Privacy Policy

Last updated: 12 September 2026

1. Who this policy applies to

This Privacy Policy is published by Lunaire Labs Limited ("Lunaire Labs", "we", "us") and covers:

• The Lunaire symptom and cycle trackers (Android via Google Play, and iOS via the Apple App Store where an iOS version is available) — Lunaire: Cycle Tracker, Lunaire: Menopause Tracker, Lunaire: PMDD Tracker, Lunaire: Endo Tracker, Lunaire: Thyroid Tracker, Lunaire: IBS Tracker, Lunaire: Fibro Tracker, Lunaire: POTS Tracker and Lunaire: Lupus Tracker (collectively, the "Lunaire Symptom and Cycle Trackers").
• The Lunaire accessibility tools (Android only, Google Play) — AspectWise (per-app rotation accessibility tool), LuxKeeper (per-app brightness accessibility tool) and MagniClear (per-app screen magnification accessibility tool) (collectively, the "Lunaire Accessibility Tools"). These rely on Android-specific mechanisms and have no iOS version. All three were withdrawn from Google Play in August 2026 and can no longer be downloaded. They continue to work if you already have one installed, and this policy continues to cover them for as long as anyone does.
• Visits to lunairelabs.uk and any Lunaire app landing pages hosted on that domain.

FuelHound is published by Lunaire Labs Limited but is not covered by this policy: it necessarily uses the internet to fetch live fuel-price data, map tiles, and place-name search results, and can optionally use your device location to centre the map, which is incompatible with the "no accounts, no network" framing of this document. It is covered by its own dedicated privacy policy at fuelhound.lunairelabs.uk/privacy.

Where this policy refers to "the Lunaire Apps" without qualification, it means all of the apps covered by this policy as listed above (that is, excluding FuelHound). Where a section applies to only one group, it is clearly marked.

Although Lunaire Labs is established in the United Kingdom and the UK GDPR is the primary regulatory framework for our processing, we make the Lunaire Apps available, and operate the lunairelabs.uk website, to users across the European Economic Area. Where you are located in the EEA, the EU General Data Protection Regulation (Regulation (EU) 2016/679, "EU GDPR") also applies in parallel to the limited processing described in this policy.

2. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR, where applicable to EEA users) and the Data Protection Act 2018, the data controller is Lunaire Labs Limited, a company registered in England and Wales (company no. 17137604). Lunaire Labs Limited is not VAT-registered. Registered office and other statutory details are publicly available on the Companies House register at Companies House. Contact: .

In practice, because none of our apps collect, receive, or process any personal data on any Lunaire Labs server — and because the lunairelabs.uk website itself retains no access logs or other record of your visit (see Section 12(a)) — the obligations of a data controller in respect of personal data are limited. They are not nothing, and we would rather name them than round them down: we are the controller of the support correspondence and the store sales reports described in Section 4. All app processing occurs exclusively on your device under your sole control. Lunaire Labs has not designated a representative in the European Union under Article 27 EU GDPR: no processing within Article 3(2) takes place, and the limited correspondence we do handle falls within the exemption in Article 27(2)(a). This policy is provided in the interests of full transparency.

3. Special Category Data — Lunaire Symptom and Cycle Trackers

The Lunaire Symptom and Cycle Trackers allow you to enter and track your symptoms and, in some apps, your cycle. Depending on the app, this may include menstrual cycle data, menopause symptoms, HRT and medication logs, food intake, supplement usage, period tracking, pain / flare logs, temperature readings, and weight entries. Under the UK GDPR, symptom data of this kind is classified as "special category data" and is subject to additional protections.

A note on terms. The apps are diaries: they record what you choose to write down, and chart it back to you. They do not diagnose or treat any medical condition, and they are not medical devices. That is why this policy calls them symptom and cycle trackers rather than medical apps.

Where an app shows a prediction — Cycle Tracker estimating when your next period is likely to begin — that is arithmetic on the dates you logged yourself, presented as an estimate. It is not a clinical judgement, and nothing in any Lunaire app should be treated as one.

None of this lowers the standard applied to what you enter. Symptom data is special category data under Article 9 UK/EU GDPR, whoever records it and whatever the recording app is called. It is treated as such throughout this policy.

