Lunara — Privacy Policy

The short version

Lunara works without an account, without ads, and without sending your cycle data anywhere. The app does not request the Android internet permission, so it has no general-purpose way to send data off your device at all. Below is exactly what the small number of connected features do — and don't do.

What Lunara stores, and where

Period dates, flow, symptoms, mood, energy/sleep/stress/pain ratings, notes, birth-control schedule, temperature and cervical-mucus readings, ovulation-test results, pregnancy/postpartum/ perimenopause tracking, visit-prep questions, and app settings are stored in a local database on your device only. We never receive this data — there is no server, no account, and no analytics or crash-reporting SDK in the app.

Permissions, and why

Lunara does not request the Internet or network-state permissions — they are explicitly removed from the app, including from any library that might otherwise add them.

Features that involve another app or service

These are the only ways any Lunara data can reach somewhere other than your device's own storage. Every one is a choice you make.

• Backups & exports — export a JSON file, or back up automatically to a folder you pick. If that folder is synced by a service like Google Drive, that service syncs the file the way it syncs anything else there; Lunara itself never signs in to or talks to that service.
• Sharing — the PDF doctor report, visit-prep list, calendar predictions, and partner-share cards go to Android's share sheet only when you tap Share, to whichever app you pick.
• Calendar export — adding predictions to a calendar hands an .ics file to the calendar app you choose.
• Import — importing from Clue, Flo, CSV, or plain text reads a file you select; nothing is downloaded and no sign-in is involved.
• Wear OS companion (optional, off by default) — turning on Settings → Quick access → Sync with my watch sends a small status summary (on-period, days until next period, phase, discreet/language settings — never notes or symptoms) to your paired watch via Android's Wearable Data Layer, provided by Google Play services. It normally goes directly over Bluetooth/ Wi‑Fi, but Google Play services can relay it through your Google account if the devices aren't directly reachable — which is why this is opt-in and off by default. Turning it off deletes the shared status data. Lunara's phone app itself still makes no network connections of its own.
• Lunara Pro purchase — handled entirely by Google Play Billing, which talks to the Play Store app, not to Lunara's developer. We never receive your payment information.

Discreet mode

Changes the app's icon, name, and notification wording on your home screen. It's a display choice made on your device — it does not change what is stored or send anything anywhere new.

Children's privacy

Lunara is not directed at children and does not knowingly collect information from children — in part because it does not collect information from anyone.

Your choices

Delete data anytime from within the app, delete a backup file from wherever you saved it, revoke Health Connect access in its own settings, revoke notification permission in Android Settings, or uninstall the app to remove its local database entirely.

Changes to this policy

If a future version changes how data is handled — for example, an optional cloud-sync feature is scaffolded but not enabled in this release — this policy will be updated before that version ships.