Current legal document

Privacy Policy

This Privacy Policy explains what LunarWise collects, including optional uploaded health documents and extracted health information, how we use health-style and account data, which vendors help us run the service, how export and deletion requests work, and how research retention is handled after account closure.

Effective June 11, 2026 privacy_2026_06_11_v2
  • We collect account, cycle, symptom, mood, lifestyle, optional lab report, extracted health information, and AI-interaction data you choose to provide.
  • We use that data to operate forecasts, Luna chat, pattern analysis, retention messaging, doctor-visit-prep, and lab-aware workflow features.
  • Original uploaded health documents may be retained for up to 6 months, while extracted structured information and generated reports may remain available while your account is active unless you request deletion.
  • Operational account identifiers can be removed after deletion while approved pseudonymized research records may be retained.
  • Users can request export or deletion from the privacy controls inside the app.

1. INTRODUCTION

LunarWise, LLC (“LunarWise,” “we,” “our,” or “us”) respects the privacy of the people who use our app, websites, and related services (the “Services”). This Privacy Policy explains how we collect, use, disclose, store, retain, and protect personal information and health-style information connected to your use of LunarWise.

Because LunarWise helps users log cycle, mood, symptom, wellness, reproductive-health, and related information, some of the information processed through the Services may be considered sensitive or special-category data under certain laws.

2. SCOPE

This Privacy Policy applies to information processed through LunarWise’s apps, websites, customer-support channels, reports, AI tools, and related features that link to this Policy.

3. INFORMATION WE COLLECT

We may collect the following categories of information:

A. Account and identity information

  • email address;
  • nickname or display name;
  • authentication identifiers;
  • timezone and locale;
  • subscription and entitlement status; and
  • customer-support communications.

B. Cycle, reproductive, and timing information

  • period dates and cycle-history entries;
  • spotting and related reproductive-health logs;
  • trying-to-conceive status or fertility-related selections;
  • still-menstruating status and similar onboarding inputs; and
  • forecast-relevant timing data.

C. Mood, symptom, and wellness information

  • symptom logs;
  • mood, energy, and volatility entries;
  • medications and health-lifestyle tracking;
  • notes, journal entries, food logs, and weight-management entries; and
  • related self-reported context you choose to provide.

D. AI and feature-interaction information

  • prompts, messages, and outputs within Luna chat;
  • doctor-visit-prep report requests and outputs;
  • generated reports and report metadata;
  • structured logging inputs and summaries;
  • feature interactions connected to onboarding, previews, paywalls, or retention flows; and
  • machine-readable export and deletion request metadata.

E. Uploaded health documents and extracted health information

If you choose to upload lab reports or similar health documents, LunarWise may collect:

  • the original uploaded file;
  • file metadata, upload date, report date, and collection date where available;
  • extracted lab markers, values, units, reference ranges, abnormal flags, extraction confidence, and confirmation status; and
  • contextual metadata such as cycle day or cycle phase at collection when determinable from your LunarWise data.

F. Device, app, and notification information

  • app version and platform;
  • notification status and push-subscription identifiers;
  • diagnostic or security-related metadata;
  • app event and funnel metadata; and
  • referral or attribution context where enabled.

G. Payment and subscription information

  • subscription status, entitlement state, and subscription identifiers provided by our subscription provider;
  • purchase platform (for example, Apple App Store or Google Play);
  • limited billing metadata made available to us by those providers.

We do not store your full payment-card number in LunarWise systems.

4. HOW WE COLLECT INFORMATION

We collect information:

  • directly from you when you create an account, fill in onboarding, log entries, send messages, or request support;
  • automatically as you use the Services;
  • from app-store, subscription, and infrastructure providers that help us deliver the Services; and
  • from authorized integrations or processors acting on our behalf.

5. HOW WE USE INFORMATION

We may use information for the following purposes:

A. Core service delivery

  • creating and maintaining your account;
  • authenticating you and securing access;
  • syncing, storing, and displaying your logged data;
  • generating forecasts, pattern analysis, reports, and reminders; and
  • enabling subscription-protected features.

B. AI, reporting, and personalization

  • generating Luna chat responses;
  • producing doctor-visit-prep reports and related summaries;
  • analyzing logged data for trend, cluster, or pattern detection;
  • identifying potential relationships between uploaded health information, tracked symptoms, cycle patterns, lifestyle data, medications, and generated reports;
  • adapting content, prompts, and feature previews to your selected intent or behavior; and
  • improving product personalization.

LunarWise does not use uploaded health documents or extracted health information to diagnose, treat, prescribe, or replace care from a healthcare provider.

C. Safety, fraud prevention, and operations

  • monitoring abuse, misuse, fraud, and platform security;
  • troubleshooting and supporting users;
  • auditing product behavior and service reliability; and
  • enforcing our Terms of Service.

D. Research, analytics, and product improvement

  • understanding how users interact with the Services;
  • improving forecast quality, report usefulness, onboarding, and retention systems;
  • developing internal women’s-health insights and product strategy; and
  • preserving approved transformed datasets after account deletion where permitted by law and consistent with this Policy.

E. Communications

  • sending service, billing, security, support, and account-related communications;
  • sending product-operational push notifications and onboarding reminders;
  • sending marketing communications only where permitted and, where required, with an appropriate consent basis.