We want to be completely clear: All symptom data you enter into a Lunaire Symptom and Cycle Tracker is stored exclusively in a local SQLite database on your device. This data is never transmitted to any server, cloud service, or third party. We have no technical means to access, read, collect, or retrieve your symptom data. We have designed the Lunaire Symptom and Cycle Trackers this way deliberately to provide the highest possible level of privacy protection for your most sensitive personal information.

The Lunaire Accessibility Tools (AspectWise, LuxKeeper, MagniClear) do not ask for or handle symptom data or any other special category data. They store only per-app preference rules (see Section 5).

4. Data We Collect

The Lunaire Apps collect no personal data on any Lunaire Labs server. Specifically:

That is the app dealt with: it sends us nothing. But it would be misleading to stop there and claim we hold no personal data at all, because two things reach us by other routes. Neither of them comes from the app, and neither can be connected to what is in it.

(a) If you email us

If you write to we have your email address, whatever name your mail program sends with it, and whatever you choose to tell us. We use it to answer you and for nothing else. We never add you to a mailing list, because we do not have one.

• Where it is held: our mailbox is provided by Nutty About Hosting Ltd, who run it on 20i Ltd's mail platform on servers in the United Kingdom. We read it in their webmail. It is not copied or forwarded to any other service.
• Legal basis: Article 6(1)(b) where your message concerns a purchase you have made, and otherwise Article 6(1)(f) — our legitimate interest in replying to someone who has written to us.
• How long: up to 12 months after the matter is closed, then deleted. You can ask us to delete your correspondence sooner and we will.

Please do not send us your entries. We do not need them to help you, and our support page asks you to describe the problem instead. If you do send a screenshot, an export or a backup file containing symptom information, that information will be immediately deleted without viewing.

(b) Sales reports from the app stores

When someone buys Premium we never see the payment. What we do receive is the monthly sales report each store produces for the developer, which we download and keep because we are required to keep proper accounting records. It is worth being specific about what is in it.

• Google Play gives us, for each order: an order number, the date, which app and product was bought, the price, tax and currency, the device model, and the buyer's country. For some countries it also includes the city, the region or state, and the postal code. In our own reports that applies to orders from the United States, Canada, Australia, India, Brazil and a number of others; orders from the United Kingdom and the EU arrive with the country only. It never contains a name, an email address, a street address, or any payment or card details.
• Apple reports sales at country level.
• We cannot turn this off, and we cannot connect any of it to anything in your app — there is no identifier in common, because the app tells us nothing about you.
• Where it is held: the reports are downloaded to our own server (Section 12(a)) and to no third-party service.
• Legal basis: Article 6(1)(c) — compliance with our legal obligation to keep accounting records. Those records are kept for six years from the end of the financial year they relate to, as the Companies Act 2006 and HMRC require, and are then deleted.

5. Data Stored Locally on Your Device

Lunaire Symptom and Cycle Trackers. The Lunaire Symptom and Cycle Trackers store the following in a local SQLite database on your device. This data never leaves your phone:

• Symptom logs: Symptom types, severity levels, and any notes you add.
• Food logs: Meal descriptions, meal types, and tags you create.
• Exercise logs: Activity types, intensity levels, and dates.
• Supplement tracking: Supplement names, dosages, frequencies, categories, and adherence records.
• Weight logs: Weight entries, unit preference (kg, lb or st), dates, and notes.
• Temperature logs: Body temperature readings and dates.
• Pain / flare logs: Pain intensity levels and dates.
• App settings: Your preferences, including App Lock settings, reminder times, and premium status.
• Favourite meals: Saved meal entries for quick logging.
• Cycle data (where applicable): Period start and end dates, cycle lengths, flow intensity, and BBT readings.
• Other entries the app you use lets you record — for example medication logs, appointments, blood-pressure readings, diary notes, and custom symptoms or exercises you define. Whatever the feature, the storage model is the same: a local database on your device, never transmitted anywhere.

Lunaire Accessibility Tools. AspectWise, LuxKeeper and MagniClear store only the per-app preference rules you configure, in local app storage on your device. This data never leaves your phone:

• AspectWise: The list of apps you have set rotation rules for, and the rotation orientation chosen for each (e.g. "Google Maps → Landscape").
• LuxKeeper: The list of apps you have set brightness rules for, and the brightness percentage chosen for each (e.g. "Kindle → 30%").
• MagniClear: The list of apps you have set magnification rules for, and the zoom level chosen for each.
• Premium status: A local flag indicating whether Premium has been unlocked via Google Play Billing.

