🌙 Lunovya — Privacy Policy

Lunovya ("we," "us," or "our") is a fertility tracking application developed by SidInTech. We understand that the health and reproductive data you share with us is deeply personal. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

1. Information We Collect

1.1 Account Information

• Email address (when you create an account or link your anonymous account)
• Name (optional)
• Birth year (used to derive your age bracket for personalized guidance)
• Authentication method (email/password or Apple Sign-In)

1.2 Health & Reproductive Data

This is sensitive personal data. We collect it only when you actively log it within the app:

• Menstrual cycle data: Period start dates, cycle length, period length, cycle regularity, menstrual flow levels
• Fertility indicators: Basal body temperature (BBT) readings, ovulation predictor kit (OPK) results, cervical mucus observations, cervical position
• OPK test photos: Images you upload for your daily logs
• Intimacy logs: Intercourse timing and protection status
• Pregnancy test results
• Symptoms & well-being: Moods, physical symptoms, stress level, sleep hours, exercise level
• Medications & supplements: What you are taking (e.g., folic acid, prenatal vitamins)
• Personal notes: Free-text observations you add to daily logs
• Conception journey: How long you have been trying to conceive, previous pregnancy history

1.3 Usage Data

• AI chat message history (your conversations with the Lunovya assistant)
• Daily AI usage counts
• Notification preferences
• Subscription status

1.4 Device Information

• Device timezone (for scheduling reminders)
• App version and build number

2. How We Use Your Information

3. Legal Basis for Processing (GDPR)

• Consent: You actively provide your health data by logging it. You can stop logging or delete your data at any time.
• Contract performance: Processing your data is necessary to deliver the fertility tracking service you signed up for.
• Legitimate interest: Service improvement and security.

4. Third-Party Services & Data Sharing

We share data with the limited set of service providers listed below strictly to operate the Service. We never sell your data and never share health data with data brokers, advertisers, or for use-based data mining. Each provider acts as our data processor and is contractually required to provide the same or equal protection of your data as described in this Privacy Policy.

4.1 Firebase (Google Cloud Platform)

We use Firebase for authentication, database (Cloud Firestore), file storage (Firebase Storage), and cloud functions. Your data is stored on Google Cloud servers. Google processes this data as a data processor on our behalf.

• Data stored: All account, health, chat, and usage data
• OPK photos: Stored in Firebase Storage, linked to your user ID

4.2 OpenAI

Our AI chat and insights features are powered by OpenAI's language models. When you use these features:

• Data sent: Aggregated cycle signals (symptom counts, mood counts, BBT count, OPK results count, intercourse day count, average stress/sleep), your age bracket, cycle phase, days post-ovulation, and recent chat messages (up to 12).
• Data NOT sent: Your name, email, exact birth date, free-text personal notes, medication names, or OPK photos.
• Important: OpenAI processes this data to generate responses. We configure our integration so that data sent via the API is not used to train OpenAI's models, per OpenAI's API data usage policy.

4.3 RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases.

• Data shared: Your Firebase user ID, subscription status, product purchased, expiration and renewal dates.
• No health data is shared with RevenueCat.

4.4 Apple (Sign-In & App Store)

If you use Apple Sign-In, Apple shares your email (or a private relay address) and name with us based on your Apple ID settings. Apple also processes your payment for subscriptions via the App Store.

5. Partner Sharing Feature

Lunovya allows you to share a limited cycle summary with a partner:

• Shared with your partner: Your name, current cycle day, cycle phase, whether your fertile window is open, predicted next period date, and ovulation day.
• NOT shared with your partner: Daily logs, moods, symptoms, personal notes, medications, supplements, OPK photos, pregnancy test results, stress/sleep/exercise data, chat history, or any other detailed health information.
• You can unlink your partner at any time, which immediately revokes their access.

6. Data Retention

• Your data is retained for as long as your account exists.
• Partner invitation codes expire automatically after 24 hours.
• Data export files are accessible via a signed URL that expires after 1 hour.
• When you delete your account, all your data is permanently removed (see Section 7).

7. Your Rights & Choices

7.1 Access & Export

You can export all of your data (profile, daily logs, cycles, and chat history) as a JSON file directly from the app's Settings screen.

7.2 Deletion

You can delete your entire account and all associated data from the app's Settings screen. This permanently removes:

• Your user profile and account
• All daily logs, cycle records, and chat messages
• All OPK photos from our storage
• Your Firebase authentication record

Deletion is irreversible. We recommend exporting your data before deleting your account.

7.3 Chat History

You can clear your entire AI chat history at any time from within the chat screen.

7.4 Notifications

You can enable or disable each type of reminder (fertile window, BBT, test day, daily log) individually in Settings.

7.5 Withdrawing Consent

Because you provide your health data by actively logging it, you can withdraw consent at any time and without penalty by stopping logging, deleting individual entries, disabling a feature, or deleting your account from the Settings screen. Paid functionality is never conditioned on granting access to additional personal data, and withdrawing consent does not require contacting us.

7.6 Additional Rights (EU/EEA/UK/California Residents)

Depending on your jurisdiction, you may have additional rights including:

• Right to rectification of inaccurate data
• Right to restrict processing
• Right to object to processing
• Right to data portability (available via our export feature)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

8. Data Security

• All data in transit is encrypted using TLS/SSL.
• Cloud Firestore and Firebase Storage data is encrypted at rest.
• Cloud Functions are authenticated via Firebase ID tokens — only you can access your data.
• Firestore security rules enforce user-level data isolation — users can only read and write their own data.
• OPK photos are stored in user-specific paths with security rules preventing cross-user access.

9. Children's Privacy

Lunovya is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Health Disclaimer

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate (Google Cloud, OpenAI, RevenueCat). These transfers are conducted using appropriate safeguards, including standard contractual clauses where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last Updated" date above. Continued use of Lunovya after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at:

SidInTech

Support & Privacy: sidinartech@gmail.com

Website: https://sidintech.com

© 2026 SidInTech. All rights reserved. — Lunovya, Emotionally-aware fertility tracking.