Privacy Policy
Our way to handle your information
1. What we collect
Everything below is information you give us. We do not collect anything in the background.
- Account: your email address (used as your sign-in) and your first name
- Profile: date of birth, height, weight, the goals you pick (up to three) and how quickly you want to reach them, your biggest obstacle, where you train, the kinds of training you enjoy (up to three), how long it has been since you last trained regularly, typical energy level, target workouts per week and how active you are right now
- What to go easy on: the movements you ask us to keep out of your plan, from a fixed list (a sensitive back, sensitive knees, or keeping the impact low), or that there is nothing in particular
- Cycle: the days you log as bleeding, whether a period is under way right now and the day it started, your typical cycle and period length, and your birth control method
- Life stage: which of three you tell us describes you — your cycle is still regular, it has started changing (perimenopause), or your periods have stopped (menopause)
- Daily check-in: on the days you fill it in, how you rate your sleep, your energy, how your body feels, your symptoms — including hot flashes and night sweats — and your mood, each from 1 to 5, and the readiness score we work out from them
- Daily symptom log: on the days you fill it in, the symptoms you tap from a fixed list — cramps, tender breasts, headache, fatigue, bloating, lower back pain, sweating or hot flushes, acne, nausea, food cravings, trouble sleeping, and high or low blood pressure — and how you say you feel, from a fixed list of moods. There is no severity scale and nothing is scored: it is a list of what you tapped, on the day you tapped it
- Training: workouts you schedule and complete, and for each set the weight and reps you log — or the distance and how long it took, for exercises measured that way — and the effort rating, if you give one
- How a workout felt, if you answer the question at the end of it: one of three answers (I could have done more, just right, I’m exhausted), saved with that workout, its intensity, how long it took, how many sets you did and the total weight you lifted. Skip the question and nothing is saved
- Favourite workouts: which Lunora workouts you mark with a heart, and when. They are kept with your account so another phone can show them, and they are not sent to our AI provider.
- Workout reminders: if you turn them on, whether they are on, which weekdays and what time of day. They are kept with your profile so a new phone can pick them up; the reminders themselves are scheduled on your device
- If you write to us from Settings → Help: whatever you type, and — for a bug report only — one line naming your app version and device type, which the screen tells you about before you send. We attach the email address on your account so we can reply to you. Your message passes through our servers to reach our support inbox; it is not saved in our database and it is not written to our logs. The copy that stays is the email in the support inbox.
- Workouts you build yourself, the exercises you put in them, and any exercise you swap out for another
- Messages you send to Luni, our in-app assistant
- If you tell us: where you heard about the app, and the email of the friend who referred you
We do not collect location data, we do not use advertising or analytics trackers, and we do not build an advertising profile of you.
2. Health data and your consent
Five things you tell us are health data. Under the GDPR they are “special category” data (Article 9) and get stricter treatment than the rest:
- Your cycle: logged period days, whether a period is under way right now, cycle length, period length and birth control
- Your life stage: whether you are cycling, in perimenopause, or past menopause
- Your daily check-in: sleep, energy, how your body feels, symptoms including hot flashes and night sweats, mood, and the readiness score derived from them
- Your daily symptom log: the symptoms you tap and the mood you pick, on the days you log them
- What you ask us to go easy on: a sensitive back, sensitive knees, or keeping the impact low. It is not a diagnosis and we do not treat it as one, but it says something about your body, so it is treated as health data
Here is where each one is asked. The symptom log rides along with your cycle, and you can decline any of them and keep the rest of the app:
- Your cycle: before the calendar will open, we ask you to tick a box agreeing to us holding your period data. Decline and there is no calendar, nothing is logged, and nothing is stored. The same box covers the daily symptom log, which is why it does not appear for you until you have ticked it.
- Your daily check-in: before the five questions are asked, we ask you to tick a box agreeing to us holding your answers. Decline and the questions are skipped.