6. Network Communication

The Lunaire Apps make no network requests for user data. The apps do not connect to any Lunaire Labs server, API, cloud service, or remote database. (FuelHound, which does use the internet, is not covered by this policy — see Section 1.) The only network activity that may occur is:

• Links you tap (Symptom and Cycle Trackers only): a link to a health-information article, to our website, or to our listing in the store opens in your device's browser or in the Store app. The app fetches nothing itself — it hands the address to your phone and your phone takes it from there.
• Google Play Billing (Android): if you buy Premium, Google Play handles the transaction. The app talks to Google Play's billing service to list the prices shown on the Premium screen, to carry out a purchase, and to check whether a subscription is still active.
• Apple In-App Purchase / StoreKit (iOS): the same, with Apple in place of Google. No symptom data is involved in, or transmitted during, either process — the app asks about products and entitlements, nothing else.
• The rating prompt: the "Rate this app" row, and the occasional prompt after you have been using the app for a while, open the review sheet that Google Play or Apple provides. That sheet is the store's own software running inside the app; we are told nothing about it, not even whether you rated or what you said.

One thing we should be straight about, on Android. Selling through Google Play means including Google's Play Billing library, and that library brings a Google telemetry component with it. It is also the reason the Android apps ask for "full network access" on their Play listing, even though none of our own code opens a network connection anywhere. We cannot remove it and still sell Premium on Play. It carries nothing you have entered into the app — it has no access to it — but we would rather tell you it is there than let the permission list speak for us.

7. Analytics, Tracking, and Advertising

No Lunaire App includes, integrates, or utilises any of the following:

• Analytics services (e.g., Firebase Analytics, Google Analytics, Mixpanel, Amplitude)
• Crash reporting services (e.g., Firebase Crashlytics, Sentry, Bugsnag)
• Telemetry or usage tracking of any kind
• Advertising networks or ad SDKs
• Social media tracking pixels or widgets
• A / B testing frameworks
• Heat mapping or session recording tools
• Any third-party code that collects or transmits user data

8. Permissions

The Lunaire Apps request only the minimum permissions they need, each used for local functionality only.

(a) Lunaire Symptom and Cycle Trackers

Boot Completed and Exact Alarm have no iOS counterpart and are not requested there: iOS schedules repeating reminders at the operating-system level, so they survive a restart without the app needing permission to run at boot. On iOS the app therefore asks for less than it does on Android, not more.

What a reminder actually says. Reminders are worth a word of their own, because they are the part of these apps most likely to appear in front of someone who is not you. A reminder never names anything you have entered. A medication reminder is titled "Medication reminder" — not the name of the medicine. An appointment reminder says "Appointment reminder" — not what the appointment is for. Cycle Tracker's alerts say that a period or a fertile window is approaching without putting a date or a number on your lock screen. This changed in September 2026: before that, the medicine's name and the appointment's own title were used as the notification title, and an alert stated the prediction itself, so an older version that has not been updated still behaves that way. What a reminder does still reveal is which app it came from, because both platforms print the app's name above every notification, and the name says what the app tracks. Nothing is transmitted — these are local notifications, written and shown entirely by your own device — and if other people see your phone, both platforms let you hide the contents of notifications on the lock screen (Android: Settings → Notifications; iPhone: Settings → Notifications → Show Previews), and you can of course leave any individual reminder switched off.

(b) Lunaire Accessibility Tools (AspectWise, LuxKeeper, MagniClear)

All three tools need to know which app is currently in the foreground so they can apply the per-app rule you configured. AspectWise and LuxKeeper do this via Android's Usage Access permission; MagniClear uses a narrowly configured Accessibility Service. Neither mechanism reads the content of your screen, and nothing is transmitted anywhere.

No permission is used to collect, transmit, or share any personal data with Lunaire Labs. MagniClear's Accessibility Service permission in particular is configured to be incapable of reading screen content or input.

9. No Account Required

The Lunaire Apps do not require you to create an account, provide an email address, enter a phone number, or sign in with any service (including Google, Facebook, Apple, or any other provider). Every app works entirely without any personal identifier linking usage to you.

10. Data Export and Backup Files

Lunaire Symptom and Cycle Trackers. The Lunaire Symptom and Cycle Trackers let you export your data — as a backup file (available to all users, optionally password-protected), and in further formats such as a PDF report or CSV where the app provides them (some export formats are Premium features). These files are generated locally on your device and written directly into a folder you choose, using your device's own folder picker. Lunaire Labs has no access to exported files at any point.

