Privacy Policy
Effective date: 12 December 2025
Last updated: 10 March 2026
This Privacy Policy explains how Lunara ("App") collects, uses, shares, and protects information when you use the Lunara mobile application and related services (together, the "Services").
We collect personal information only with your consent or as otherwise permitted by applicable law. Where the App requests access to device features (such as your microphone), a clear description of the purpose is provided at the time of the request. You may withdraw consent or revoke permissions at any time through your device settings.
Data collected for a specific purpose will not be repurposed for a different purpose without your explicit consent, unless otherwise required or permitted by applicable law.
Before personal data is shared with third-party AI or other service providers to deliver specific features, we provide clear disclosure in the App and obtain any permission required by Apple's platform requirements and applicable law.
1. Who we are (Controller)
The Services are operated by:
- Lunara Labs LLC ("Lunara," "we," "us," "our")
- Entity type: U.S. limited liability company
- State of formation: Wyoming
- Registered address: 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States
- Support & privacy contact: hello@getlunara.app
- Website: getlunara.app
For purposes of the EU/UK GDPR, Lunara Labs LLC is the data controller (the entity responsible for deciding how and why personal data is processed).
Corporate group note: Lunara Labs LLC may be part of a corporate group. Unless explicitly stated otherwise in this Policy, Lunara Labs LLC remains the controller for the Services.
2. Scope
This Policy applies to:
- The Lunara iOS app
- Our website (getlunara.app)
- Communications you have with us about the Services (e.g., support)
Third-party services (such as Apple or Google sign-in, and any external links) are governed by their own privacy policies.
3. The information we collect
We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from third parties.
A) Information you provide
Account & profile
- Email address (including Apple "Hide My Email" relay addresses, if used)
- Sign-in method (Apple Sign-In / Google sign-in)
- Optional profile settings and preferences
Birth / astrology inputs
- Date of birth
- Time of birth
- Place of birth (e.g., city/region)
Dream & chat content
- Dream entries you submit as text
- Messages you send in AI chat features
- Other content you choose to submit (which may include sensitive details depending on what you type)
Voice recordings (if enabled)
- Audio recordings of dream descriptions and chat messages (and their transcripts)
Support communications
- Messages and attachments you send to customer support
B) Information collected automatically
Device & technical data
- Device type, OS version, app version
- Language and time zone
- Network information (e.g., IP address)
- Device identifiers and app instance identifiers (as permitted by your device settings and applicable law)
Usage data
- App interactions (screens viewed, feature usage, session events)
- Performance and crash data
Notifications
- Push notification token (generated by your device when you enable notifications, used to deliver push notifications via OneSignal)
- Notification preferences (whether notifications are enabled and any in-app notification settings you configure)
Subscription / purchase signals
- Subscription status and entitlements
- Purchase metadata from Apple (we do not receive full payment card details from Apple for in-app purchases)
C) Information from third parties
- Apple (Sign in with Apple tokens; subscription status/receipt verification data)
- Google (if you use Google sign-in)
- Service providers that help us with analytics, attribution, or fraud prevention (if enabled)
4. How we use your information
Provide the Services
- Create and manage your account
- Generate astrology insights and dream interpretations based on your inputs
- Provide personalized content and app functionality
AI features and processing
- Process your inputs (including text, birth details, transcripts) to generate responses and insights
- Maintain conversational context and personalization (as configured)
Improve and secure the Services
- Debug, crash reporting, and performance monitoring
- Analytics to understand feature usage and improve UX
- Prevent fraud, misuse, and security incidents
Subscriptions and billing administration
- Manage subscriptions and entitlements (e.g., via Apple and our subscription management tools)
Customer support
- Respond to questions and requests
- Troubleshoot issues
Communications
- Send service messages (e.g., important updates)
- Send marketing messages only where permitted and subject to your choices (see Section 11)
5. Legal bases (EEA/UK users)
If you are in the EEA, UK, or Switzerland, we rely on the following legal bases where applicable:
- Contract - to provide the Services you request
- Consent - e.g., optional voice recording features; marketing; tracking/advertising where required; certain cookies
- Legitimate interests - e.g., securing the Services, improving features, preventing fraud - balanced against your rights
- Legal obligation - where we must comply with law
Sensitive information (GDPR): The content you submit (e.g., dreams or chat messages) may, depending on what you write or say, contain information that could be considered "special category" data. We do not require you to provide such information. Where required by applicable law, we rely on your explicit consent to process sensitive information you choose to include, and you can request deletion as described in Section 12.
6. AI, automated processing, and model providers
Lunara uses AI and automated processing to provide astrology insights and dream interpretations.
- Outputs are generated automatically based on the information you provide.
- We do not use AI to make decisions that produce legal or similarly significant effects about you (e.g., employment, credit, housing).
In-app disclosure and permission: Before your personal data (such as dream entries, birth details, chat messages, or voice recordings) is shared with a third-party AI or model provider to power a feature, the app displays a clear in-app disclosure explaining that your data will be processed by that third-party service and obtains your permission before sharing takes place. You may decline, but doing so will prevent the relevant AI feature from functioning.
Third-party AI providers: We send relevant user inputs to the following providers to generate responses:
- OpenRouter - LLM routing for dream interpretations, horoscopes, and chat (receives dream entries, birth details, and chat messages)
- Fal.ai - AI image generation for dream visuals (receives dream entry text)
- OpenAI Whisper - voice-to-text transcription of dream and chat voice recordings (receives audio)
- Divine API - astrological data and calculations (receives birth date, time, and place)
Provider usage may change over time. This Policy will be updated whenever we add or change AI providers, and we will provide any required in-app notice or permission prompt at that time.
