Privacy Policy

Information we collect

Account information: your name, email address, language preference and, if you sign in with Google, the basic profile information Google shares with us (name, email and profile picture). You can also start as a guest: we then create an anonymous account without your name or email, and you can add them later to keep your data.

Health and wellbeing information you choose to log: period dates, cycle and period length, symptoms and their intensity, mood, energy, notes, completed workouts and optional date of birth.

Daily log details you choose to record in the app: menstrual flow, sexual activity and protection, cervical mucus, ovulation and pregnancy test results, breast self-exam findings, weight, basal body temperature and water intake, together with your goal (tracking periods, trying to conceive or pregnancy), pregnancy dates, prediction settings, units and display preferences, custom symptoms, self-care progress and the articles you have read. They are saved on your device and synced to your account so you can restore them on a new phone.

Kept only on your device: reminder settings, including the names of medications you add, and your app lock PIN, which is stored encrypted by the operating system. Fingerprint or face unlock is handled by your phone, and LunaFit never receives biometric data. App reminders and the optional alerts about new articles are scheduled on your phone as local notifications: we do not use push notification tokens and no data is sent to schedule them. The app also checks a public list of LunaFit versions to tell you when an update is available, without sending any personal information.

Community content: posts, comments and likes you publish in the LunaFit community, shown to other signed-in members with your first name and profile picture.

Luna AI conversations: the messages you send to Luna AI and the cycle estimate needed to answer them. LunaFit does not store the content of these conversations. If you report a Luna AI response or an AI-written nutrition article, we store the reported text with your account so our team can review it.

Technical information: when the app or website connects to our servers, our hosting providers automatically process your IP address, device and browser type, app version and request logs. If the app crashes, it also sends us an error report (the error message, app version and platform) linked to your account, which we keep for 90 days. We use this information only to deliver the service, keep it secure and fix problems.

Your choices: the date you consented to the processing of your health data and, if you use Luna AI, the date you accepted its data processing, so that we can respect and demonstrate your choices.

How we use your information

To provide the service: calculating your cycle day, phase, fertile window and next period, showing your history, charts and personalized recommendations.

To send the emails you expect: account confirmation, the welcome email and, if enabled, period and ovulation reminders.

To keep LunaFit safe: preventing abuse, moderating reported community content and protecting accounts.

We do not sell your personal information and we never use your health data for advertising.

Legal bases

If you are in the European Economic Area, the United Kingdom or another place with similar laws, we rely on these legal bases: your explicit consent to process your health data, which we ask for before you start using LunaFit, and to send your Luna AI messages to OpenAI; our contract with you, to create your account and provide the features you request; your consent to personalized ads where the law requires it; our legitimate interests in keeping LunaFit secure, preventing abuse and fixing problems, which we balance against your rights; and our legal obligations, such as keeping payment records or responding to valid legal requests.

Service providers

We rely on trusted providers that process data on our behalf: Supabase (database and authentication), Vercel (hosting), Cloudflare (video storage), Resend (email delivery), Google (optional sign-in, Google Play billing and AdMob advertising) and OpenAI (the AI model that powers Luna AI). They may only use your data to provide their services to LunaFit.

Luna AI is optional. Before your first conversation we ask for your explicit consent, because your messages and the cycle estimate needed to answer them are sent to OpenAI and processed on its servers in the United States. OpenAI does not use them to train its models and may keep them for up to 30 days to monitor for abuse. We send only what is needed to answer you, never your name or email address. If you do not want this data to leave your country, do not use Luna AI; every other feature works without it.

International transfers

Our providers may process your information in the United States and in other countries whose data protection laws may differ from yours. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the safeguards our providers offer, such as the European Commission's standard contractual clauses, or on your explicit consent, as with Luna AI.

Advertising and purchases

The free version of the LunaFit app shows a limited number of ads served by Google AdMob, and you can choose to watch a short video to hide ads for 24 hours. AdMob may collect your device's advertising ID, IP address and general ad interaction data to show and measure ads. It never receives your health logs, cycle data, symptoms or Luna AI conversations.

Where the law requires it, we ask for your consent before ads are personalized, and you can change that choice at any time from Profile › Privacy & security. Under some US state laws, personalized ads can count as targeted advertising or sharing of personal information; you can opt out at any time from Profile › Privacy & security or by deleting or resetting your advertising ID in your phone's settings. LunaFit Premium removes all ads.

Subscriptions in the app are processed by Google Play. We receive a purchase token to confirm your plan, never your card or payment details.

Retention and deletion

We keep your information while your account is active, and a guest account until you delete it. You can download a copy of your data or permanently delete your account at any time from Profile › Privacy & security. Deleting your account immediately removes your profile, logs, consents and community content; copies in our providers' routine backups disappear automatically when those backups expire. Payment records are kept only for as long as tax and accounting laws require.

Your rights and choices

You can access, correct, download or delete your information in the app, turn email reminders, app reminders and article alerts on or off, and change your language at any time.

Depending on where you live, you may also have the right to object to or restrict certain processing, to receive your data in a portable format, to withdraw your consent at any time without affecting processing that already took place, and not to be treated differently for exercising these rights.

LunaFit cannot work without your health data, so to withdraw your consent to its processing, delete your account in Profile › Privacy & security. You can withdraw your Luna AI consent in the same screen at any time.

For any other request, write to otjhllc@gmail.com. We will answer within one month, or within 45 days where US state law applies, and we may need to confirm your identity first. If we decline your request, you can appeal by replying to our answer. In the European Economic Area and the United Kingdom, you can also lodge a complaint with your local data protection authority.

Consumer health data

If you live in Washington, Nevada, Connecticut or another US state with consumer health data laws, our Consumer Health Data Privacy Policy explains how we collect, use and share that data and how to exercise your rights. You can find it next to this policy on our website and in the app.

Security

Data is encrypted in transit and at rest, and access rules in our database ensure each person can only read and change their own records. You can also protect the app with a PIN, fingerprint or face unlock. No system is perfectly secure, so please keep your password private and tell us at otjhllc@gmail.com if you think your account has been compromised.

Legal requests

We disclose information to public authorities only when the law requires it, and we review each request carefully. Unless the law prohibits it, we will try to notify you first. We never give your health data to authorities voluntarily.

Business transfers

If Otjh LLC is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction and will remain protected by this policy.

Children

LunaFit is intended for adults aged 18 and older. We do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy. If the changes are significant, we will let you know in the app or by email before they take effect.

Contact

Questions about privacy or requests about your data? Write to Otjh LLC at otjhllc@gmail.com or by mail to Otjh LLC, 249 E Princess St, York, PA 17403-2336, USA.