR or California under CCPA), you may have legal rights to access, correct, delete, and port your personal and health data. These controls are available to every user, directly in the app:

• Access and export: download a JSON export of your data at any time (Profile → Account). The export contains your app data; it does not include your sign-in email address, which is held by our authentication provider rather than in the app’s data tables.
• Correction: edit your profile and the coach’s saved memories in the app at any time; to correct or remove a log entry, contact us at the address below.
• Deletion: delete your account and its health data at any time (Profile → Account). Your profile, health data, chat history, memories, and logs are removed from our systems immediately. As part of deletion we also instruct Terra to disconnect and forget your wearable connection; that request’s outcome is recorded, and a failure is flagged for manual follow-up. Copies held by providers leave on their own schedules: Google retains AI prompts for a limited abuse-monitoring period under its published policy, and our database host’s standard backups expire on rotation.
• Disconnect wearable and health-app sources at any time in the app. Disconnecting stops new data from that source; it does not delete data already collected — deleting your account does.
• Revoke AI-processing consent at any time in the app.
• Control which data sources the coach may read in the app’s privacy settings.

What survives deletion: three kinds of records, minimized as far as we can make them — security audit records, error diagnostics, and billing records. They are de-linked from your profile, but they are not fully anonymous: the audit record of your deletion keeps a reference id for the deleted account (so we can show that a deletion happened, and what was removed, for a specific account if a regulator or you ever asks), and Apple-signed billing records embed, by Apple’s design, the internal account token they were issued for; we cannot strip that without invalidating Apple’s signature. These records are access-restricted, used only for security, debugging, and financial integrity, and are never used for coaching, advertising, or profiling. Deleting your account does not cancel an active Apple subscription — cancel it in your App Store settings.

8. Children

Lunaro is not directed to children and requires you to be at least 18 to create an account. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

9. Changes to This Policy

If we change what we collect or who receives it, we will update this policy, change the date above, and surface material changes in the app — including re-asking for consent where the change affects AI processing.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your health data — including access, correction, or deletion requests — contact us at: info@lunaroco.ai.