Privacy Policy

Last updated 27 July 2026 · written to be readable

1What Luna stores

Everything you log — periods, flow, symptoms, notes, custom fields, reminders, your display name and your app settings — is written to a database on this device. That is the primary copy, and unless you turn on sync it is the only one. Exactly two features ever send anything anywhere: cross-device sync and supporter sharing. Both are off until you switch them on, both need you to be signed in, and each is described below.

2What Luna does not collect

No password — signing in, if you ever choose to, uses Apple, Google or a one-time code sent to your email. No analytics, usage statistics or crash reports. No advertising or tracking identifiers. No location, contacts or photos. And several things never leave this device under any setting: symptoms, moods, custom fields, reminders, your display name, your app settings and your intimacy logs are part of neither sync nor sharing, so there is nothing to send.

3Love connection

Intimacy logs are the most sensitive thing Luna holds, and they get the strictest handling. They are not part of cross-device sync: turning sync on does not send them. They are never part of what a supporter can see, whatever else you choose to share. They stay on this device. If intimacy sync is ever offered it will be a separate choice, off by default, and encrypted on this device before it leaves — and it still will not add this data to anything you share. Sharing and syncing are separate choices and always will be.

4When you share with a supporter

Sharing is off until you turn it on, and it needs you to be signed in. Once on, Luna publishes the period dates you chose to our server, where the supporters you invited — and only they — can read them. Flow, notes, symptoms and intimacy logs are never included: a supporter receives dates, and her own phone works out the rest. You pick what is shared, you can change it instantly, and either of you can disconnect at any time, which stops the publishing immediately.

5Signing in, and cross-device sync

Signing in is optional and nothing in Luna sits behind it — the app opens straight to your cycle, with an account or without one. If you do sign in, with Apple, Google or a code sent to your email, our server keeps your email address, a name if your provider shares one, an account ID and the session that remembers you. Signing in on its own moves none of your cycle off this phone. Cross-device sync is a separate switch, off by default. With it on, Luna copies your logged days to our server so your other devices can read them: the date, whether it was a period day, the flow, whether it started a cycle, and the note you wrote on it. Nothing else. Those rows sit under your account, readable by you and by whoever operates the server — they are not end-to-end encrypted, so we could read them, and you should know that rather than assume otherwise. Turning sync off stops the copying, and erasing your data offers to delete the server copy with it.

6Your rights & controls

Export and erase both live in Privacy & Security, and erase offers to delete the server copy along with the one on this device. Where the law gives you rights of access, portability, correction and erasure — the EU and UK under GDPR, California under CCPA/CPRA, and many other places — most of them you can exercise yourself, immediately, without asking us. For anything we do hold, which is the account behind an optional sign-in and any days you chose to sync, write to us and we will delete it, account included.

7Deleting your account and your data

On this device: Settings → Privacy & Security → Erase all data removes everything you have logged, permanently and immediately. If you had synced, the same flow offers to delete the server copy at the same time — take it, because uninstalling the app clears the phone but not the server.

The account and anything synced under it: deleted on request — see myluna.ro/delete-account, or write to hello@myluna.ro. That covers the email address, a name if your provider shared one, the account ID, every session, any synced days and any share you had published. It is done within 30 days, usually the same day, and nothing is retained afterwards except where the law requires it.

8Children

Luna isn't directed at children under 13, or under 16 where local law sets that age. If you tell us a child has signed in, we will delete that account and anything synced under it.

9Changes to this policy

If this policy changes in a way that matters — above all if Luna ever starts collecting something it doesn't collect today — we will tell you inside the app before it takes effect, not with a silent update.

Questions? Write to hello@myluna.ro. This summary is plain-language and binding; nothing here is hidden in fine print elsewhere.