F. Legal compliance

  • complying with legal obligations;
  • responding to lawful requests and disputes; and
  • defending or exercising legal claims.

6. LEGAL BASES AND SENSITIVE-DATA PROCESSING

Depending on where you live, our legal bases may include:

  • performance of a contract when we provide the Services you request;
  • compliance with legal obligations;
  • our legitimate interests in operating, securing, and improving the Services where allowed by law; and
  • consent or explicit consent where required by law for sensitive or optional processing.

Where local law treats logged reproductive-health, symptom, mood, or related data as sensitive data, we intend this Policy and the in-app consent flows to describe that processing clearly. Certain AI features may require a separate in-app acknowledgement before use.

7. DISCLOSURE OF INFORMATION

We may disclose information to the following categories of recipients:

A. Infrastructure and product processors

  • Supabase for database, storage, authentication, and edge-function infrastructure;
  • third-party AI service providers where a feature requires model-assisted output;
  • OneSignal for push-notification delivery and related messaging infrastructure;
  • RevenueCat for subscription and entitlement management.

Uploaded health documents, extracted information, and generated reports may be shared with infrastructure, storage, analytics, and AI-processing providers only as needed to store files, extract structured information, generate reports, operate app features, maintain security, and support the service.

B. Payment and platform providers

  • Apple App Store;
  • Google Play; and
  • other authorized payment or subscription channels if used.

C. Support, analytics, or attribution vendors

  • vendors that help us measure product performance, attribution, or app reliability where those tools are enabled.

D. Legal and business recipients

  • courts, regulators, law enforcement, or other authorized recipients where legally required;
  • counterparties in a corporate transaction, subject to appropriate protections.

We do not sell directly identifying personal information such as your email address, nickname, or contact details for third-party advertising.

We do not sell directly identifying health document contents for third-party advertising.

8. RESEARCH RETENTION AFTER ACCOUNT DELETION

If you request account deletion, LunarWise may remove operational identifiers from active systems while preserving certain transformed internal research or analytics records where permitted by law.

This retained research layer is intended to:

  • remove direct operational identifiers such as email, nickname, push identifiers, and subscription identifiers;
  • preserve limited row-level research value for product improvement and women’s-health analytics; and
  • rely on age-at-event or age-band fields rather than exact date of birth in the retained research dataset.

This retained research layer is intended to remove direct operational identifiers from active systems while preserving limited transformed records, where permitted by law, for internal research, analytics, product improvement, and women’s-health insights.

Original uploaded files are not intended for research retention. Confirmed structured observations may be transformed, pseudonymized, or aggregated for internal research, analytics, product improvement, and future pattern workflows where permitted and consistent with LunarWise's data-governance practices.

9. EXPORTS, DELETION REQUESTS, AND USER CONTROLS

Users may request:

  • a machine-readable export of certain LunarWise data;
  • account deletion / account-closure processing;
  • deletion of the original uploaded file only, the original file plus extracted structured health information, or generated reports; and
  • access to current privacy controls inside the app.

Export requests and deletion requests may be queued and processed through secure server-side workflows rather than immediate client-side deletion.

Deletion requests may enter a pending deletion period, currently 14 days, during which you may cancel the request before processing.

10. DATA RETENTION

We retain information for different periods depending on the category of data, the purpose of processing, legal obligations, safety needs, account status, and whether a deletion request has been made.

Our current retention model generally distinguishes among:

  • active operational account data;
  • queued deletion and export request records;
  • AI/chat and product-operational records needed to provide the Services;
  • original uploaded health documents, extracted structured health information, and generated reports; and
  • approved transformed research and analytics retention.

Original uploaded health documents may be retained for up to 6 months. Before automatic deletion, LunarWise may send reminders so you can download or share the original file. After the retention period, the original file may enter the pending deletion workflow before being permanently removed from storage.

Extracted structured health information and generated reports may remain available while your account is active unless you request deletion.

LunarWise may retain non-medical operational audit metadata, such as deletion request dates, completion dates, report identifiers, deletion type, and anonymization status. Deleted medical content is not retained in this audit record.

Where we have not published a fixed retention period for a category, we retain the data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

11. INTERNATIONAL TRANSFERS

We may transfer or process information in countries other than the one in which you live, including the United States. Where required, we rely on appropriate transfer mechanisms and contractual safeguards with our processors and service providers.

12. SECURITY

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, destruction, loss, misuse, or alteration. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

13. YOUR RIGHTS

Depending on your location, you may have rights to:

  • access your personal information;
  • request correction of inaccurate information;
  • request deletion of certain information;
  • request export or portability where applicable;
  • object to or restrict certain processing;
  • withdraw consent where consent is the basis for processing; and
  • complain to a supervisory authority.

You can exercise certain controls inside the app or by contacting us at contact@lunarwise.app.

14. CHILDREN

LunarWise is not directed to children under 18, and we do not knowingly collect personal information from children under 18.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we do, we will update the effective date and version and, where required, provide notice through the app, email, or another suitable channel.

16. CONTACT

Questions or privacy requests may be sent to contact@lunarwise.app.

View Terms of Service