There is deliberately no share sheet. Exports and backups used to be written into a temporary cache folder and handed to the system share sheet. That was removed in September 2026 because it meant a file containing your symptom data was briefly staged in a location other apps could reach. Every export and backup route now writes straight into the folder you pick, and nothing is staged anywhere in between.

Once a file has been written, it is an ordinary file on your device, under your control and outside the app's. If you later choose to email it, copy it to a cloud drive, or share it with anyone, it becomes subject to the privacy practices of whatever service you use — that is your decision to make, not something the app does for you.

One thing to watch on iPhone. The save window is provided by iOS, not by us, and when you have iCloud Drive switched on it opens there by default. Saving to iCloud Drive uploads the file to Apple, under your Apple Account and Apple's privacy policy. That is a perfectly reasonable thing to choose — it is how a great many people keep files safe — but given what is in a report or a backup it ought to be a choice rather than a default you did not notice. To keep the file on the phone, tap On My iPhone in that window before saving. iOS remembers where you saved last time.

The Lunaire Accessibility Tools do not include an export feature because they store no user-generated content other than per-app preference rules.

11. Third-Party Services

The Lunaire Apps are distributed through the Google Play Store and, where an iOS version exists, the Apple App Store. If you purchase Premium Features, that transaction is processed and managed entirely by the store you bought it from — Google or Apple. That company may collect data in accordance with its own privacy policy. We do not have access to your payment details, your Google or Apple account information, or any other personal data held by either of them. Please refer to Google's Privacy Policy and Apple's Privacy Policy for details.

The store you download from will also know that you have downloaded the app, and Apple additionally publishes app-level privacy information ("App Privacy") on the App Store product page. Neither store receives any of the data you enter into the app.

12. Website Visitors

The lunairelabs.uk website is purely informational. It contains no forms, no account creation, no payment processing, and no e-commerce functionality of any kind — its sole purpose is to describe the Lunaire Apps and direct visitors to the Google Play Store or the Apple App Store, where downloads and any optional Premium purchases are handled entirely by Google or Apple. The only personal data processed in connection with your visit is described below.

When you visit the Lunaire Labs Limited website (lunairelabs.uk) or any Lunaire app landing page hosted on that domain, the following applies:

(a) Web Server Logs

We do not retain access logs of your visit. Our web server (nginx) is configured with access_log off for the lunairelabs.uk domain and all aliases, which means no per-request log line — including your IP address, the page you requested, the time of your visit, the referring URL, or your user-agent string — is written to disk for any visit. Routine error events that would normally include client IPs are also discarded (error_log /dev/null crit); only critical-level events such as nginx startup or fatal server errors reach the global error log, and those entries are not associated with any individual visitor.

Because no personal data is collected in connection with your visit, no Article 6 legal basis is required for this processing — there is no processing of personal data to base. Your IP address may transit the server in memory while a TCP connection is open, in the same way it must transit any router between you and the server, but it is not recorded, retained, analysed, profiled, shared, or used for any purpose.

Hosting provider. The lunairelabs.uk website is hosted by Hostinger International Ltd on a virtual private server currently located in Manchester, United Kingdom. Hostinger does not receive any personal data from us in connection with your visit, because we collect none. Hostinger's own infrastructure logging (e.g. firewall, DDoS protection) is governed by their privacy policy and is outside our control.

(b) Fonts

Fonts used on our websites (Inter and Marcellus) are self-hosted by Lunaire Labs and served from the same domain as the rest of the site. No third-party font CDN is contacted. Our apps themselves do not load fonts from Google or make any third-party font requests.

(c) Images

All images on our pages — including any store badge, such as "Get it on Google Play" or "Download on the App Store" — are self-hosted and served from our own domains (lunairelabs.uk and, on the FuelHound page, our fuelhound.lunairelabs.uk subdomain on the same server, which retains no access logs either). Viewing our pages causes your browser to make no image, script, or stylesheet request to Google, Apple, or any other third party. If you tap a badge, you will of course be taken to the relevant store, which is governed by Google's Privacy Policy or Apple's Privacy Policy.

(d) Cookies and Tracking

Our websites do not use cookies, local storage, session storage, or any other browser-based tracking mechanism. No consent banner is displayed because none is required.

(e) No Analytics or Advertising

Our websites do not use any analytics services (e.g., Google Analytics), advertising networks, social media tracking pixels, heat mapping tools, A / B testing frameworks, or any other form of visitor tracking or behavioural profiling.

