Who we are and what this covers
Luna Diary is the service and developer name for the Luna Diary Android app (com.applogcat.lunadiary) and this legal-document website. In this policy, “we” means Luna Diary. Contact us at applogcat@gmail.com.
This policy describes the current app, manual backups, support communications, and visits to this website. It does not describe the privacy practices of a cloud-storage, email, or messaging provider you choose to use.
Information stored on your device
You may enter period dates and cycle settings; daily notes, mood, symptoms, energy and medication; intimacy information; breast self-check notes; weight, temperature, and water intake. These entries are stored in Android app-private storage on your device and are used to display your journal, calendar estimates, and summaries.
Theme, sound, and language preferences are also stored locally. The app does not create an account, include advertising or analytics SDKs, or automatically synchronize your health records to a server. We do not receive your health journal through the app or this website.
The app does not request access to your contacts, location, camera, or microphone. Choosing a file through the Android system picker gives access to the file you select, rather than general access to your cloud account.
Backups that you choose to create or restore
New manual backups contain your health records and cycle settings. Their contents are encrypted using AES-256-GCM and a password-derived key using PBKDF2-HMAC-SHA256. The app does not save your backup password. A forgotten password cannot be reset or used by us to recover a backup.
Only an encrypted temporary copy is written to app-private cache while an export is prepared or resumed. Completion, cancellation, and later cleanup remove temporary export files. A pending, interrupted export may remain available so you can finish saving it.
You choose a destination in the Android system file picker, such as local shared storage or an available Google Drive or other cloud-storage provider. That provider handles its own account, file metadata, transfer, and synchronization. Encryption protects backup contents; it does not conceal the filename, file size, or your relationship with that provider.
The app can also import older, unencrypted JSON backups. Those files remain readable to anyone who can access them. Restoring first checks the file and asks before replacing current health records and cycle settings. Restoring does not automatically delete the source file.
Opening these pages and Cloudflare hosting
When you open Privacy Policy or Terms of Use in the app, its web viewer connects to this static website hosted through Cloudflare. Your health records and backup passwords are not included in these page requests. The app includes a local copy of the documents for offline fallback.
Cloudflare may process technical request information such as IP address, browser or web-view user agent, request time, and URL path to deliver and protect the website. Processing locations and retention depend on the hosting services and their configuration. See the Cloudflare Privacy Policy for its practices.
We do not add analytics scripts, cookies, forms, external fonts, or external images to these pages. Hosting and security infrastructure still handles network requests when you visit the online site.
Email, WhatsApp, and other external services
Support email and WhatsApp links open an external app or service when you choose them. Email is not sent automatically. If you contact us, we receive the address, message, and attachments you choose to send and use them to respond, resolve support issues, and handle related security or legal obligations. Health records are not required for a general support request; send only information you intend to share.
If you choose to join or use a WhatsApp group, messages and profile or contact information available under its settings may be visible to other members. Your email, messaging, and storage providers process information under their own policies. Support communications and website requests may be processed outside your country by the relevant providers.
Retention, deletion, and your choices
Local entries stay on your device until you edit or delete them, clear the app's storage through Android, or uninstall the app. Clearing app storage or uninstalling removes the app's local records and preferences. It does not remove files saved outside the app, cloud copies, or messages already sent to someone else. Delete those separately using the relevant file, storage, email, or messaging service.
We cannot inspect, restore, or delete your device-only health journal or your external backups remotely. Keep any backup and its password in a place you control before clearing or uninstalling the app.
Support messages are kept for as long as reasonably needed to address the request and related security or legal obligations. Depending on applicable law, you may have rights to request access, correction, or deletion of information you actually send us. Contact applogcat@gmail.com; we may ask for information reasonably needed to verify and handle the request.
Security and policy changes
Android app isolation, your device security, and encrypted exports help protect your information. Local journal storage is not the same as a separately password-encrypted journal. Protect your device, file-provider account, and backup password; no storage or transmission method can guarantee absolute security.
We update this page when our data handling changes and show the effective date above. Review the current policy when using new features. Questions about privacy can be sent to applogcat@gmail.com.