eluna collects only the information necessary to provide its features. Most data is stored locally on your device. When you sign in or enable cloud features, certain data is also stored on our servers, as described in this policy.

Account Information

When you create an account, we collect:

• Email address
• Display name (provided by you or from Apple Sign In)
• A unique user identifier generated by our authentication system

You can sign in using email and password or Apple Sign In. If you use Apple Sign In, we receive a one time identity token from Apple to verify your account, and we receive your name and a relay or real email address only if you choose to share them. We do not receive or store your Apple ID password.

Cycle Information

To provide cycle tracking and predictions, eluna stores:

• Cycle start date
• Cycle length and period length
• Cycle history and phase predictions
• Fertile window and ovulation estimates
• Late period indicators

Symptom and Wellness Logs

You may log daily wellness information, including:

• Mood and energy levels
• Flow level, cramps, bloating, headaches, and breast tenderness
• Focus, skin condition, libido, and discharge
• Optional free text notes

These logs allow eluna to detect patterns and generate personalized insight. Logging is always optional.

Profile Information (Optional)

During onboarding or later use, you may optionally provide:

• Birth year
• Whether you typically experience cramps
• Birth control status

This information helps eluna personalize AI insight. Providing it is entirely optional.

Purchase Information

If you subscribe to eluna+, we store a record of your entitlement so we can verify your subscription status across your devices. This may include:

• Product purchased (monthly, yearly, or lifetime)
• Transaction identifier and original transaction identifier from Apple
• Purchase date and expiration date
• Whether the subscription is currently active
• Purchase environment (sandbox or production)

We do not collect or store credit card numbers, billing addresses, or any payment method details. All payment processing is handled by Apple through the App Store.

Technical and Connection Data

Like any internet service, eluna processes basic connection information when your device communicates with our servers. Our AI proxy temporarily reads your device's IP address to apply rate limits, and our cloud provider processes IP addresses to establish authenticated database connections. This connection data is used only to keep the Services secure, prevent abuse, and maintain reliability. It is not used to build advertising profiles, and it is not sold.

Information We Do Not Collect

eluna does not collect precise location, your contacts, your photos, your browsing history, or device advertising identifiers, and it contains no third party analytics, advertising, or tracking software. We do not build advertising profiles and we do not track you across other companies' apps or websites.

We use the information we collect to:

• Provide cycle tracking, phase predictions, fertile window estimates, and daily insight
• Generate personalized AI insight based on your cycle phase, logged symptoms, and patterns
• Suggest phase aware movement goals and record movement sessions you choose to log
• Enable partner mode so a person you invite can understand your cycle
• Provide the optional community, including publishing and moderating content you choose to post
• Verify your subscription status across devices
• Sync your data across your devices when you enable cloud features
• Send local notifications for period reminders, ovulation reminders, logging reminders, gentle aftercare, and optional supplement reminders you enable
• Maintain the security and integrity of the Services and comply with applicable law

We do not use your personal information to serve advertising, and we do not sell it.

Where the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, or similar laws apply to you, we rely on the following legal bases to process your personal information:

• Consent. For optional features such as cloud sync, Apple Health access, partner mode, the community, AI features, and optional reminders. You may withdraw consent at any time, and doing so does not affect processing carried out before withdrawal.
• Performance of a contract. To provide the App and the features you request, including account authentication and eluna+ subscription verification.
• Legitimate interests. To keep the Services secure, prevent abuse, moderate community content, and improve reliability, balanced against your rights and freedoms.
• Legal obligation. Where we must process information to comply with the law.

Cycle, symptom, and health related information is treated as special category (sensitive) data, and we process it only with your consent or as otherwise permitted by applicable law.

With your explicit permission, eluna can read certain health information from Apple Health to improve the accuracy of your cycle history and predictions, and it can offer to write a limited category of information back.

What eluna May Read

• Menstrual and period history, to help reconstruct and refine your cycle timeline
• Reproductive health signals that support prediction, such as basal body temperature and related indicators, where available
• Step counts, used only on your device to set and reflect a phase aware movement goal

What eluna May Write (Optional)

If you turn it on, eluna can write menstrual flow entries back to Apple Health so your records stay consistent. This is opt in and can be turned off at any time.

Apple Health access is entirely optional. You can grant or revoke eluna's access to specific Apple Health data types at any time in the Apple Health app or in your device settings. Apple's handling of Health data is governed by Apple's own privacy policy.

eluna includes movement features that help you stay active in a way that fits your current phase.