13. Screen Security (Lunaire Symptom and Cycle Trackers)

Android. The Lunaire Symptom and Cycle Trackers implement FLAG_SECURE, which prevents the app's content from appearing in screenshots, screen recordings, and the recent apps switcher. This provides an additional layer of privacy protection for your symptom data. The Lunaire Accessibility Tools do not use FLAG_SECURE because they do not display sensitive personal data.

iOS — please read this, because it differs. iOS provides no equivalent, and we cannot offer this protection there. Apple exposes no public method for an app to block screenshots or screen recording, so on iOS screenshots and screen recordings of your entries are always possible, whether taken by you or by someone else holding your unlocked phone. We would rather say this plainly than let the Android behaviour imply a protection the iOS version does not have.

The optional App Lock (Face ID, Touch ID or your device passcode) works on both platforms and is the protection we would point to on iOS: it stops someone opening the app in the first place. It cannot stop a screenshot taken while the app is already open.

14. Children's Privacy

The Lunaire Apps are not directed at children. The minimum age of use matches the minimum-age policy of the store you obtained the app from — Google Play's or Apple's — for your territory (13 in the United Kingdom, per s.9 Data Protection Act 2018). Users in EU jurisdictions where the age of consent for information-society services under Article 8 UK/EU GDPR is set higher (up to 16) must meet that local minimum. We do not knowingly collect any personal data from any person, including children. Since the apps collect no data at all on our side, no age-verification mechanism is necessary. If you believe that a child has somehow provided personal data to us, please contact us at .

15. Your Rights Under UK GDPR and EU GDPR

Under the UK GDPR, the EU GDPR (where you are located in the EEA) and the Data Protection Act 2018, you have the following rights:

• Right of access — to request a copy of personal data we hold about you.
• Right to rectification — to have inaccurate personal data corrected.
• Right to erasure — to request deletion of your personal data.
• Right to restrict processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to certain types of processing.
• Rights related to automated decision-making — the right not to be subject to decisions based solely on automated processing.

In practice these rights have very little to act on. The Lunaire Apps transmit no personal data to us — everything you enter is under your sole control on your device, and can be removed with the app's delete features (Symptom and Cycle Trackers) or by uninstalling the app, neither of which needs our involvement. The lunairelabs.uk website retains no access logs or other record of your visit, as described in Section 12(a). What the rights do reach is the little we actually hold, both described in Section 4: any support correspondence you have sent us, which we will delete on request, and the stores' sales reports, which we must keep for six years as accounting records — a legal obligation that limits the right to erasure over them, though your other rights still apply. To make a request, email with "Data request" in the subject and we will respond within one month as required by Article 12(3) UK GDPR / EU GDPR.

16. Data Deletion and Backups

Since all data is stored locally on your device, you have complete and sole control over it at all times. You can delete everything a Lunaire app has stored by:

• Android: Settings → Apps → [app name] → Clear Data (or Clear Storage).
• iOS: deleting the app. iOS has no "clear data" option separate from deletion, so removing the app is the way to remove its data. Take care not to confuse this with Offload App (Settings → General → iPhone Storage), which is designed to do the opposite: it removes the app but deliberately keeps its data so that everything returns when you reinstall. Offloading is not a way to clear your entries. You can also delete individual entries, or use the in-app delete features, at any time on either platform.
• Uninstalling the app (which removes all associated data).

One note: any backup or export files a Lunaire Symptom and Cycle Tracker has saved to a location you chose are ordinary files under your control — they are not deleted by clearing the app's data or uninstalling it, and remain until you delete them yourself.

This also means that if you uninstall a Lunaire Symptom and Cycle Tracker, clear its storage, reset your device, suffer system corruption, or lose your phone, any data you haven't separately backed up will be permanently lost.

Please also note that the Lunaire Apps deliberately opt out of their platform's automatic cloud backup and device-to-device transfer — a privacy measure that prevents your symptom data being copied to Google's or Apple's servers without your knowledge. This is the same decision on both platforms:

• Android: the apps opt out of Android's automatic backup, so your data is not included in Google Account or Google One backups.
• iOS: the app's database is explicitly marked as excluded from backup, so your data is not included in iCloud Backup or in an encrypted local backup made through a computer. This matters because iOS would otherwise include it automatically — and because iCloud Backup is only end-to-end encrypted for users who have switched on Apple's Advanced Data Protection. Without that setting, Apple holds the keys to an iCloud backup and can be compelled to disclose its contents. Excluding the database removes that exposure entirely rather than relying on a setting most people never change.

