Privacy Policy

1. Who We Are

Lune ("Lune," "we," "our," or "us") is a cycle-synced fitness application developed and operated by Lune Health Inc. Our app is available on iOS.

This Privacy Policy explains how we collect, use, and protect your information when you use the Lune mobile application and our website at getlune.app.

2. Information We Collect

Account Information

• Email address and password (used to create and secure your account)
• Name (optional, used for personalization)

Health & Fitness Data

This is the core of what Lune does. We collect health data to personalize your workouts to your cycle:

• Menstrual cycle data — cycle start dates, cycle length, phase tracking
• Daily check-ins — energy, mood, soreness, motivation, and sleep quality scores you enter
• Workout history — workouts completed, duration, intensity, ratings
• Health profile — fitness goal, health conditions (PCOS, endometriosis, etc.), mode selection, equipment

Apple HealthKit Data (optional)

If you grant permission, Lune reads the following from Apple Health:

• Heart rate variability (HRV)
• Resting heart rate
• Sleep analysis
• Active energy and step count

HealthKit data is used only to improve workout recommendations. We do not share HealthKit data with third parties for advertising or marketing purposes. HealthKit data is never sold.

Garmin Connect Data (optional)

If you connect your Garmin account, we access:

• Body Battery score
• Training load
• Stress score
• VO2 Max estimate
• Sleep data
• Menstrual cycle data (if tracked on device)

Garmin data is used solely to calibrate workout intensity recommendations. You can disconnect Garmin at any time from your profile settings.

Usage Data

• App interactions (screens visited, features used) — used to improve the app
• Crash reports and error logs — used to fix bugs
• Device type and OS version — used for compatibility

3. How We Use Your Data

4. Data Sharing

We do not sell your personal data. We do not share your health data with advertisers.

We work with the following trusted service providers who process data on our behalf:

• Supabase — secure database hosting (your account and health data)
• Anthropic — AI processing for Luna coach responses (messages are processed but not stored by Anthropic)
• RevenueCat — subscription management (no health data shared)
• Apple HealthKit — on-device health data access
• Garmin Connect — fitness device data (if connected)

We may disclose data if required by law or to protect the safety of our users.

5. Sensitive Health Data

Lune handles sensitive health information including menstrual cycle data, health conditions (such as PCOS and endometriosis), and biometric data. We treat this data with the highest level of care:

• All data is encrypted in transit (TLS) and at rest
• Health data is stored in your private account and is never publicly accessible
• We apply row-level security — only you can access your data
• We do not use health condition data for advertising targeting

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your health data, cycle history, and workout logs are permanently deleted within 30 days
• Anonymized, non-identifiable usage statistics may be retained to improve the app
• Backup copies are purged within 90 days

7. Your Rights

You have the right to:

• Access — request a copy of all data we hold about you
• Correct — update inaccurate health or profile data in the app
• Delete — delete your account and all associated data from Profile → Account → Delete Account
• Export — request an export of your data in a portable format
• Withdraw consent — disconnect HealthKit or Garmin at any time; disable notifications in Profile → Preferences

For GDPR requests (EU users) or CCPA requests (California users), email us at privacy@getlune.app. We respond within 30 days.

8. Children's Privacy

Lune is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy as the app evolves. When we make material changes, we will notify you via in-app notification or email at least 14 days before the changes take effect. Continued use of Lune after that date constitutes acceptance of the updated policy.

10. Contact Us