Legal
Privacy Policy
Last Updated: May 30, 2025 · Version 2.1 · Effective: May 30, 2025
Your privacy is our highest priority. All your health data — cycle logs, symptoms, PCOS records, lab results, supplement tracking, and AI chat history — is stored locally on your device only. We do not operate servers that store your personal health information, and we never sell, share, or monetise your data.
1. Who We Are
Lunot ("we," "our," or "us") is a women's health and menstrual cycle tracking application available on the Apple App Store. If you have any questions about this Privacy Policy or how your data is handled, contact us at lunot.appteam@gmail.com.
2. Data We Collect and Store
All data below is stored exclusively on your device using SwiftData (a local encrypted database), iOS UserDefaults, and the iOS Keychain. None of it is transmitted to our servers.
2.1 Account Information
Collected when you sign in with Sign in with Apple:
- Your Apple-issued user ID
- Email address (optional — you may use Apple's private relay)
- Display name (optional)
Account credentials are stored locally in your iOS Keychain. We do not maintain a user account database on our servers.
2.2 Cycle & Daily Health Data
All of the following is stored locally on-device only:
Cycle Tracking
- Period start & end dates
- Cycle length history
- Flow intensity & color
- Clot presence
- Basal body temperature
- Cervical mucus type
- OPK / ovulation test results
Daily Symptoms & Mood
- Symptom tags (cramps, headache, etc.)
- Pain level (0–10)
- Energy level (0–10)
- Mood score (0–10)
- Fatigue, anxiety, stress, brain fog
- Sexual activity (optional)
- Contraception type (optional)
Lifestyle Metrics
- Water intake (glasses)
- Sleep hours & quality
- Step count
- Workout type, duration & calories
- Weight (optional)
- Nutrition quality score
- Screen time (in-app)
Health Profile
- Tracking goal
- PCOS / endo / perimenopause flags
- Contraception method
- Irregular cycle settings
- Daily health goals
- Pregnancy mode preferences
PCOS & Endo Mode
- 20 PCOS-specific symptom toggles
- 9 daily intensity scales
- Fertility signs (CM, OPK)
- Fasting glucose & weight logs
- Exercise type & duration
- Lab results (testosterone, AMH, LH/FSH, DHEA-S, fasting insulin, HOMA-IR, TSH, Vitamin D, HbA1c, CRP)
Supplement Routine
- Personal supplement stack (name, category, dosage)
- Daily adherence check-ins
- 30-day adherence history
- Efficacy correlation data (energy & mood on taken vs. not-taken days)
Symptom Detective
- Logged symptom sessions with severity
- Associated cycle phase & day
- 30-day frequency history
- Phase clustering insights
Additional Logs
- Medication tracking
- Life events
- Manifestation journal entries
- Body map pain locations
- Intimate activity log
- Lab results (LabResultsView)
2.3 Workout Logs
When you log or complete a workout in the Cycle Sync feature, the following is stored locally:
- Workout type and category
- Duration and estimated calories burned
- Cycle day and phase at the time of the workout
- Your rating (1–5 stars)
You can delete any workout log at any time from the Recent Workouts section in the app. Deleting a log also removes its calorie contribution from your daily totals.
2.4 Screen Time
Lunot tracks how long your device screen is active while the app is in use. This data is stored locally and used only to display your daily screen time in the health dashboard. It is never transmitted off your device.
2.5 AI Chat Conversations
Your conversations with Docie (the AI health companion) are saved locally on your device (up to 50 recent messages). When you send a message, a contextual summary of your current cycle data is included in the request to Anthropic's Claude API to generate a personalised response. The data sent includes:
- Current cycle day and phase
- Days until predicted next period and fertile window status
- Today's logged metrics (sleep, water, steps, workout, energy, mood, pain, symptoms)
- Your 7-day health history summary
- Your average cycle length and number of tracked cycles
This data is sent securely over HTTPS. It is not permanently stored by Anthropic beyond the duration of the API call. Your API key is stored in your iOS Keychain only — never on our servers.
3. Apple HealthKit Integration (Optional)
If you grant permission, Lunot reads the following from Apple Health:
- Step count
- Active calories burned
- Heart rate
- Body mass (weight)
- Basal body temperature
- Sleep analysis
- Menstrual flow
Lunot also writes the following to Apple Health (with your permission):
- Menstrual flow data
- Basal body temperature
HealthKit data never leaves your device through Lunot. You can revoke HealthKit permissions at any time in iOS Settings → Health → Data Access & Devices → Lunot.