Model training policy: We do not use your private content to train our own models. Where third-party providers offer a "no training" or opt-out setting, we configure it where feasible. If this changes, we will update this Policy and, where required, seek your consent.
7. Voice recordings and transcription
If you choose to record voice (for dream entries or chat messages):
- We process audio to transcribe your recording into text and generate interpretations or responses.
- Audio recordings are captured locally on your device and transmitted over an encrypted connection to OpenAI Whisper solely for transcription. Lunara does not store, log, or retain raw audio at any point - the audio file is deleted from your device immediately after transcription completes. The resulting transcript is used only to generate your dream interpretation or chat response and is not retained by Lunara.
You can disable microphone access anytime in iOS settings.
8. How we share information
We share personal data only as necessary to provide the Services, operate requested features, comply with law, protect safety, or carry out other purposes described in this Policy. Before personal data is shared with third-party AI providers to generate features you request, we provide clear disclosure and obtain any permissions required by Apple's platform requirements and applicable law.
Service providers (processors)
We use vendors to host data, run the app, manage subscriptions, and support AI features. Each vendor is required to provide the same or equal protection of user data as stated in this Policy and as required by Apple's App Store Guidelines. This includes:
- Supabase - database, authentication, edge functions, and file storage (including dream images)
- OpenRouter - AI routing layer used for dream interpretations, horoscopes, and chat responses
- Fal.ai - AI image generation for dream visuals
- OpenAI Whisper - voice-to-text transcription of dream and chat voice recordings
- Divine API - professional astrological data and calculations
- Superwall - paywall management and subscription handling
- Apple In-App Purchases - payment processing for subscriptions
- Apple Sign-In / Google OAuth - authentication
- OneSignal - push notifications
- Resend - transactional and service-related email delivery
Legal and safety
We may disclose information if we believe it is reasonably necessary to comply with law or legal process, enforce our terms and protect our rights, or detect and prevent fraud or security issues.
Business transfers
If we are involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction.
9. Tracking, advertising, and App Tracking Transparency (ATT)
A) Tracking / targeted advertising
If we or our partners engage in tracking as defined by Apple - including linking data collected from this app with third-party data for targeted advertising or advertising measurement across apps or websites owned by other companies - we will request permission through Apple's App Tracking Transparency (ATT) framework before doing so.
B) Cookies (website)
Our website may use cookies and similar technologies for basic functionality and analytics. You can control cookies via your browser settings.
C) Do Not Track
There is no uniform standard for recognizing "Do Not Track" signals, and our Services may not respond to them. You can generally control tracking through device and browser settings.
10. Data retention
We keep information only as long as needed for the purposes described in this Policy, unless a longer period is required by law.
- Account data and dream history: retained while your account is active
- If you delete content or your account: we delete or de-identify data unless retention is required for legal, security, or fraud-prevention purposes
- Backups: may persist for a limited period before being overwritten
11. Your choices and controls
Depending on your settings and location, you may be able to:
- Access or correct certain information directly in the App
- Delete your account directly in the App - account deletion is available from within the App settings. Deleting your account will remove your personal data in accordance with our retention policy in Section 10. If you are unable to delete in-app, you may also request deletion by emailing hello@getlunara.app
- Opt out of marketing emails via the unsubscribe link (where provided)
- Control notifications in iOS Settings
- Control microphone permissions in iOS Settings → Privacy & Security → Microphone
- Control tracking permission via iOS Settings → Privacy & Security → Tracking (App Tracking Transparency)
12. Your privacy rights
You may have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request a copy (portability) where applicable
- Object to or restrict certain processing (particularly in the EEA/UK)
To exercise rights, contact us at hello@getlunara.app with the subject "Privacy Request". We may need to verify your identity.
EEA/UK/Switzerland: If you are in the EEA/UK/Switzerland, you can also lodge a complaint with your local data protection authority (for the UK, the ICO).
13. California (CCPA/CPRA) disclosures
This section applies to California residents.
A) Categories of personal information collected
In the last 12 months, we may have collected:
- Identifiers (e.g., email address)
- Commercial information (subscription status)
- Internet/network activity (app usage events)
- User content (dream entries, chat messages, transcripts)
- Inferences (e.g., personalization preferences)
Sensitive Personal Information (SPI): Some inputs (e.g., precise birth data and the content you submit) may be considered sensitive depending on context. We use SPI only as needed to provide the Services and for security, and not to infer characteristics for advertising without appropriate consent where required.
B) "Sell" / "Share"
We do not sell personal information for money.
C) Your rights
- Know/access categories and specific pieces of personal information
- Delete personal information (subject to exceptions)
- Correct inaccurate personal information
- Opt out of "sale"/"sharing" (if applicable)
- Not be discriminated against for exercising rights
To submit a request: email hello@getlunara.app with the subject "California Privacy Request".
14. Other U.S. state privacy laws
Depending on your state (e.g., Virginia, Colorado, Connecticut, Utah, and others), you may have similar rights to access, delete, correct, and opt out of certain processing (such as targeted advertising). Where required, we will provide an appeals process for denied requests.
15. International data transfers
Because we operate from the United States and use service providers that may process data in the U.S. and other countries, your information may be transferred internationally.
Where required (e.g., EEA/UK transfers), we rely on appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- The UK International Data Transfer Addendum
- Other lawful transfer mechanisms as applicable
16. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure.
17. Children and age
The Services are intended for users aged 13 and older and are not directed to children under 13.
We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at hello@getlunara.app and we will take steps to delete it.
18. Changes to this Policy
We may update this Policy from time to time. If changes are material, we will provide notice in the app or via other appropriate means. The "Last updated" date shows when this Policy was last revised.
19. Contact us
For questions or requests, contact: hello@getlunara.app
Lunara Labs LLC
1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States