Lunara — Privacy Policy

Last updated: October 2, 2026 · App version covered: 1.3.0 (and 1.2.x) Developer: TapForge Studios / 99 Cent Apps LLC · Contact: contact@tapforgeapps.com

The short version

Lunara is built to work without an account, without ads, and without sending your cycle data anywhere. The app does not request the Android internet permission, so it has no general-purpose way to send data off your device at all. Everything below explains the small number of features that touch anything outside the app itself, and exactly what each one does and doesn't do.

What changed in this version

• Added in-app ratings through Google Play (see "Rating Lunara" below).
• Added "More from TapForge": Lunara checks, on your device only, which of our other apps are already installed (see below).
• Added on-device usage counters used for logging streaks, "What's new", and gentle check-in reminders (see "On-device app activity").
• Added a reminder reliability check and a watch connection test, both on-device.
• Lunara is now available in 12 languages. All translations are built into the app; nothing is downloaded to translate it.

None of these send your cycle data anywhere. Lunara still has no internet permission, no account, no ads, and no analytics.

What Lunara stores, and where

Lunara stores what you log — period dates, flow, symptoms, mood, energy/sleep/stress/pain ratings, notes, birth-control schedule, temperature and cervical-mucus readings, ovulation-test results, pregnancy/postpartum/perimenopause tracking, your visit-prep questions, and your app settings — in a local database on your device only. We (the developer) never receive this data: there is no server, no account, and no analytics or crash-reporting SDK in the app.

Permissions Lunara requests, and why

Permission	Why	Notes
Notifications (POST_NOTIFICATIONS)	Local reminders: predicted period, fertile window, evening check-in, pill/ring/patch/shot/medication reminders, PMS heads-up (Pro), "your cycle recap is ready", a gentle check-in after a week or more away, and a test reminder you can send yourself	Requested during setup or when you turn on a reminder. Notifications are generated entirely on-device. Each type can be turned off in Settings.
Health Connect (READ_MENSTRUATION / WRITE_MENSTRUATION)	Lets you share period/flow data with other health apps you choose, and pull their data in	On-device only — Health Connect is a local datastore your phone provides, accessed over inter-process communication (IPC). Lunara still makes no network connection to do this. You control, in Health Connect's own settings, which apps can read or write this data, and can revoke Lunara's access at any time.
Biometric (USE_BIOMETRIC)	Optional app lock (fingerprint/face/PIN) so cycle data stays private on a shared device	Handled by Android's biometric system; Lunara never sees or stores your biometric data — it only receives a yes/no unlock result.

Lunara does not request the INTERNET or ACCESS_NETWORK_STATE permissions — they are explicitly removed from the app's manifest, including from any library that might otherwise add them, so this is enforced even if a future update adds a new dependency by mistake.

Features that involve another app or service

These are the only ways any Lunara data can reach somewhere other than your device's own local storage. Every one of them is a choice you make, not something Lunara does automatically.

• Backups & exports. You can export your data as a JSON file, or turn on automatic backups to a folder you pick using Android's file picker. If you choose a folder that a service like Google Drive, Dropbox, or OneDrive keeps synced (e.g., your device's Drive folder), that service will sync the backup file the same way it syncs any other file you put there. Lunara itself only ever writes to the folder you selected — it does not sign in to, or talk to, Drive, Dropbox, or any other cloud service.
• Sharing. The PDF doctor report, visit-prep list, calendar predictions, and partner-share cards are created on-device and handed to Android's share sheet only when you tap Share — you choose the app (Messages, email, etc.) that receives them. Lunara does not send them anywhere on its own.
• Calendar export. Adding predictions to a calendar (.ics file) hands the file to whichever calendar app you choose, the same way as any other share.
• Import. Importing your history from a Clue export, a Flo export, a CSV, or plain text reads a file you select from your device — nothing is downloaded, and no account sign-in is involved.
• Restoring a backup. On a new phone you can restore a backup file during setup or from Settings. Lunara reads only the file you pick.
• Wear OS companion (optional, off by default). If you turn on Settings → Quick access → Sync with my watch, Lunara sends a small status summary (whether you're on your period, days until your next one, your current phase, and your discreet-mode/language settings — never notes, symptoms, or any other logged detail) to your paired watch, and the watch can tell the phone to start or end a period. This uses Android's Wearable Data Layer, which is provided by Google Play services rather than by Lunara. It normally travels directly between your phone and watch over Bluetooth/Wi-Fi, but Google Play services can relay it through your Google account if the two devices aren't directly reachable — that's outside Lunara's control, which is why this feature is opt-in and off unless you turn it on. Turning it back off deletes the shared status data. The Lunara phone app itself still has no internet permission and makes no network connections of its own.
• Lunara Pro purchase. Buying Pro is handled entirely by Google Play Billing, which communicates with the Play Store app on your device, not with Lunara's developer. We do not receive your payment information; Google's own privacy policy covers that transaction.

On-device app activity

To power logging streaks, the "What's new" message after an update, and the optional check-in reminder ("It's been a little while…", sent at most twice after 7 and 21 days away), Lunara keeps a few small values on your device: the date you last opened the app, how many check-ins it has sent, the last app version whose "What's new" you've seen, which suggestion cards you've dismissed, and whether the Quick Settings tile is added. These never leave your device and are removed when you uninstall Lunara.

Reminder reliability and watch checks

• Reminder reliability. Lunara asks Android whether notifications are allowed and whether battery optimization may delay its reminders, so it can show you how to fix it. This is a local system check; nothing is reported anywhere.
• Watch connection. If you use the watch suggestion on Home or "Test watch connection" in Settings, Lunara asks Google Play services on your phone whether a Wear OS watch is connected and whether Lunara is installed on it. This happens on-device; no cycle data is sent unless you have turned on "Sync with my watch" (described above).

Rating Lunara

When you choose to rate Lunara, the star-rating sheet is shown by Google Play, not by Lunara. Your rating and review are submitted to Google under your Google account and are covered by Google's privacy policy. Lunara does not see or receive your rating, your review, or any account information, and asking for a rating is never tied to anything you've logged except that it's shown after a few days of use (and never right after a day you marked as rough or painful).

More from TapForge (our other apps)

Settings and, occasionally, Home show a few other apps made by TapForge Studios. To show "Open" instead of "Get" for apps you already have, Lunara checks whether those specific apps (DayLeaf, Plately, Little Milestones, PixelSmith, Skysmith and Lingoforge) are installed on your phone. This check happens on your device and its result is never sent anywhere. If you tap one, Lunara opens its Google Play page with a standard referral tag that tells Google Play the visit came from Lunara (for example utm_source=lunara&utm_medium=cross_promo); it contains no personal or cycle information.

Discreet mode

Discreet mode changes the app's icon and name on your home screen and uses neutral wording in notifications, widgets, and the Quick Settings tile. It's a display choice made on your device — it does not change what data is stored or move it anywhere new.

Children's privacy

Lunara is not directed at children and does not knowingly collect information from children, in part because it does not collect information from anyone — see above.

Your choices

You can delete any of your data at any time from within the app (editing or removing entries, or using "Erase all data" in Settings), delete a backup file directly from wherever you saved it, revoke Lunara's Health Connect access from Health Connect's own settings, revoke notification permission from Android Settings, or simply uninstall the app, which removes its local database along with it.

Changes to this policy

If a future version of Lunara changes how data is handled, this policy will be updated before that version ships, and the "Last updated" date and "App version covered" above will change. Material changes will also be mentioned in the app's "What's new".

Contact

Questions about this policy or your data: contact@tapforgeapps.com