4. How We Use Your Information
| Purpose | Data Used | Leaves Device? |
|---|
| Cycle tracking & predictions | Cycle entries, daily logs | No |
| PCOS / Endo mode tracking | Symptom logs, lab results | No |
| Supplement efficacy analysis | Adherence logs, daily energy & mood | No |
| AI health companion (Docie) | Cycle context summary | Yes — sent to Anthropic API |
| HealthKit sync | Selected health types | No — Apple APIs only |
| Authentication | Name, email (optional) | Yes — via Apple Sign-In only |
| In-app purchases | Purchase receipts | Yes — Apple App Store only |
5. Data Sharing
We do not sell, rent, or share your personal health data with any third parties for advertising or marketing — ever.
5.1 Third-Party Services Used
- Anthropic (Claude AI) — Processes AI chat requests. Cycle context data is sent per-request and not permanently retained. Subject to Anthropic's Privacy Policy.
- Apple Sign-In — Handles authentication. Subject to Apple's Privacy Policy.
- Apple HealthKit — Optional health data integration. Subject to Apple's policies.
- Apple StoreKit — Handles subscription payments. Subject to Apple's policies.
We do not integrate with any advertising networks, analytics SDKs, or third-party tracking services.
5.2 Legal Disclosures
We may disclose information if required by applicable law, court order, or government regulation. We will notify you where legally permitted before doing so.
6. Privacy & Security Features
- Biometric Lock (Incognito Mode) — Locks the app with Face ID, Touch ID, or Optic ID. Auto-locks when sent to background.
- Decoy App — Optionally disguises Lunot as a different app on your home screen.
- Local Encryption — All data is protected by iOS device encryption at rest.
- Keychain Storage — API keys and credentials stored in the iOS Keychain only, never in plaintext.
- HTTPS Only — All network communication uses TLS encryption.
- No Analytics SDK — We do not embed any third-party analytics or tracking library in the app.
7. Data Storage & Retention
- Cycle & Health Data — Stored on-device in SwiftData (SQLite). Retained until you delete it or uninstall the app.
- PCOS Logs & Lab Results — Stored locally in iOS UserDefaults as encrypted JSON. Retained until deleted from within the app or on uninstall.
- Supplement Routine — Stored locally in iOS UserDefaults. Cleared if you delete your routine or uninstall.
- Symptom Detective History — Stored locally in iOS UserDefaults. Cleared if you reset the feature or uninstall.
- Workout Logs — Stored locally in iOS UserDefaults. Can be deleted per-entry at any time.
- Account Info — Stored in iOS Keychain. Cleared when you delete your account.
- AI Chat History — Stored locally, last 50 messages. Cleared via "Clear Chat" or on uninstall.
- Screen Time Data — Stored locally, resets daily.
- Account Deletion — Deleting your account through the app removes all locally stored account data, Keychain entries, and API keys immediately.
8. Your Rights & Controls
- Access: All your data is visible within the app at any time.
- Export: Export your cycle data as PDF or CSV via Settings → Export.
- Delete: Delete individual entries, clear all data, or delete your entire account from Profile → Settings → Delete Account.
- Workout Logs: Delete individual workout entries by swiping left on them in the Recent Workouts section.
- HealthKit: Revoke access in iOS Settings → Health → Data Access & Devices → Lunot.
- AI: Clear your chat history from the Docie tab. Remove your API key from Settings.
- Notifications: Manage in iOS Settings → Notifications → Lunot.
9. Children's Privacy
Lunot is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, please contact us at lunot.appteam@gmail.com and we will assist with data removal.
10. International Users
GDPR (EU/EEA Users)
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict processing, data portability, and to withdraw consent at any time. Because all health data is stored locally on your device, most rights can be exercised directly within the app. Contact lunot.appteam@gmail.com for any requests we need to assist with.
CCPA (California Residents)
We do not sell personal information. California residents may request disclosure of any personal data collected. Contact lunot.appteam@gmail.com to exercise CCPA rights.
11. Changes to This Policy
We will notify you of material changes through in-app notification and by updating the "Last Updated" date above. Continued use after changes are posted constitutes acceptance of the updated policy.