Privacy policy
Effective 16 October 2026
In short: Luna keeps your journal on your own device. We don’t have accounts, we don’t collect your health information, and we don’t use advertising or analytics. The only time Luna contacts our server is when you choose to activate Luna Plus, and then it sends only your license key.
Who we are
Luna is provided by Som Annan (“we”, “us”). You can contact us at lunajournal.help@gmail.com.
What Luna stores, and where
Everything you enter in Luna is saved in your web browser’s storage on your device. This includes your chapter dates, period history, daily check-ins, symptoms, moods, notes, appointments, movement, feeding, blood pressure, weight and bleeding records, questions, and settings.
This information is not sent to us or to anyone else. We cannot see it, recover it, or delete it for you.
If you turn on protection in Settings, Luna encrypts your journal with a passphrase you choose (AES-256-GCM, with a key derived on your device). We never receive your passphrase. If you forget it, your encrypted journal cannot be recovered.
What we don’t collect
- No account, name, email address or phone number is needed to use Luna.
- No health or journal information is ever sent to us.
- No advertising, analytics, tracking pixels or third-party fonts or scripts.
- No location, contacts, photos or microphone access.
When information does leave your device
- Visiting the website. Our hosting provider, Cloudflare, processes standard technical information such as your IP address and browser type to deliver the site and protect it from abuse. We do not use this to identify you.
- Buying Luna Plus. Purchases are handled by Lemon Squeezy, which acts as the seller (merchant of record). Lemon Squeezy collects your email address and payment details under its own privacy policy. We receive order information such as your email address and the license key, which we use only to provide and support your purchase.
- Activating Luna Plus. When you tap Activate, Luna sends your license key and a generic device label (“Luna web”) to our server, which checks it with Lemon Squeezy. No journal or health information is included.
- Things you choose to share. If you export a backup, print or share a visit summary, or save a week card image, that copy is handled by you and the apps you choose. Plain-text summaries and printed pages are not encrypted.
- Links. Luna links to outside sites such as health information pages and a helpline directory. They have their own privacy policies.
Your choices and controls
- Export an encrypted backup at any time from Settings.
- Delete everything from Settings with Delete all data. Clearing your browser’s site data also removes it.
- Remove Luna Plus from a device under Settings, Luna Plus.
Because we don’t hold your journal, requests to access, correct or delete it are handled by you on your device. For purchase records, contact us or Lemon Squeezy and we will help with access, correction or deletion where the law allows, including under the GDPR and US state privacy laws.
Security
Encryption protects your saved journal if someone gets access to your device storage. It does not protect your journal while Luna is unlocked on your screen, or from someone who knows your passphrase or controls your device. Use a screen lock on your phone.
Children
Luna is intended for people aged 16 and over. We do not knowingly provide Luna Plus to children.
Changes
If we change this policy, we will update the date above and describe important changes on this page.
Contact
Som Annan · lunajournal.help@gmail.com