Privacy Policy

Lunara · Last updated 15 June 2026

This Privacy Policy explains how Lunara ("Lunara", "we", "us") collects, uses, and protects your information when you use the Lunara iOS app. By using Lunara you agree to this policy.

In short: Lunara stores the sleep, mood and habit data you choose to track so it can give you personalised coaching. Your private journal-style data is yours. We do not sell your data. You can delete your account and all associated data at any time from within the app.

1. Information we collect

Account information — your email address and name, used to create and secure your account.
Sleep & health data — sleep duration, stages, heart rate and related metrics that you import from Apple Health, plus any nights you log manually. Lunara reads this data from Apple Health only after you grant permission; we never receive Apple Health data without your consent.
Wellbeing data you enter — mood check-ins, daytime behaviours (e.g. caffeine, exercise), sleep goals and onboarding answers (such as your chronotype).
AI coaching content — the prompts and responses generated when you use the AI coach, stored so your insights persist between sessions.
Subscription status — whether you hold an active subscription or trial, received from Apple via our payments processor. We never see your card details.
Usage & diagnostics — basic, privacy-respecting analytics about app usage and crashes to help us improve reliability.

2. How we use your information

To provide the core service: tracking your sleep and generating personalised CBT-I-based coaching, plans and insights.
To operate your account, subscription, reminders and notifications.
To maintain, secure and improve the app.

We do not sell your personal data, and we do not use your private sleep, mood or journal content for advertising.

3. AI processing

To generate coaching, relevant data (such as your recent sleep, mood and goals) is sent securely to our AI provider, Anthropic (Claude), solely to produce the response you requested. This data is processed transiently to create your insight and is not used to train third-party models. Lunara's AI coaching is for general wellbeing support and is not a medical service (see our Terms).

4. Service providers

We share data only with the providers needed to run Lunara:

Supabase — secure database and authentication (your account and tracked data).
Anthropic — AI coaching generation.
RevenueCat & Apple — subscription management and payments.
Railway — backend hosting.
Expo — push notifications.
Open-Meteo — weather context (location-coarse, no personal identifiers).

5. Data storage & security

Your data is stored on secured servers with access controls and row-level security so that you can only access your own records. Sensitive content is encrypted in transit. While no system is perfectly secure, we take reasonable measures to protect your information.

6. Data retention & deletion

We retain your data while your account is active. You can permanently delete your account and all associated data at any time via You → Delete Account in the app. Deletion is immediate and irreversible.

7. Apple Health

Data read from Apple Health is used only to provide sleep insights inside Lunara. It is never used for advertising or marketing, never sold, and never shared with third parties except the service providers listed above strictly to deliver the service. You can revoke Lunara's Health access at any time in the iOS Settings → Health app.

8. Children

Lunara is not intended for children under 16. We do not knowingly collect data from children.

9. Legal basis for processing (UK & EU users)

If you are in the UK or EU, we rely on the following lawful bases under the UK GDPR and EU GDPR:

Your explicit consent (Article 9(2)(a)) — for processing the health and wellbeing data that is core to Lunara, including sleep, mood and any health information you choose to provide. You give this consent when you set up your account and can withdraw it at any time by deleting your account.
Performance of a contract (Article 6(1)(b)) — to provide the Lunara service you have signed up for, operate your account and manage your subscription.
Our legitimate interests (Article 6(1)(f)) — to keep the app secure and reliable. Where we rely on legitimate interests we balance them against your rights.
Consent (Article 6(1)(a)) — for optional usage analytics, which we only collect once you have agreed.

Lunara is the data controller for this information. You can withdraw consent at any time; doing so does not affect processing carried out before withdrawal.

10. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, to withdraw consent, and to object to or restrict certain processing. You can exercise most of these directly in the app, or by contacting us. UK and EU users also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

11. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

12. Contact

Questions about privacy? Email anthony@ajsoftwaredev.org.