Lunia Privacy Policy

The short version

Lunia is a training log that shows you how your own logged workouts relate to your own menstrual cycle. Your training and cycle data lives on your device. If you choose to sign in and turn on cloud backup, that data is encrypted on your device before it ever leaves, with a key we never see. We do not sell your data, we do not use it for advertising, we do not share it with data brokers, and we do not use it to train AI models. This policy explains exactly what we collect and why.

What we collect

If you use Lunia without an account (“local mode”)

Your training data, cycle data, daily logs and notes stay on your device. None of it is sent to us.

One thing does leave the device even in local mode, and we would rather say so plainly: the app asks our subscription provider (RevenueCat) whether this device has an active subscription. That check sends an anonymous, randomly generated identifier and basic device information (device model, operating system version, app version, country). It contains no name, no email, and none of your training or cycle data. It is what makes “restore my purchase” work on a device that has never signed in. Everything else in this section applies only once you choose to sign in.

Your email address, from Google or Apple, used to identify your account.
Your name and profile photo, if your Google or Apple account provides them and you have not set your own inside the app, used only to personalise your profile inside Lunia. A photo you choose yourself stays on your device and is never uploaded.

Your training and cycle data, only if you turn on cloud backup

Your entire local dataset, meaning logged workouts, sets, reps and weights, menstrual cycle dates, flow, symptoms and notes, daily check-ins, body metrics, and your own saved sessions, is encrypted on your device using AES-256-GCM before upload. The encryption key is generated on your device and stored in your device’s secure keychain. It is never sent to us. We store only the resulting ciphertext, transmitted over TLS. We cannot read your training or cycle data, even if compelled to, because we do not have the key.

Health app data, only if you connect it and grant permission

On iPhone this is Apple Health; on Android it is Health Connect. In both cases Lunia’s access is read-only: it never writes anything back to your health app, and it reads only the following, each behind its own separate, explicit permission request:

Workouts (runs, rides, swims, rows, walks), so you do not have to log them by hand. On iPhone this includes the route your health app already recorded for outdoor workouts, so a run can be shown as a map line. See “About routes” below, because that one deserves its own explanation.
Distance, which Android’s Health Connect treats as a separate permission from the workout itself. Without it an imported run arrives with no distance attached. It is read only for workouts you have already agreed to import, and it is not requested at all on iPhone, where distance comes with the workout.
Menstrual flow history, only if you choose “import my period history” during setup or later from your profile, so you do not have to re-enter dates you already recorded elsewhere.

On Android these are exactly the three Health Connect permissions Lunia declares (READ_EXERCISE, READ_DISTANCE, READ_MENSTRUATION). It requests nothing else, and it never uses any of it for advertising.

Health app data is treated exactly like anything you log by hand: it stays on your device, and it is encrypted the same way if you turn on cloud backup. It is never sent to any advertising network, analytics service or data broker, and it is never used for advertising or shared with any third party for their own purposes. Connecting your health app is entirely optional, and Lunia works fully without it.

About routes

If you import an outdoor workout on iPhone, Lunia can read the route your health app already recorded and draw it as a line on your session and on a share card. That is location data, so we want to be precise about it rather than hide it in a list.

Lunia never asks for your phone’s location permission and has no live tracking. It cannot see where you are. It only ever reads a track your own health app recorded earlier, for a workout you chose to import.
The route stays on your device, in the same local database as everything else, and is included in your encrypted backup only if you have turned cloud backup on. As with all of that data, we hold ciphertext we cannot read.
Share cards trim the first and last 200 metres of the line before drawing it. Runs tend to start and end at home, and a share card is by definition going somewhere public. The trim is automatic and applied every time, not a setting you have to find.
Nothing about a route is ever sent to an advertising network, an analytics service or a data broker, because we do not use any.

On Android, Lunia does not request or read workout routes, so this section applies to iPhone only.

Purchases are handled entirely by the Apple App Store or Google Play, and by our subscription management provider, RevenueCat. We receive whether you have an active subscription. We never receive your card number or payment details, which the stores handle directly.