- Your life stage: this one is a question rather than a tick box — it is the first thing sign-up asks, because it decides what the rest of the app shows you. Your answer stays on your device until your account is created, and you can change it at any time in Personal Information.
- What to go easy on: also a question rather than a tick box. The screen that asks it tells you, right there, that the answer is health data, where it is kept and when it is sent to our AI provider. “Nothing in particular” is always an answer, and you can change it at any time in Personal Information.
We use all of it only to do the thing the app exists for: work out where you are — in your cycle, or in a stage where there is no cycle to read — and size your training to it. Answering the check-in stays optional even after you have agreed to it: every question in it can be skipped, and a day you skip is simply not scored. The symptom log is optional in the same way — nothing has to be tapped, saving a day with nothing on it is a valid answer, and a day you do not open is simply not recorded.
You can withdraw at any time, and withdrawing deletes. Turning off Personalised AI in Settings erases every period day you have logged, every daily check-in and every symptom log you have saved, on this phone and on our servers, takes back that agreement, and stops anything being sent to our AI provider. Your life stage and what you asked us to go easy on stay in your profile, because the app uses them to choose your workouts even with AI off; you can change them in Personal Information, and deleting your account erases them. We do not keep health data we no longer have your agreement to hold. Deleting your account goes further still: it also erases your training history, the workouts you built yourself, and your sign-in.
3. How we use it
- To run the app: your plan, your progress, your cycle phases
- To personalise training suggestions to your phase, your goals and your circumstances
- To turn your check-in into a readiness score, and size the day we suggest to it
- To draw your own symptom log back to you as a fortnight, and to let what you logged shape what we suggest for today
- To let how your recent workouts felt shape next week’s plan: mostly “could have done more” leans it a step harder, mostly “I’m exhausted” a step gentler, always within what your phase calls for. Once a month we also count the answers across everyone, as totals with no names or accounts attached, to see whether the workouts we suggest feel about right
- To send the reminders you have turned on
- To keep the service secure and prevent abuse
We do not sell your data. We do not share it for anyone else’s marketing.
4. AI features
Luni, your daily tip, the weekly planner, post-workout notes and the wording of your cycle-phase notification are generated using Claude, an AI service provided by Anthropic.
When one of these runs, we send Anthropic only what the answer needs:
- Your first name, your goals and how quickly you want to reach them, obstacle, where you train, the kinds of training you enjoy, how long since you last trained regularly, energy level, experience and level, weekly target, and how active you are right now
- Your height and weight, as a single measurement (for example “168cm, 64kg”), so a suggestion is sized to you
- Your current cycle phase and day, and the phases predicted for the next seven days
- What you asked us to go easy on, if you picked anything. It is sent with an instruction to use it only to choose your training, and never to ask about it, guess at a cause, or suggest you see anyone about it
- If you are in perimenopause or menopause: that you are, and — when we plan your day — the check-in answers you gave today, the readiness score and the band it fell in
- If you keep the symptom log: the symptoms and mood you tapped today, and any symptom that came back on more than one day in the last fortnight, with how many days it appeared on (for example “cramps (5 days)”). These go with your daily tip, your weekly plan and your messages to Luni. They are sent as words for what you felt, never as anything diagnostic — and Luni is told in the same breath not to explain what causes them, guess what they might mean, or suggest supplements, medication or a doctor
- A one-line description of how you actually train, worked out in code from your own logs — for example “trains about three times a week, usually on Monday and Thursday, does least in her luteal phase, swaps out barbell back squat”
- When you ask for today’s numbers on an exercise: the name of that exercise and your last session on it, set by set — the weight, the reps and the effort rating you gave
- For the weekly planner only: how many times in the last two weeks you answered each of the three post-workout answers, as three numbers. Never the workouts, the dates or anything you typed
- For Luni: your message and the recent conversation
That last line is worth being plain about. It is a description of your behaviour set against your cycle, which makes it health-derived — it is not stored anywhere, we do not keep a profile of you, and it is worked out fresh from your logs each time it is used. But it is sent, and it says something about you that you did not type in.
We do not send your email address, your date of birth, your birth control method, or the specific dates you have logged as period days.
Your cycle phase and day, your check-in answers, your symptom log, what you asked us to go easy on and the line about how you train are all health data or derived from it, so we treat sending them as something you have to agree to. You can turn the AI features off at any time in Settings, under Preferences. With them off, nothing is sent to Anthropic at all. Your daily tip still works, chosen by the app rather than written for you; planning your week or your day is done by Luni, so it needs the AI features on. We say this again where you enter the data it applies to: above the cycle calendar, on the check-in, above the symptom chips, and on the sign-up question about what to go easy on.
Anthropic processes this on our instructions as our processor, under a data processing agreement. Your data is not used to train their models.
5. Where your data lives
Your account and data are stored on Amazon Web Services in the EU (AWS eu-north-1, Stockholm). Requests to our AI provider are processed in the United States under the safeguards in their data processing terms.
The app also keeps a copy of your profile, plan, recent training and the current day’s conversation with Luni on your own device, so it works without a connection. That copy is removed when you sign out or delete your account. The one exception is your favourite workouts: they stay on the phone after you sign out, so a heart you added without a connection is not lost before it reaches us, and they are removed when you delete your account.
While you are still signing up, before there is an account to put them in, the answers you have given so far are saved on your own device — including your life stage and, if you chose to log them, your period days — so that closing the app part-way through does not lose them. They stay on the device: none of it reaches us until your account is created at the end of sign-up. Your password is never saved this way.
6. Security
- Encrypted in transit using TLS
- Encrypted at rest by our database provider
- Every record is tied to your account and readable only by it — this is enforced on our servers, not just in the app
7. Your rights
You have the right to access your data, correct it, have it erased, restrict or object to how we use it, take it elsewhere, and withdraw consent at any time. You can also complain to your national data protection authority.
Most of this you can do yourself in the app: Personal Information to see and correct what we hold, and Delete Account to erase everything in your account. For anything else, email support@lunora.health and we will respond within one month.
8. How long we keep it
We keep your data for as long as your account exists. When you delete your account, everything above is erased immediately, along with your sign-in — not queued for later deletion: your profile, your cycle log and life stage, every check-in and symptom log you have filled in, your training history, the workouts you built yourself and the exercises in them, your swap preferences, your favourite workouts, and your answers about how each workout felt. This cannot be undone.
One exception: a message you sent us from Settings → Help is an ordinary email in our support inbox, not part of your account, so deleting your account does not remove it. Ask us at support@lunora.health and we will delete it too.
A sign-up you started but did not finish is kept on your device for 30 days and then deleted on its own. Signing out deletes it straight away, and finishing sign-up replaces it with your account.
9. Local storage
We store data on your device to keep you signed in, remember your settings, and let the app work offline. These are not advertising cookies and are not shared with anyone.
Two things can appear on your locked screen during a workout. If notifications are on, a single alert tells you when a rest period ends and names the exercise coming up next — nothing is shown before or during the rest itself. Separately, on devices where it is available, you can turn on a workout widget that shows the current workout's name and a live countdown on your lock screen for as long as the workout runs. That preference is off unless you turn it on in Settings → Reminders, and you can change your answer there at any time. Both are stored only on your device and are never sent to us or to Anthropic.
If you turn on the upcoming-period reminder in Settings → Reminders, a notification on your lock screen says that your next period is likely in about two days. It is off unless you turn it on. The date is worked out on your device from the cycle you have logged, the wording is fixed, and nothing about it is sent to us or to Anthropic. Turning it off, turning notifications off, signing out or deleting your account removes any reminder already scheduled.
10. Age
Lunora is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Breach notification
If a breach affects your personal data, we will notify our supervisory authority within 72 hours and tell you directly where the law requires it, explaining what happened and what you should do.
12. Changes
If we change how we handle your data we will update this policy and, for anything significant, tell you in the app.
13. Contact
Questions about this policy or your data: