Lunaris: Sleep & Calm

Last updated: June 7, 2026

This Privacy Policy explains how the Lunaris: Sleep & Calm app (the "App", "we", or "us") collects, uses, retains, and deletes your personal and health information. Your privacy is our absolute priority.

1) What information we collect

To provide personalized sleep and relaxation recommendations, we collect the following types of data:

• Account and profile information: If you use cloud backup, we collect your email address, name, and profile picture from Google Sign-In or Apple Sign-In. You may also voluntarily provide age and city in your profile.
• Health and wellness data (app-specific): Data from evening and morning check-ins (for example stress levels, mood, fatigue, caffeine intake, sleep quality, and number of awakenings). See section 4 for a full breakdown.
• Data from Apple Health / Google Health Connect: Only if you grant explicit permission, the App reads selected metrics from your system health applications. We do not write health records back to Apple Health / Health Connect from this app version.
• Session and usage data: Which breathing or relaxation techniques you start, session duration, streaks, achievements, and in-app preferences.
• Diagnostics and analytics (with consent only): Crash reports and aggregated usage events to keep the App stable and improve features.
• Purchase status: Subscription entitlement via Google Play / App Store (processed by RevenueCat).
• Weather context (optional): If you provide a city in your profile, we send the city name to Open-Meteo geocoding to fetch local weather context. Coordinates returned by geocoding may be cached locally on your device.

2) How we use your data

We use your data exclusively to provide and improve app features, specifically to:

• Calculate a daily plan ("Sleep Architecture") tailored to your current physical and mental state.
• Track progress and compute metrics such as "Sleep Score" and "Streak".
• Securely back up and synchronize your profile across devices when you opt in to cloud sync.
• Verify premium access and restore purchases.
• Diagnose crashes and measure feature usage when you have granted GDPR consent.

3) Special statement regarding health data

Lunaris is a wellness app, not a medical device. Your health-related data is subject to strict protection standards:

• We never use health data for marketing purposes and never sell it to ad networks, data brokers, or other third parties.
• Health data is used only for core app functionality (personalized plans, progress metrics, and optional biometric context on Home).

4) Health and wellness data — detailed disclosure

A) Data you enter in the App

Stored on your device by default. Uploaded to our cloud only if you sign in and grant GDPR consent for cloud sync.

• Evening check-in: stress, mood, fatigue, caffeine intake — used to build tonight's plan. Optional each session.
• Morning check-in: sleep quality, number of awakenings, mood — used for Sleep Score and streaks. Optional each session.
• Profile (optional): age, city — used for personalization and weather context.

B) Data read from Apple Health / Google Health Connect

Read-only, optional, and only after you approve the system permission dialog. We read:

• Steps
• Resting heart rate
• Heart rate variability (HRV): RMSSD on Android, SDNN on iOS

We use these readings to show biometric context on Home and in progress views. Health platform data is processed on your device; we do not upload Apple Health / Health Connect readings to our cloud servers.

C) How health data is used

• Personalize evening plans and session recommendations.
• Compute Sleep Score, streaks, and progress history.
• Understand which techniques you use and for how long to improve recommendations.

5) How long we retain your data

We retain data only as long as needed for the purposes below:

• Profile, check-ins, and session history on your device: until you delete them in the App, wipe local data, or uninstall the App.
• Cloud backup (Firebase, EU regions): until you delete your account, withdraw consent and request deletion, or we no longer need the data to provide the service.
• Cloud history limits: when syncing, we keep up to 1,200 morning feedback entries and 800 evening check-in entries per account; older entries are removed automatically.
• Apple Health / Health Connect reads: processed on-device; in-memory cache for up to 2 hours. Not stored on our servers.
• Crash reports (Firebase Crashlytics): collected only with your GDPR consent; retained per Firebase defaults (typically up to 90 days).
• Analytics events (Firebase Analytics): collected only with your GDPR consent; retained per Google Analytics defaults (typically up to 14 months).
• Subscription and billing records: retained by Google Play, Apple App Store, and RevenueCat according to their policies while your subscription is active and as required by law.
• Manual deletion requests by email: we process verified requests within 30 days; request metadata is deleted after the request is completed.

6) Where and how your data is stored

We place strong emphasis on data security:

• Locally, data is stored on your device in an encrypted SQLite database (SQLCipher).
• If you use cloud backup, data is securely transmitted and stored on Google Firebase infrastructure.
• Data localization (GDPR): We configure cloud infrastructure in EU regions where available. Personal and health data is handled under GDPR safeguards and data-processing terms.
• Android cloud backup for app data is disabled to reduce accidental transfer of sensitive wellness data.

7) Sharing data with third parties

We do not sell your data. We share data only with service providers that help us run the App:

• Google Firebase — authentication, cloud sync, crash reporting, analytics (with consent), and remote configuration.
• RevenueCat — subscription status and purchase restoration.
• Open-Meteo — geocoding and weather lookup when you provide a city (city name sent; no account identifier).

We do not share your data with third parties for advertising or cross-app tracking.

8) How to delete your data

Option 1 — In the App (recommended, fastest)

Settings → Account → Delete account and data

This permanently and irreversibly deletes your Firebase account, cloud-stored profile and history, and local data on the device. Cloud deletion typically completes within minutes.

Option 2 — Web instructions

Step-by-step guide: Account deletion page

Option 3 — Email request

If you cannot delete in the App, email lunaris.support@gmail.com from the same address as your Lunaris account. Subject: Account Deletion Request. We verify ownership and complete deletion within 30 days.

What may be retained after deletion

• Anonymized crash logs already transmitted before deletion (expire per Crashlytics retention above).
• Billing and tax records held by Google Play, Apple, or RevenueCat where law requires retention.
• Data that never left your device remains until you uninstall the App or wipe local storage.

9) Your other rights (GDPR)

• Right to withdraw consent: In Settings you can withdraw GDPR consent. This disables cloud sync, Health integrations, and new analytics collection until you consent again. Previously stored cloud data is not deleted by withdrawal alone — use "Delete account and data" for permanent erasure.
• Right of access / portability: Export your data in Settings (JSON and CSV) or contact us by email below.
• Right to object or restrict processing: Contact us at the email below.

10) Contact us

• Email: lunaris.support@gmail.com
• Developer: Robert Sauer