Notifications

Reminders (rest timer, cycle report ready, period due, daily nudge, a session you scheduled) are generated and scheduled on your device. Lunia has no push server and collects no push token.

This website

Everything above is about the Lunia app. This website, trylunia.com, is a separate thing, and it does collect a little: we use Noirtrack, a privacy-focused analytics service, to count visits and see which pages people actually read. It records the sort of thing a web server log would (page visited, referring site, rough device and screen size, country) and nothing that identifies you personally. It does not follow you to other websites, and there is no advertising network, no Facebook pixel and no cross-site tracking on this site.

Where local law requires your consent before analytics may run, Noirtrack asks for it with its own banner before recording anything. Declining it means you are not counted; the site works exactly the same either way.

This applies to the website only. Nothing on this page is connected to your Lunia account, and no analytics of any kind run inside the app.

What we do not collect

We do not use any advertising or cross-app tracking SDK. We do not run analytics on your cycle or training data. The app never requests your phone’s location permission and never tracks where you are, in the foreground or the background; the only location data it ever handles is a route your own health app already recorded for a workout you chose to import, described under “About routes” above. We do not read your contacts. We read your photo library only for photos you pick yourself, one at a time, for your profile picture or as the background of a share card, and those photos are not uploaded anywhere by us.

We use a small number of service providers to make the app work. None of them can read your encrypted training or cycle data, and none of them receive it for their own purposes:

Supabase: hosts our database (your account and, if enabled, your encrypted backup) and handles sign-in. Data is stored on Supabase infrastructure and may be processed outside your country.
RevenueCat: manages subscriptions and tells us whether you are currently subscribed.
Apple: Sign in with Apple, Apple Health (only with your permission), and App Store purchases.
Google: Sign in with Google (if you choose it), Health Connect (only with your permission), and Google Play purchases.
Noirtrack: visit statistics for this website only, never for the app. See “This website” above.

We do not sell your data to anyone, for any reason. We do not share it with data brokers or advertisers, and we do not use it to train machine-learning models.

How long we keep it

Local data stays on your device until you delete it. If cloud backup is on, your encrypted backup is kept for as long as your account exists and is replaced each time you back up. Deleting your account removes your account record and your encrypted backup from our servers immediately. Our database provider’s own routine backups may keep a copy for a short period afterwards before they expire on their normal schedule.

Your choices and your rights

Use Lunia without an account. Every core feature, including unlimited logging, cycle tracking, the rest timer and personal records, works in local mode.
Export your data at any time from Profile, Data and privacy, “Export everything”. You get a complete file you control. Exporting is free and is not part of the paid tier.
Delete your account at any time from Profile, Account, “Delete account” (also offered in the Account sheet, at the bottom of the Profile tab, and in Profile, Data and privacy). This permanently removes your account and your encrypted cloud backup from our servers. It does not touch what is stored locally on your device; use “Delete everything” separately for that. If you have already uninstalled the app, our account deletion page explains how to request it by email instead.
Delete everything locally at any time from the same screen, which returns the app to a fresh install.
Sign out to disconnect cloud backup without deleting anything.
Disconnect your health app at any time, from Lunia or from your phone’s own health settings.

If you are in the EEA, the UK, or another region with equivalent law, you also have the right to access, correct, port, or erase your personal data, and to object to or restrict processing. The in-app export and delete tools above give you all of this immediately and without asking us. You can also write to us at the address below, and you have the right to complain to your local data protection authority. Our legal basis for processing account data is performance of the contract between us (running the app you asked for); for anything optional, such as health app access and cloud backup, it is your consent, which you can withdraw at any time.

Children’s privacy

Lunia is not directed at children. We do not knowingly collect data from anyone under 13, or under 16 in the EEA and UK where local law sets that age. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

If this policy changes in a material way, we will update the date at the top and, for significant changes, notify you in the app.

Contact

Questions about this policy or your data, or a request about your rights? Email [email protected].