Movement Sessions

You may record movement sessions, such as a walk. eluna stores the type of session, its duration, and related activity details you choose to log. This information is used to reflect your activity, encourage gentle movement, and celebrate streaks.

Motion Data and On Wrist Walks

The eluna app for Apple Watch can track a walk directly on your wrist. To do this, it uses the device's motion and fitness sensors (for example, live step count and distance) through Apple's motion services. This motion data is processed on the device to display your live walk and to record the resulting session. eluna's Apple Watch walk does not require Apple Health access to function.

How the Apple Watch App Communicates

The eluna Apple Watch app shows a summary of your current cycle and lets you start a walk or log a period from your wrist. Your iPhone and Apple Watch exchange this information directly with each other using Apple's on device connectivity between paired devices. The Apple Watch app does not maintain its own separate cloud account, and it relies on the same privacy settings as the App on your iPhone.

eluna includes an optional partner mode that allows you to share selected cycle information with a person you invite ("your partner").

How Partner Mode Works

When you invite your partner using a 6 character invite code, they gain access to a partner view of your cycle data. Invite codes expire after 1 hour and can only be used once.

What You Control

You have granular control over exactly what your partner can see. Each of the following can be individually enabled or disabled:

• Current cycle phase
• Next expected period date
• Fertile window dates
• Current cycle day
• Mood and energy levels
• Symptoms
• Tonight message (a custom note you send to your partner)
• AI generated daily partner insight

By default, mood, energy, phase, next period date, tonight message, and AI insight are shared. Fertile window, exact cycle day, and symptoms are not shared by default. You can change these permissions at any time, and a master control lets you pause partner access entirely.

What Your Partner Receives

Based on your permission settings, your partner may see:

• Your current cycle phase and phase description
• A daily AI generated tip on how to support you
• Your mood and energy, if you have shared them
• A rolling 7 day summary of your recent logs, filtered by your permissions
• Your display name

Your partner never sees your personal notes, journal entries, chat history, PIN code, birth year, birth control status, or any data you have not explicitly enabled. When you hide your exact cycle day, AI insight shown to your partner will not reveal a specific day number.

Disconnecting

You can revoke partner access at any time from the app settings. Once revoked, your partner immediately loses access to your cycle data.

eluna includes an AI powered assistant that generates cycle insight and lets you ask questions about your cycle, symptoms, and emotional wellbeing.

Data Processed by AI

When AI features are used, the following contextual data may be processed:

• Current cycle phase and cycle day
• Logged symptoms, mood, and energy
• Historical cycle patterns
• Optional profile information (birth year, cramps tendency, birth control)
• Messages you submit in the AI chat (capped at 5,000 characters per message)
• Recent conversation context (up to 25 messages)
• Notes from daily logs (up to 1,500 characters, sanitized), and a short excerpt of the previous day's note

Free text you provide is sanitized before it is used in an AI request. As described in Section 4, Apple Health data and step counts are never included in any AI request.

How AI Requests Are Processed

AI requests are sent from the App through a secure proxy server, which communicates with our AI provider, Anthropic, over encrypted connections (HTTPS). The proxy exists so that the AI provider's key stays on the server and is never embedded in the App. The proxy applies rate limits and does not permanently store your messages or cycle data. Anthropic processes requests to generate a response and, under our arrangement, does not use your data to train its models.

Community Moderation

If you use the community, the text of any comment you submit is sent to our AI provider through the same secure proxy for automated moderation before it is stored, as described in Section 9.

Partner AI Features

Your partner can also interact with the AI to ask questions about your cycle. The AI only receives data that matches your partner permission settings. It will never reveal information you have not shared.

Important Limitations

AI responses are generated automatically and may not always be accurate. The AI features in eluna are provided for informational purposes only and are not a substitute for professional medical advice. eluna does not make automated decisions that produce legal or similarly significant effects about you. You should consult qualified healthcare professionals for medical concerns. eluna is not a medical device and is not a form of contraception, and its cycle, fertile window, and ovulation estimates are predictions that may be inaccurate. See the Health Disclaimer in Section 3 of our Terms of Service for full details.

eluna includes a private journal where you can write or record voice reflections and tag them to your current phase.

