eluna's Privacy Policy

---

1. Information We Collect

eluna collects only the information necessary to provide its features. Most data is stored locally on your device. When you sign in or enable cloud features, certain data is also stored on our servers.

Account Information

When you create an account, we collect:

• Email address
• Display name (provided by you or from Apple Sign In)
• A unique user ID generated by our authentication system

You can sign in using email and password or Apple Sign In. If you use Apple Sign In, we receive a one time identity token from Apple to verify your account. We do not receive or store your Apple ID password.

Cycle Information

To provide cycle tracking and predictions, eluna stores:

• Cycle start date
• Cycle length and period length
• Cycle history and phase predictions
• Late period indicators

Symptom and Wellness Logs

You may log daily wellness information including:

• Mood and energy levels
• Flow level, cramps, bloating, headaches, and breast tenderness
• Focus, skin condition, libido, and discharge
• Optional free text notes

These logs allow eluna to detect patterns and generate personalized insights. Logging is always optional.

Profile Information (Optional)

During onboarding or later use, you may optionally provide:

• Birth year
• Whether you typically experience cramps
• Birth control status

This information helps eluna personalize AI insights. Providing it is entirely optional.

Purchase Information

If you subscribe to eluna+, we store a record of your purchase on our servers to verify your subscription status across devices. This includes:

• Product purchased (monthly, yearly, or lifetime)
• Transaction ID and original transaction ID from Apple
• Purchase date and expiration date
• Whether the subscription is currently active
• Purchase environment (sandbox or production)

We do not collect or store credit card numbers, billing addresses, or any payment method details. All payment processing is handled by Apple through the App Store.

---

2. How We Use Your Information

We use the information we collect to:

• Provide cycle tracking, phase predictions, and daily insights
• Generate personalized AI insights based on your cycle phase, logged symptoms, and patterns
• Enable partner mode so your partner can understand your cycle
• Verify your subscription status across devices
• Sync your data across your devices when you enable cloud features
• Send local notifications for period reminders, ovulation reminders, and logging reminders

---

3. Partner Mode

eluna includes a partner mode feature that allows you to share selected cycle information with your partner.

How Partner Mode Works

When you invite your partner using a 6 digit invite code, they gain access to a partner view of your cycle data. Invite codes expire after 1 hour and can only be used once.

What You Control

You have granular control over exactly what your partner can see. Each of the following can be individually enabled or disabled:

• Current cycle phase
• Next expected period date
• Fertile window dates
• Current cycle day
• Mood and energy levels
• Symptoms
• Tonight message (a custom note you send to your partner)
• AI generated daily partner insight

By default, mood, energy, phase, next period date, tonight message, and AI insights are shared. Fertile window, exact cycle day, and symptoms are not shared by default. You can change these permissions at any time.

What Your Partner Receives

Based on your permission settings, your partner may see:

• Your current cycle phase and phase description
• A daily AI generated tip on how to support you
• Your mood and energy if you have shared them
• A rolling 7 day summary of your recent logs (filtered by your permissions)
• Your display name

Your partner never sees your personal notes, chat history, PIN code, birth year, birth control status, or any data you have not explicitly enabled.

Disconnecting

You can revoke partner access at any time from the app settings. Once revoked, your partner immediately loses access to your cycle data.

---

4. AI Features

eluna includes an AI powered assistant that generates cycle insights and allows you to ask questions about your cycle, symptoms, and emotional wellbeing.

Data Processed by AI

When AI features are used, the following contextual data may be processed:

• Current cycle phase and cycle day
• Logged symptoms, mood, and energy
• Historical cycle patterns
• Optional profile information (birth year, cramps tendency, birth control)
• Messages you submit in the AI chat (capped at 5,000 characters per message)
• Recent conversation context (up to 25 messages)
• Notes from daily logs (first 600 characters, sanitized)

How AI Requests Are Processed

AI requests are sent from the app through a secure proxy server, which communicates with our AI provider (Anthropic). Your data is transmitted over encrypted connections (HTTPS). The proxy server does not permanently store your messages or cycle data.

Partner AI Features

Your partner can also interact with the AI to ask questions about your cycle. The AI only receives data that matches your partner permission settings. It will never reveal information you have not shared.

Important Limitations

AI responses are generated automatically and may not always be accurate. The AI features in eluna are provided for informational purposes only and are not intended as medical advice. You should consult qualified healthcare professionals for medical concerns.

