Luna Privacy Policy

Introduction

Welcome to Luna, developed by Studio Phoenix. Your privacy is important to us, and we are committed to protecting it. This Privacy Policy explains how the App handles your information.

Luna is designed with privacy at its core. By default, all information you enter into the App remains on your device and is not collected, transmitted, or stored on external servers. If you choose to subscribe to Luna Premium and enable Cloud Sync, certain data will be securely transmitted and stored on our servers as described in this policy.

1. Information We Collect

1a. Local-Only Mode (Default)

By default, Luna does not collect any personal information. The App does not require an account, login, or registration to use. Specifically:

• We do not collect your name, email address, or any contact information
• We do not collect usage data, analytics, or behavioural information
• We do not collect device identifiers, IP addresses, or location data
• We do not use cookies, tracking pixels, or similar technologies
• We do not use analytics services, crash reporting tools, or advertising SDKs

The only data that exists within the App is the content you create (period history, symptom logs, mood and health entries, cycle settings, and personal preferences), which is stored locally on your device.

1b. Cloud Sync Mode (Optional, Premium Feature)

If you subscribe to Luna Premium and choose to enable Cloud Sync, we collect and store the following to provide the service:

• Account information: Your email address, used for authentication and account recovery
• Health and cycle data: The same data described in Section 2 (period dates, daily logs, notes, cycle settings, and preferences) is encrypted and synced to our secure servers so you can access it across multiple devices
• Subscription status: Whether you have an active Premium subscription, managed through your app store

Cloud Sync is entirely optional. You can use all core features of Luna without enabling it, and you can disable it at any time.

2. How Your Data Is Stored

2a. Local Storage

All data you create within Luna is stored on your device using local storage. This includes:

• Period start and end dates
• Daily logs including mood, flow, symptoms, sleep, and energy
• Notes and personal observations
• Photos added to cycle logs
• Cycle length and period length settings
• Notification and reminder preferences
• Bookmarked articles and learning progress
• App preferences (such as theme selection, display name, and accent colour)

In local-only mode, Studio Phoenix does not have access to any of this data. Your health data never leaves your device through the App unless you explicitly choose to export or share it.

2b. Cloud Storage (When Cloud Sync Is Enabled)

When you enable Cloud Sync, the data listed above is encrypted in transit and at rest and stored on secure servers. Your data is:

• Encrypted using industry-standard protocols (TLS in transit, AES-256 at rest)
• Stored separately from your account credentials
• Accessible only to you through your authenticated account
• Never used for advertising, profiling, or sold to third parties

3. Sensitive Health Data

Luna handles sensitive health information including menstrual cycle data, symptoms, and reproductive health records. We treat this data with the highest level of care:

• In local-only mode, all health data is stored on your device and is never transmitted to any server
• When Cloud Sync is enabled, health data is encrypted end-to-end and stored securely
• Studio Phoenix employees do not access your health data unless required by law or with your explicit written consent for support purposes
• No health data is shared with third parties, advertisers, or data brokers
• The App does not create health profiles or make health data available to insurance companies, employers, or any other entity

4. Device Permissions

Luna may request the following device permissions to provide its full functionality:

• Notifications: Used solely to deliver cycle and health reminder notifications that you configure within the App. The App does not send marketing, promotional, or any other type of notification
• Microphone: Used for voice-to-text input when logging symptoms and notes. All speech recognition is processed on your device using your operating system's built-in speech engine. No audio recordings are transmitted to Studio Phoenix or any third-party transcription service
• Photo Library: Used to select images from your photo library to attach to cycle log entries. Selected images are stored locally on your device alongside your log data and are never uploaded to Studio Phoenix servers (even when Cloud Sync is enabled, images remain on-device only)
• Storage Access (Android): Used when you choose to save exported PDF reports to a location on your device. This permission is requested only at the time of export

All permissions are optional. You can use the core features of the App without granting any of them, though certain features (reminders, voice input, image attachments, PDF export) will not be available.

5. Voice Input

Luna offers an optional voice input feature for logging symptoms and notes hands-free. When you use this feature:

• Speech recognition is performed entirely on your device using your operating system's native speech recognition engine
• No audio recordings are created, stored, or transmitted by the App
• Only the resulting transcribed text is saved as part of your log entry
• Studio Phoenix does not receive or process any audio data

6. Photos and Images

Luna allows you to attach images from your photo library to cycle log entries. When you use this feature:

• Images are stored locally on your device as part of your log data
• Images are never uploaded to Studio Phoenix servers or any third-party service, even if Cloud Sync is enabled
• The App does not access your camera directly; it only accesses images you select from your photo library
• Deleting a log entry or clearing your data will remove associated images from the App's local storage

7. Data Export and Sharing

Luna provides features to export and share your health data:

• CSV Export: You can export your cycle history, daily logs, and settings as a CSV file
• PDF Reports: You can generate health reports as PDF documents for personal use or to share with your healthcare provider
• Sharing: Both CSV and PDF files can be shared via your device's native share sheet (email, messaging apps, cloud storage, AirDrop, etc.)

When you export or share data, it leaves the App under your control. Studio Phoenix is not responsible for the privacy or security of your data once you share it outside the App. We recommend sharing health data only with trusted recipients.

8. In-App Purchases and Subscriptions

Luna is free to download and use with core features available at no cost. Optional premium features, including Cloud Sync, are available through a paid subscription. Key points:

• All subscription and purchase transactions are handled entirely by the respective app store (Google Play Store or Apple App Store)
• Studio Phoenix does not collect, process, or store any payment information, billing details, or financial data
• Your subscription status is communicated to the App by the app store to unlock premium features
• Please refer to the privacy policy of your app store for details on how they handle purchase and subscription data

9. Third-Party Services

In local-only mode, Luna does not integrate with or send data to any third-party services, analytics platforms, advertising networks, or external servers.

When Cloud Sync is enabled, your encrypted data is stored using secure cloud infrastructure. Our cloud provider processes data only on our behalf and is contractually prohibited from using your data for any other purpose.

The only other third-party involvement is the app store through which you download the App and make purchases, which is governed by that app store's own privacy policy.

10. Data Sharing

We do not sell, rent, or share your data with third parties for marketing, advertising, or profiling purposes. Your data may only be disclosed in the following limited circumstances:

• With your consent: If you contact support and explicitly authorise us to access your synced data for troubleshooting
• Legal requirements: If required by law, court order, or governmental authority, we will notify you unless legally prohibited from doing so
• Service providers: Our cloud infrastructure provider (when Cloud Sync is enabled) processes data solely on our behalf under strict contractual obligations

11. Data Security

We take the security of your health data seriously:

• Local data is stored using your device's built-in storage mechanisms and is protected by your device's security (passcode, biometrics, encryption)
• Cloud-synced data is encrypted in transit (TLS) and at rest (AES-256)
• We conduct regular security reviews of our infrastructure

In the event of a data breach affecting Cloud Sync users, we will notify affected users via their registered email address and, where required, the relevant data protection authorities, within 72 hours of becoming aware of the breach. Because local-only data never reaches our servers, it cannot be affected by a server-side breach.

12. Data Retention and Deletion

Local Data

Since local data is stored on your device, you have full control over it. You can delete all your data within the App at any time via Settings > Data Management > Clear All Data. Uninstalling the App will permanently delete all local data associated with it. Studio Phoenix cannot recover local data after deletion or uninstallation.

Cloud-Synced Data

If you have enabled Cloud Sync, you can request deletion of your cloud-stored data at any time by:

• Disabling Cloud Sync within the App, which removes your data from our servers
• Deleting your account, which permanently removes all associated data from our servers within 30 days
• Contacting us at support@studiophoenix.io to request manual deletion

After deletion, your data may persist in encrypted backups for up to 90 days before being permanently removed.

13. International Data and Your Rights

Studio Phoenix is based in New Zealand. If you use Cloud Sync, your data may be processed and stored in data centres outside your country of residence. We ensure that any international transfer of data is protected by appropriate safeguards.

Regardless of where you are located, you have the following rights over your data:

• Access: View all your data at any time within the App
• Correction: Edit any data entry within the App
• Portability: Export your data as CSV or PDF at any time
• Deletion: Delete your local data instantly, or request deletion of cloud data as described above
• Withdrawal of consent: Disable Cloud Sync at any time to stop data transmission to our servers

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws (including GDPR and CCPA): in local-only mode, no personal data is collected or processed by Studio Phoenix, so these regulations have minimal applicability. When Cloud Sync is enabled, we process your data on the legal basis of your explicit consent and contractual necessity to provide the sync service. You may exercise any of the rights above by contacting us at support@studiophoenix.io.

14. Children's Privacy

Luna is a health tracking tool intended for general audiences. In local-only mode, the App collects no personal data from anyone, including children. Cloud Sync accounts require users to be at least 16 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children below this age. If we become aware that a child has created an account, we will promptly delete the associated data.

15. App Store Privacy Labels

We maintain accurate privacy disclosures on the Apple App Store and Google Play Store. In local-only mode, Luna reports that no data is collected or shared. If you enable Cloud Sync, the applicable data categories (health data, email address) are disclosed in accordance with each store's requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the effective date at the top of this page. For material changes that affect how we handle your data, we will provide notice through the App or via email (for Cloud Sync users) at least 14 days before the changes take effect. Your continued use of Luna after changes constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:
support@studiophoenix.io
Studio Phoenix
Bay of Plenty, New Zealand