If you use voice reflection, speech is converted to text using Apple's on device or system speech recognition, and eluna requests microphone and speech recognition access for this purpose. You may optionally enable an AI reflect back feature, in which case the text of the entry you are reflecting on is sent through the secure proxy described in Section 7 to generate a gentle response. Reflect back is off unless you turn it on, and the underlying journal entry still remains stored only on your device.

eluna offers an optional, sign in gated community where you can read discussion threads, comment on them, like, report, and block other members. Threads are generated by eluna, not by members, so the content you contribute is limited to your comments, likes, reports, and blocks.

What We Collect

• A community nickname or display name you choose
• The content of comments you choose to post
• Likes, reports, and blocks you create

Content you post to the community is visible to other members. Please do not include information in community posts that you wish to keep private.

Moderation

To keep the community safe, every comment is automatically reviewed by our AI moderation provider before it is stored. Comments are submitted through a secure server function that performs this pre moderation and rejects content that violates our community rules. Members can also report or block others. We may remove content and restrict or remove accounts that violate our terms.

Ambient Presence

eluna may show a gentle, aggregate count of how many members are currently in the same phase as you. This figure is anonymous and aggregated, is only surfaced when enough members are present to prevent identification, and does not reveal any individual's identity.

Local Storage

Most eluna data is stored locally on your device using secure system storage. This includes:

• Cycle settings and history
• Daily wellness logs and notes
• Journal entries and voice reflections
• Movement sessions
• Chat history (last 100 messages, automatically cleared after 30 days of inactivity)
• AI insight cache
• Reminder preferences and app settings
• Premium status (cached locally for offline access)

Keychain Storage

Sensitive security data is stored in Apple Keychain, which provides hardware level encryption:

• PIN lock code
• Lockout state and attempt count
• Authentication session tokens

PIN codes and lockout data are never synced to the cloud or transmitted externally.

Cloud Storage

When you sign in to an account, certain data is stored on our cloud servers (hosted by Supabase) to enable cross device sync, partner mode, community, and subscription verification:

• Your user profile (display name)
• A snapshot of your current cycle state (such as cycle day, phase, cycle length, period length, next period date, and, based on your partner permissions, mood, energy, and symptoms)
• Cycle settings, daily logs, and cycle history, when cloud sync is enabled
• AI chat messages and chat memory, when cloud sync is enabled
• Partner links and permission settings
• AI generated daily partner insight
• Invite codes (temporary, expire after 1 hour)
• Community profile, comments, likes, reports, and blocks, if you use the community
• Subscription entitlement records for verification

Cloud data is transmitted over encrypted connections and stored in secure databases protected by row level security, meaning each user can access only their own data.

iCloud Synchronization

If enabled, eluna can synchronize data through Apple iCloud using a private CloudKit container. Data that may sync includes:

• Cycle settings
• Cycle history
• Daily logs
• Reminder preferences
• App setup status

This data is stored in your private iCloud database, accessible only through your Apple ID. As noted in Section 4, data imported from Apple Health is excluded from iCloud sync. You can disable iCloud synchronization at any time in the app settings.

Widget and Companion Storage

To power widgets and the Apple Watch app, a small snapshot of your cycle state is shared between the App and its extensions using Apple's App Group storage, in encrypted form, on your device.

eluna uses the following third party services to provide its features:

• Supabase: cloud database and authentication
• Railway: hosting for the secure proxy that relays AI requests to our AI provider
• Anthropic (via the secure proxy): AI processing for insight, chat responses, and community moderation
• Apple Sign In: optional authentication provider
• Apple StoreKit: in app purchase processing
• Apple CloudKit: optional iCloud data synchronization
• Apple Health: optional, with your permission, as described in Section 4

Each provider processes information only to deliver its part of the Services and is bound by its own terms and privacy commitments. We do not use any third party analytics, advertising, or tracking services. eluna does not contain ads and does not share your data with advertisers.

eluna does not sell, rent, or trade personal information, and it does not share personal information with advertisers or third party marketing companies.

Your data is transmitted only when required to provide app functionality:

• AI insight, chat, and community moderation (sent to our AI provider through a secure proxy)
• Cloud synchronization and community (stored on our servers)
• iCloud synchronization (stored in your private Apple iCloud container)
• Partner mode (shared with the partner you connect, based on your permission settings)
• Community content (visible to other members when you choose to post)

We may also disclose information if required to do so by law, to enforce our terms, to protect the rights, safety, and security of our users or the public, or in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information and notify you of any change in ownership or control.

