Privacy Policy

Last updated: 1 October 2026

1. Who we are and what this policy covers

Lunaire Labs Limited (“we”, “us”) is the data controller: a company registered in England and Wales, company no. 17137604, registered office 818 Whitchurch Lane, Whitchurch, Bristol, England, BS14 0JP (Companies House). Contact: .

This policy covers the nine Lunaire symptom and cycle trackers below, on Google Play and the Apple App Store (“the apps”) — the only mobile apps we publish — together with three accessibility tools we have withdrawn (Section 14) and visits to lunairelabs.uk. FuelHound, also withdrawn, has its own privacy policy (Section 14).

Each store may show an app under a different name, in your language, and names change over time. The app ID is what identifies it.

The UK GDPR and the Data Protection Act 2018 apply to what we do. For users in the European Economic Area, the EU GDPR applies as well. We have not appointed a representative in the EU, because the limited and occasional personal data we handle (Section 3) falls within the exemption in Article 27(2)(a) EU GDPR.

2. Your entries stay on your phone

What you record in an app is stored only in a database on your phone. The apps never send it to us or to anyone else, and we have no way to read it.

Depending on the app, that includes symptoms and pain, periods and cycles, temperature, weight, blood pressure and other readings, food, exercise, supplements and medication, appointments, notes and your journal, entries of your own that you add, and your settings.

Symptom data is special category data under Article 9 of the UK and EU GDPR. This policy treats it that way throughout, even though we never receive it.

The apps are diaries, not medical devices: they record what you write down and chart it back to you. Where an app shows an estimate or a pattern — Cycle Tracker’s next-period estimate, or two things you logged appearing on the same days — that is arithmetic on your own entries, not a clinical judgement (see the EULA, Section 5).

3. What we hold about you

The apps send us nothing and our website records nothing. We receive information in only two ways, and neither can be connected to anything in an app.

(a) If you email us

If you write to , we have your email address, whatever name your mail program sends with it, and your message. We use it only to reply to you, and we delete the conversation once your question has been answered — at the latest 30 days after our last reply, or sooner if you ask. We have no mailing list. Emailing us is entirely optional: you do not have to give us any personal data to use the apps.

• Where it is held: our mailbox is provided by Nutty About Hosting Ltd, acting as our processor, on 20i Ltd’s mail platform, on servers in the United Kingdom. We read it in their webmail, and it is not copied or forwarded anywhere else.
• Legal basis: Article 6(1)(b) where your message is about a purchase; otherwise Article 6(1)(f), our legitimate interest in replying to you.

Please do not send us your entries. Describe the problem instead (see our support page). If you send a screenshot, export or backup file from an app anyway, it is deleted immediately without being viewed.

(b) Sales reports from the stores

When someone buys Premium, we never see the payment. Google Play and Apple give us sales reports for our accounts. Neither contains a name, email address, street address or card details. Google Play’s reports also show the buyer’s city, region, postal code and device for some countries; we do not keep those, or any other personal data from the reports. Apple reports at country level only.

• Legal basis: Article 6(1)(f), our legitimate interest in knowing what we have sold.

We keep no copies of your store reviews on our servers. We read them as Google Play and the App Store publish them, and answer them there.

4. What the apps connect to

None of our code connects to any server — we run none for the apps. The only network activity is:

• Links you tap. An article, our website or a store listing opens in your browser or the store app. The app itself fetches nothing.
• Buying Premium. Google Play Billing (Android) or Apple’s In-App Purchase (iOS) shows the prices, carries out the purchase and checks whether a subscription is still active. None of your entries is involved.
• The rating prompt. This is the store’s own review sheet. We are told nothing about it — not even whether you rated.

Google Play Billing on Android. Selling through Google Play means including Google’s Play Billing library, which brings a Google telemetry component with it. That is why the Android apps list “full network access” on Google Play, although none of our own code opens a connection. It has no access to your entries, and we cannot remove it and still sell Premium on Google Play.

The apps contain no analytics, crash reporting, advertising, social-media or tracking code of any kind.

5. Permissions

What a reminder shows. A reminder never shows anything you have entered. A medication reminder says “Medication reminder”, not the name of the medicine; an appointment reminder says “Appointment reminder”; Cycle Tracker’s alerts say a period or fertile window is near, without a date. (Versions from before September 2026 named the medicine and the appointment; please update if you have an older version.) Both platforms print the app’s name above every notification, and that name says what the app tracks. To hide notification text on your lock screen: on Android, Settings → Notifications; on iPhone, Settings → Notifications → Show Previews.

6. Exports, backup files and your phone’s own backups

Anything the app saves for you — a backup, a PDF report or a CSV export — is written straight into a folder you choose and becomes an ordinary file under your control. We never receive it. Where it goes afterwards — email, a cloud drive, another person — is your decision, and is governed by whichever service you use.

• On iPhone, check where you save. The save window belongs to iOS and opens on iCloud Drive if that is switched on, so accepting it uploads the file to Apple under your Apple Account. To keep the file on your phone, tap On My iPhone before saving. iOS remembers your last choice.
• Backup passwords. If you protect your backups with a password, the app remembers it on your phone so that later backups can use it without asking. It is never sent to us, is never written into a backup file, and is removed by Reset App. We cannot recover it: a backup whose password is lost cannot be opened.
• Scheduled backups (Android, Premium). If you switch them on, the app keeps permission to write to the folder you chose until you switch them off or remove that permission in Android’s settings.

By design, your phone’s own backup does not include your entries.

• Android: the apps are excluded from Google’s automatic backup (Google Account and Google One) and from Android’s device-to-device transfer.
• iOS: the app’s database is marked as excluded from iCloud Backup and from backups made to a computer, so do not rely on setting up a new iPhone to carry it across. Without this, iOS would include it automatically — and iCloud Backup is only end-to-end encrypted if you have switched on Advanced Data Protection.

So to move to a new phone, make a backup file in the app and restore it on the new one. The EULA (Section 8) sets out your responsibility for backups in full.

Deleting everything. On Android: Settings → Apps → [the app] → Storage → Clear storage, or uninstall the app. On iPhone: delete the app — not Offload App, which removes the app but keeps its data for when you reinstall. Files you saved elsewhere stay until you delete them. You can also delete single entries, or use Reset App, at any time.

7. Screenshots and the app switcher

Android: the apps block screenshots, screen recordings and the preview in the recent-apps screen (Android’s FLAG_SECURE).

iPhone: iOS offers apps no way to block screenshots or screen recordings, so anyone holding your unlocked phone can capture what is on screen. The optional App Lock (Face ID, Touch ID or your passcode) stops someone opening the app, on both platforms, but it cannot stop a screenshot taken while the app is open.

8. Our website

lunairelabs.uk is purely informational. It has no accounts, forms or payments, and uses no cookies, analytics or advertising of any kind.

We keep no record of your visit. Our web server (nginx) is set to access_log off for the domain and every alias, so no IP address, page, time, referring page or browser is ever written down. Error messages for the site are discarded rather than saved, so no visitor details are written there either. Your IP address is held briefly in the server’s memory while a connection is open, so that the page can be delivered to you; it is not stored or used for anything else. The legal basis for this is Article 6(1)(f): our legitimate interest in operating the website.

Fonts and images, including the store badges, are served from our own domain, so viewing a page contacts no third party. Tapping a store badge takes you to that store, under its own privacy policy (Google, Apple).

The website runs on a virtual private server provided by Hostinger International Ltd in Manchester, United Kingdom. Hostinger receives no visitor data from us; its own network protection, such as firewalls, is covered by its privacy policy.

9. Children

The apps are not directed at children. To use one you must be at least 13, or any higher minimum age that the store you got it from or your local law sets. The apps collect no personal data for us, so they carry out no age check. If you believe a child has sent us personal data, email .

10. Your rights

You have the right to access, correct and erase your personal data, to restrict or object to its use, to receive it in a portable form, and not to be subject to decisions made solely by automated means (we make none). In practice, these rights apply only to your emails (Section 3(a)), which we delete within 30 days of our last reply, or sooner if you ask. The stores’ sales reports give us no personal data to keep (Section 3(b)). What you record in an app never reaches us, so we cannot act on a request about it; you can view, export or delete it yourself in the app (Section 6).

Legal basis for your emails and the sales reports is given in Section 3, and for website visits in Section 8. Your entries need none from us, because we never process them, and no Article 9 condition is relied on, because we process no symptom data — anything of that kind sent to us is deleted unviewed.

To make a request, email with “Data request” in the subject. We will reply within one month, as Article 12(3) requires.

11. Where your data is held

Nothing we hold leaves the United Kingdom. Our website server (Hostinger, Manchester) and our mailbox (20i, UK) are both in the UK. Your entries stay on your phone, wherever you are.

12. Security and breaches

Your entries are protected by your phone’s own security, such as its screen lock and encryption, together with the optional App Lock. Please keep your phone’s software up to date. We run no server holding app data, so there is no central database of users’ entries that could be breached. If an incident ever affects what we do hold (Section 3), we will assess it promptly and, where the law requires, tell you and the Information Commissioner’s Office (ICO).

13. Complaints

If you have a complaint, please email us first at and we will aim to resolve it. You also have the right to complain to the ICO:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

In the EEA you can also complain to the supervisory authority where you live, where you work, or where an alleged breach happened (Article 77 EU GDPR). The European Data Protection Board lists them at edpb.europa.eu.

14. Apps we no longer sell

The nine apps in Section 1 are the only mobile apps we publish. Four earlier Android apps (FuelHound, AspectWise, LuxKeeper and MagniClear) were withdrawn from Google Play in August 2026 and are no longer available.

FuelHound uses the internet for fuel prices, maps and place search, so it has its own privacy policy, which still applies: fuelhound.lunairelabs.uk/privacy.

AspectWise, LuxKeeper and MagniClear, our accessibility tools, remain covered by this policy for anyone who still has one on their phone:

• They store only the per-app rules you set — which apps rotate, how bright, how magnified — on your phone. They hold no symptom data, send nothing anywhere, and have no export.
• To apply a rule, each needs to know which app is on screen. AspectWise and LuxKeeper use Android’s Usage Access permission; MagniClear uses an accessibility service set up so that it cannot read screen content or your input. They also use an invisible overlay to apply the setting (AspectWise, LuxKeeper), a background service with the notification Android requires, a restart after your phone reboots, the list of installed apps for choosing a rule, and, if you allow it, an exemption from battery optimisation. None of these sends anything anywhere.
• Premium was bought through Google Play Billing, as described in Section 4.

15. Changes and contact

We may update this policy. The current version is always at lunairelabs.uk/privacy, with the date of the last change at the top. We hold no contact details for app users, so we cannot tell you directly — please check this page from time to time. Significant changes may also be mentioned in the apps’ update notes on the stores.

Questions about this policy: .