Your logs stay on your phone.

Who we are

Lune is made by Aster Hills LLC, 16192 Coastal Highway, Lewes, DE 19958, USA, who is the data controller for the processing described here. Contact: contact@asterhills.co.

What stays on your phone

On your device only: your period and symptom logs, the medications, supplements and lifestyle tags you log, notes, the background you entered (tracking mode, birth year, conditions, cycle range), your settings, and any workouts or steps you chose to import from Health Connect. We have no copy of this data and cannot see it.

You can export all of it as CSV or JSON, and delete all of it, from You → Your data in the app. Uninstalling the app deletes it too. Lune does not include your logs in Android cloud backups.

Health Connect

If you connect it, Lune reads the following from Health Connect:

Lune never writes to Health Connect, and never shares Health Connect data with advertisers or analytics services, or uses it for advertising. The only time any of it leaves your phone is if you use the optional AI guidance: the two-week summary can then include values that came from Health Connect (flow, a temperature, an ovulation-test result, and workouts as tags). You can revoke access at any time in Health Connect settings; Lune keeps working without it.

Lune's use and transfer of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Analytics and ad measurement

On first launch Lune shows both choices, switched on, and starts neither until you tap Continue. You can switch either off there, or at any time in You → Analytics & ads choices. Switching one off stops it immediately.

Usage analytics — Amplitude (US data centre)

A few anonymous usage events: opening the app (at most once a day), finishing setup, which features you use (for example the calendar, patterns or the widget — at most once a day each, never what you logged), viewing the subscription screen and where you opened it from, and starting or completing a purchase, including a free trial turning into a paid plan (plan and price). Amplitude also receives the goal you picked during setup (irregular cycle, fairly regular, trying to conceive, perimenopause or hormonal birth control), so we can see what people use Lune for; only the goal, never the details behind it. Each event carries a random install id and basic device information (device model, Android version, app version, language). Amplitude uses your IP address to work out an approximate location (country, region and city) and does not keep the address itself. Lune turns off collection of the advertising id and mobile carrier. Purpose: understanding how the app is used so we can improve it.

Ad measurement — Meta (Facebook)

App installs and opens, finishing onboarding, viewing the subscription screen, starting checkout, starting a trial, and paying for a subscription (with plan and price). Meta never receives your goal. Meta receives these events with your device's advertising id so we can tell which Lune ads lead to installs and subscriptions. Meta's processing is described in the Meta Privacy Policy. You can reset or delete your advertising id in Android Settings → Privacy → Ads.

AI guidance (Lune Pro)

Lune's read and “Ask a question” are part of Lune Pro, up to 5 replies a day. Only when you tap “Ask for today's read” or ask a question, Lune sends a summary to Aster Hills' AI relay (Google Cloud Firebase, United States), which passes it to OpenAI to write the reply. The relay doesn't store or log what you send, and asks OpenAI not to store the reply. The summary contains:

• your goal, contraception method and any conditions you entered, and your age bracket (for example “30s”);
• cycle statistics, today's cycle day, the estimated phase and predictions, and patterns found on your device;
• the last 14 days of logs: flow; energy, sleep and pain scores; symptoms; moods; food and lifestyle tags (including workouts); medications and supplements; “felt fine”; basal temperature; LH test results; cervical mucus; and the first 120 characters of any note. Some of these values may have come from Health Connect.

Not sent: your name, your exact birth year, step counts, or anything older than two weeks. OpenAI's handling of API data is described in its API data usage policy. To keep the feature to the real Lune app and within the daily limit, each request carries a random anonymous ID (Firebase sign-in, no account or email) and, where Google Play can vouch for the install, an App Check token; the relay keeps only a daily count for that ID. Every AI reply has a “Report” link if something it says is wrong or inappropriate.

Subscriptions

Lune Pro is billed by Google Play. We never see your payment details. The app asks Google Play whether your subscription is active. If you start a free trial, Lune reminds you the day before it ends. Manage or cancel in Google Play → Payments & subscriptions.

Notifications

Reminders and daily questions are scheduled locally on your phone. No push service is used.

Why we may process data

• Analytics and ad measurement — your consent, which you can withdraw at any time in the app. For the goal you picked, which can say something about your health (for example trying to conceive), this is your explicit consent, given with the analytics choice.
• AI guidance — your explicit consent, given by setting up the feature and asking for a read. Health information is sent only at your request.
• Subscriptions — to provide the service you bought (performance of a contract).
• Support emails and AI reply reports — our legitimate interest in answering you and keeping the app safe.

International transfers

Amplitude, Meta, Google (Firebase, for the AI relay) and OpenAI process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

How long data is kept

Your rights

Depending on where you live, you can ask to access, correct or delete personal data about you, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Because your logs never reach us, the quickest way to export or delete them is in the app. For anything else, email contact@asterhills.co. You also have the right to complain to your local data-protection authority.

Delete your data

1. Everything you logged: in Lune, open You → Your data → Delete everything, or uninstall the app. This removes all of it from your phone; we hold no copy.
2. Analytics and ad-measurement events: switch both off in You → Analytics & ads choices, then email contact@asterhills.co with the subject “Lune data deletion”. We delete the matching Amplitude records and ask Meta to do the same within 30 days.
3. Health Connect: remove Lune's access in Health Connect settings. Lune never stored a copy anywhere but your phone.

Children

Lune is intended for adults aged 18 and over.

Not medical advice

Lune is a tracking companion, not a medical device and not a method of contraception. Predictions are estimates from your own history, and patterns are observations, not diagnoses. For anything that worries you, talk to a doctor or other healthcare professional.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date, and important changes will be shown in the app. Questions: contact@asterhills.co.