eluna may send local notifications for upcoming period reminders, ovulation reminders, daily logging reminders, gentle aftercare messages, and optional supplement reminders that you enable. Notification timing is calculated locally on your device using cycle prediction logic. No personal data is transmitted externally to deliver these notifications. On a device used in partner mode, reminders intended for the account owner are suppressed. You may disable notifications at any time through your device settings.

eluna may display cycle information through Lock Screen or Home Screen widgets, including cycle phase, cycle day, countdown to the next period, wellness tips, and phase insight. Widget data is shared between the App and the widget extension using Apple's App Group storage with encryption. No personal information is transmitted externally through widgets.

eluna allows you to export your logged cycle data as a CSV file. Exported files may include date, cycle day, cycle phase, logged symptom values, and user notes. Exported files are generated locally on your device and are shared only when you choose to share them.

eluna uses Apple MetricKit to receive crash diagnostics and performance metrics from the system. These reports are stored locally on your device (up to a small number of recent entries) and are not transmitted to any external service by eluna. Separately, if you have enabled sharing of diagnostics with Apple in your device settings, Apple may provide us with aggregated crash information through App Store Connect in accordance with Apple's policies.

eluna uses several platform security features to protect your information:

• Apple Keychain for secure PIN and session storage
• Row level security on cloud databases, so users can access only their own data
• Encrypted connections (HTTPS) for all server communication
• Private CloudKit containers for iCloud synced data
• Hardware level encryption for sensitive local data
• Server side pre moderation of community content
• Automatic chat history expiration after 30 days of inactivity

No method of transmission or storage is completely secure. While we work to protect your information using industry standard measures, we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

Your data remains stored on your device or in your cloud account until you delete it, or until it is removed automatically (for example, chat history that expires after 30 days of inactivity, or invite codes that expire after 1 hour).

You may remove your data by:

• Deleting individual logs within the App
• Clearing all logged data
• Deleting individual journal entries
• Disabling iCloud sync
• Deleting your account, which permanently removes your server side data, including your profile, cycle snapshots, cloud synced logs and history, chat messages, partner links, community content, and entitlement records
• Removing the App from your device, which removes locally stored data

When you delete your account, a server side process permanently removes the data associated with your user identifier from our databases. Account deletion and data erasure are complete regardless of the sign in method you used. This action cannot be undone.

If you choose to tell us why you are leaving when you delete your account, we record that reason together with the app version you were using. This record contains no account identifier, so it remains anonymous, and we retain it to understand why members leave and to improve the App.

Please note that Keychain data (such as a PIN code) may persist on your device after app deletion due to how Apple Keychain works. You can clear this by reinstalling the App and resetting the PIN.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate or incomplete information
• The right to delete your information (the right to erasure)
• The right to restrict or object to certain processing
• The right to data portability, where applicable
• The right to withdraw consent at any time, without affecting processing already carried out
• The right to lodge a complaint with your local data protection authority

Many of these actions can be performed directly in the App, including exporting your data and deleting your account. To exercise any right that is not available in the App, contact us using the details in Section 24. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with specific rights regarding your personal information.

We collect the categories of personal information described in this policy, including identifiers (such as email and user identifier), health and wellness information you provide, purchase records, and user generated content. We collect this information for the business purposes described in Section 2, and we retain it as described in Section 18.

Subject to the CCPA, you have the right to know what personal information we collect and how we use it, the right to request access to and deletion of your personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising your rights.

To exercise your California rights, use the account and data controls in the App or contact us using the details in Section 24.

eluna is available internationally, and the third party providers described in Section 11 may process and store information on servers located in countries other than your own, including the United States. Where information is transferred across borders, we rely on the safeguards offered by those providers and on the legal mechanisms permitted under applicable law, such as standard contractual clauses, to protect your information. By using the Services, you understand that your information may be processed in these locations.

eluna is not directed to, and is not intended for use by, children under the age of 13, and where a higher minimum age applies under local law (for example, 16 in parts of the European Economic Area), that higher age applies. We do not knowingly collect personal information from children under the applicable minimum age. If we learn that we have collected such information without the required consent, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us using the details in Section 24.

We may update this Privacy Policy from time to time to reflect changes to the App, our practices, or applicable law. When we do, we will revise the "Last updated" date at the top of this document, and for material changes we will provide a more prominent notice where appropriate. Your continued use of the Services after an update takes effect constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

eluna is operated by Abdul Rehman Haider, a sole trader, the data controller for the personal information described in this policy. If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about your data, you may contact us using the details below, and we will respond within the time required by applicable law.

If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns first, so we encourage you to contact us before you approach the regulator.