---

5. Data Storage

Local Storage

Most eluna data is stored locally on your device using secure system storage. This includes:

• Cycle settings and history
• Daily wellness logs and notes
• Chat history (last 100 messages, automatically cleared after 30 days of inactivity)
• AI insight cache
• Reminder preferences and app settings
• Premium status (cached locally for offline access)

Keychain Storage

Sensitive security data is stored in Apple Keychain, which provides hardware level encryption:

• PIN lock code
• Lockout state and attempt count
• Authentication session tokens

PIN codes and lockout data are never synced to the cloud or transmitted externally.

Cloud Storage

When you sign in to an account, certain data is stored on our cloud servers (hosted by Supabase) to enable cross device sync, partner mode, and subscription verification:

• Your user profile (display name)
• A snapshot of your current cycle state (cycle day, phase, cycle length, period length, next period date, mood, energy, symptoms based on partner permissions)
• Partner links and permission settings
• AI generated daily partner insights
• Invite codes (temporary, expire after 1 hour)
• Purchase receipt records for subscription verification

Cloud data is transmitted over encrypted connections and stored in secure databases with row level security, meaning users can only access their own data.

iCloud Synchronization

If enabled, eluna can synchronize data through Apple iCloud using a private CloudKit container.

Data that may sync includes:

• Cycle settings
• Cycle history
• Daily logs
• Reminder preferences
• App setup status

This data is stored in your private iCloud database, accessible only through your Apple ID. You can disable iCloud synchronization at any time in the app settings.

---

6. Third Party Services

eluna uses the following third party services to provide its features:

• Supabase: Cloud database and authentication
• Anthropic (via secure proxy): AI processing for insights and chat responses
• Apple Sign In: Optional authentication provider
• Apple StoreKit: In app purchase processing
• Apple CloudKit: Optional iCloud data synchronization

We do not use any third party analytics, advertising, or tracking services. eluna does not contain ads and does not share your data with advertisers.

---

7. Data Sharing

eluna does not sell, rent, or share personal information with advertisers or third party marketing companies.

Your data is only transmitted when required to provide app functionality:

• AI insight and chat processing (sent to our AI provider through a secure proxy)
• Cloud synchronization (stored on our servers)
• iCloud synchronization (stored in your private Apple iCloud container)
• Partner mode (shared with your connected partner based on your permission settings)

---

8. Notifications

eluna may send local notifications for upcoming period reminders, ovulation reminders, and daily logging reminders. Notification timing is calculated locally using cycle prediction logic. No personal data is transmitted externally for notifications. You may disable notifications at any time through your device settings.

---

9. Widgets

eluna may display cycle information through iOS lock screen or home screen widgets, including cycle phase, cycle day, countdown to next period, wellness tips, and phase insights. Widget data is shared between the app and widget extension using Apple's App Group storage with encryption. No personal information is transmitted externally through widgets.

---

10. Data Export

eluna allows you to export your logged cycle data as a CSV file. Exported files may include date, cycle day, cycle phase, logged symptom values, and user notes. Exported files are generated locally on your device and are shared only when you choose to share them.

---

11. Crash Diagnostics

eluna uses Apple MetricKit to receive crash diagnostics and performance metrics from the system. These reports are stored locally on your device (up to 30 entries) and are not transmitted to any external service.

---

12. Security

eluna uses several platform security features to protect your information:

• Apple Keychain for secure PIN and session storage
• Row level security on cloud databases (users can only access their own data)
• Encrypted connections (HTTPS) for all server communication
• Private CloudKit containers for iCloud synced data
• Hardware level encryption for sensitive local data
• Automatic chat history expiration after 30 days of inactivity

---

13. Data Retention and Deletion

Your data remains stored on your device or in your cloud account until you delete it.

You may remove your data by:

• Deleting individual logs within the app
• Clearing all logged data
• Disabling iCloud sync
• Deleting your account (this permanently removes all server side data including your profile, cycle snapshots, partner links, and purchase records)
• Removing the app from your device (this removes locally stored data)

When you delete your account, a server side process permanently removes all data associated with your user ID from our databases. This action cannot be undone.

Please note that Keychain data (PIN codes) may persist on your device after app deletion due to how Apple Keychain works. You can clear this by reinstalling the app and resetting the PIN.

---

14. Children's Privacy

eluna is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take steps to remove that information.

---

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be reflected by the updated date at the top of this document. We encourage you to review this policy periodically.

---

16. Contact