lunappLunapp Privacy Policy · Effective 6 October 2026.
EDEFENSIVE LTD is the controller responsible for personal information processed by Lunapp. Company number: 16596171. You can contact us about privacy rights or your account by post: EDEFENSIVE LTD, Lunapp, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Lunapp is currently in testing; some account and payment features are not available yet. This notice covers this website and the app features you choose to use when available.
Information you choose to provide may include your account email, name, date of birth, cycle and period dates, symptoms, mood, energy, notes, pregnancy records, preferences, reminders and support messages. Community content is separate from private tracking records. Google sign-in supplies your account identifier and basic account details; it does not give Lunapp access to Gmail, Drive or contacts. We also process basic app, device, network and security information needed to operate and protect the service, such as request IP addresses and authentication or error events.
We use account information to fulfil the service contract, provide and protect your account and respond to requests. Health information is processed only with your separate explicit consent, to record and show your history and provide personal cycle estimates and reminders. You can withdraw health consent in account settings. Withdrawal stops new health recording; it does not prevent exporting or deleting your existing information or managing your subscription. Necessary operational records are used for service security and applicable legal obligations. We do not sell personal information or use health information for advertising.
Connections use HTTPS. Account authentication and access controls restrict access to private records; recovery backups are encrypted. Account and private tracking records are stored in our self-hosted Supabase backend on a server in the United Kingdom. Google Play processes payments. RevenueCat verifies subscriptions using purchase and account identifiers; health entries are not sent to these payment services. Firebase Cloud Messaging receives a device token and generic notification metadata only when you enable remote notifications. Remote notification payloads contain no cycle dates, symptoms, notes or community message text. These providers may process necessary information outside the UK; applicable contractual transfer safeguards are required for such processing. We may disclose limited information where required by law, to protect the service or as part of a lawful business transfer.
Private tracking records are associated with your account. Community content you choose to publish may be visible to other members after review; an anonymous label does not remove personal details you include in the text. Support staff can read support conversations and moderators can review community content. These roles do not give them access to your private cycle, symptom or pregnancy records.
You control notifications in Lunapp and Android settings. Android handles device biometrics and screen-lock credentials; Lunapp does not receive your fingerprint or face template. This release has no advertising SDKs, and Firebase Analytics collection is disabled. This static website has no account form, advertising, analytics script or tracking cookie.
Account and tracking records are retained while the account exists unless you delete individual records or reset them. Notification history and inactive device registrations expire after 90 days. Account deletion removes associated personal records from active systems. Automatic encrypted server backups have a 30-day retention period. Separate restricted recovery copies may be retained for recovery validation and are removed when no longer required; deleting live information does not immediately erase every backup copy. Limited purchase, trial-eligibility, security or compliance records may be retained where necessary, separately from health records. Deleting the app or account does not cancel a store subscription or make a previously used store trial available again.
You may request access, correction, export, deletion, restriction, objection or other privacy rights that apply to you. Use account settings when account access is available, or write to our postal contact above. We verify account ownership before disclosing or deleting information. Account deletion and export do not require an active subscription. Instructions are available at https://lunapp.org/delete-account/. The planned support@lunapp.org mailbox is not currently available; do not send requests to it yet. You may complain to your local data protection authority, including the UK Information Commissioner's Office at https://ico.org.uk/.
Cycle estimates are not medical advice or contraception. Material changes to this notice will be published here with an updated date; changes requiring consent will be presented in the app before the affected processing.