On both platforms the consequence is the same, and you should plan for it: your Lunaire data will not be carried across automatically when you set up a new phone. You must create a backup file yourself using the in-app backup feature and restore it on the new device.

The Lunaire Symptom and Cycle Trackers include a built-in manual backup feature that saves a copy of your data to a location of your choice (and which you can optionally protect with a password). We strongly recommend backing up regularly, copying your backup files off the device (for example to a computer or a cloud storage service of your own choosing), and keeping them somewhere safe — especially before changing, resetting, updating, or repairing your device. You remain solely responsible for creating these backups, remembering the password if set, and ultimately for the safekeeping of the resulting files — a backup that only exists on the device it came from will be lost together with that device.

Lunaire Labs holds no copy of your data therefore cannot restore, recover, or recreate it under any circumstances. By installing and using any Lunaire App, you accept that backing up your data — and your device and system generally — is solely your responsibility.

17. Data Security

Because our apps store their data locally and do not transmit personal data, the security of that data is determined by the security measures on your own device (e.g., screen lock, device encryption, biometric authentication). The Lunaire Symptom and Cycle Trackers additionally offer an optional biometric App Lock on both platforms, and on Android also use FLAG_SECURE; as explained in Section 13, iOS provides no equivalent to FLAG_SECURE and screenshots cannot be blocked there. The Lunaire Accessibility Tools do not store sensitive personal data, so the same in-app protections are not needed. We recommend keeping your device's operating system and security patches up to date.

18. Data Breach Notification

The breach that would matter most in an app like this — the one where a company's server full of health records is stolen — cannot happen to us, because no such server exists. We hold no database of user data, no cloud storage of it, and no back-office system containing it, and we do not even keep web-visit logs. The only personal data we hold at all is the support correspondence in our mailbox and the stores' sales reports on our server, both described in Section 4, and those are what a breach could realistically involve. If we become aware of any security incident affecting any part of our operations we will promptly assess it and, where the law requires, notify the affected individuals and the Information Commissioner's Office (ICO) within the time limits set by the UK GDPR.

19. International Data Transfers

We do not transfer your personal data out of the United Kingdom, and there is very little of it to transfer. The Lunaire Apps store everything exclusively on your device, in the country where you use it. The lunairelabs.uk website retains no access logs or other record of your visit, and its server is operated by Hostinger International Ltd from a data centre in Manchester, United Kingdom (see Section 12(a)). Our support mailbox is likewise hosted in the United Kingdom (Section 4(a)). The sales reports described in Section 4(b) are produced by Google and Apple in their own systems and downloaded by us to that UK server; we send them nowhere else.

20. Legal Basis for Processing

Under Article 6 of the UK GDPR / EU GDPR, any processing of personal data requires a legal basis. Under Article 9, processing of special category data — the category symptom data falls into — requires an additional condition to be met.

Your app data. No legal basis is required of us, because we never receive it. Everything you enter is processed locally on your device under your sole control — there is no processing by us to justify. The same goes for visits to our website, which leave no record (Section 12(a)).

The two things we do hold are set out in Section 4, with their bases stated there: support correspondence under Article 6(1)(b) or 6(1)(f), and the stores' sales reports under Article 6(1)(c), our legal obligation to keep accounting records.

No Article 9 condition is relied on, because we do not process symptom data at all. Anything of that kind that arrives in a message — a screenshot, an export, a backup file — is deleted without being viewed rather than read, used or kept (Section 4(a)).

21. Complaints

If you have any concerns about how your data is handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you are located in the European Economic Area, you may also lodge a complaint with the data protection supervisory authority of your country of habitual residence, your place of work, or the place of an alleged infringement, in accordance with Article 77 EU GDPR. A list of EEA supervisory authorities is maintained by the European Data Protection Board at edpb.europa.eu.

We would appreciate the opportunity to address your concerns before you contact a supervisory authority. Please reach out to us first at .

22. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The most current version will always be available at lunairelabs.uk/privacy. Material changes will be indicated by updating the "Last updated" date. Since we do not collect any contact information, we cannot notify you directly; we encourage you to review this page periodically. Significant changes may also be communicated through app update release notes on Google Play or the App Store.

23. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: