Privacy Policy

1. About the service

Lunar is a personal tool for observing your state and rhythm. The service is operated by its developer, Oleg Tuaev. For questions about data, email hello@tuaev-dev.ru.

Lunar does not diagnose conditions, score people, or claim that the Moon or the menstrual cycle causes a particular state.

2. Data on your device

A working copy of your history is stored on the iPhone: morning and evening check-ins, Day Budget, notes, experiments, saved period summaries, profile settings, and reminders. It is available offline and protected by iOS system security.

Session keys are stored in iOS Keychain and are not included in your data export. The export is generated locally; you choose where to save or send it through the iOS share sheet.

3. Account and synchronization data

To sign you in, Lunar processes your email address, account identifier, active-session information, and a one-time code. No password is created or stored.

After sign-in, the app sends a synchronized copy of your personal history to the server: state check-ins, Day Budget allocation, notes, experiments, period summaries, profile settings, and reminder preference. If you enable cycle context, the start date and approximate cycle parameters are synchronized as well.

This data is linked to your account only to operate the app, restore your history, and synchronize it between devices.

4. Transfers and processors

• the app sends data to the Lunar service over an encrypted HTTPS connection;
• the Lunar server and database are hosted in the Moscow Region, Russian Federation;
• Mailganer receives your email address and the transactional email content to deliver the one-time code;
• local notifications are generated by iOS and do not require sending your history to the server.

Lunar does not share your personal history with advertising networks, analytics platforms, or data brokers.

5. Feedback through Telegram

During public testing, you may choose to open Lunar’s separate Telegram bot. Telegram processes account data and message delivery under its own terms. The Lunar bot does not automatically link your Telegram account to your email address or Lunar account.

To handle a report, the bot stores your Telegram ID, name or username, message, selected type, area, and priority, optional device details, and any images or videos you submit. These materials are available only to the closed testing team. Do not send OTP codes, passwords, or the contents of private Lunar entries.

In the bot, you can view status, add information, and delete your data. Deletion clears the local database, attachments, and temporary exports; the bot also removes known copies from the closed inbox where Telegram permits it. Drafts are deleted after 48 hours, and closed or resolved reports after 180 days.

6. Technical and security data

To limit abuse, the service uses a non-reversible technical fingerprint of the network address when a code is requested. Application logs contain only the route template, request result, duration, error code, and a random request ID — not email addresses, codes, tokens, or personal-history content.

7. Retention and deletion

Account data and synchronized history are retained while the account exists. A one-time code remains valid for ten minutes and can be used only once. Expired technical records are cleared during routine service maintenance.

Once account deletion is confirmed, the email address, active synchronized history, and sessions are removed from Lunar’s production database.

For disaster recovery, the service creates protected backups of the production database and retains them for up to 30 days. They are not used for ordinary access, analytics, or recovery of an individually deleted account. After account deletion, its data may remain in a backup until that backup reaches the end of its retention period and is removed by scheduled rotation. A full database restore is performed only after an incident; data for accounts deleted before the incident must be deleted again after restoration.

8. Your data controls

In the Me section, you can:

• save a copy of your history as JSON;
• delete your observation history;
• view and revoke active device sessions;
• sign out on the current device;
• delete your account and associated data.

If you cannot sign in, send a deletion request from the address associated with the account to hello@tuaev-dev.ru.

9. What Lunar does not use

• no advertising, third-party tracking, or analytics SDKs;
• no payments or subscriptions;
• no access to Apple Health;
• no automatic AI analysis of personal history;
• data is not sold or published automatically.

10. Policy updates

This policy is updated before new data processors, analytics, backup practices, or integrations are introduced. The current version date is always shown on this page.