Your data, your rules

Privacy policy

Last updated: October 2026

Your data stays yours.

We do not sell your personal information. We do not sell your health information. We do not rent your information to advertisers. We do not share your information with third parties for advertising purposes without your explicit consent.

1. Introduction

Welcome to LunaFlow.

LunaFlow is a women's wellness and lifecycle application designed to support users through various stages of life, including cycle tracking, trying to conceive (TTC), pregnancy, postpartum recovery, infant development, and perimenopause.

We believe your personal information belongs to you.

We are committed to protecting your privacy and handling your information responsibly, transparently, and in accordance with Australian privacy laws.

This Privacy Policy explains:

By using LunaFlow, you agree to the collection and handling of information described in this Privacy Policy.

2. Our Privacy Commitment

LunaFlow is built around a simple principle:

Your data stays yours.

We do not sell your personal information.

We do not sell your health information.

We do not rent your information to advertisers.

We do not share your information with third parties for advertising purposes without your explicit consent.

3. Information We Collect

Account Information

When you create an account we may collect:

Wellness and Health Information

Depending on the features you use, we may collect:

This information may be considered sensitive health information under Australian privacy law.

Device Information

We may collect:

Beta Feedback

If you submit feedback, we may collect:

4. Why We Collect Information

We collect information to:

We only collect information reasonably necessary to provide our services.

By using LunaFlow and providing information to us, you consent to the collection, storage, use, and disclosure of your information as described in this Privacy Policy.

Where required by law, we will seek additional consent before collecting or using sensitive information. Sensitive health information generally requires consent unless a legal exception applies.

You may withdraw consent at any time by contacting us or deleting your account, subject to legal and operational requirements.

6. How We Use Your Information

We may use your information to:

We do not use your health information to build advertising profiles.

7. Data Storage and Security

We take reasonable steps to protect your information from:

Security measures may include:

No internet-based service can guarantee absolute security, but we strive to maintain industry-standard protections.

8. Data Sharing

We may disclose information to trusted service providers who help us operate LunaFlow, including:

These providers may only access information necessary to perform services on our behalf.

We do not sell your personal information.

We do not sell your health information.

9. LunaFlow Partner

LunaFlow Partner is an optional LunaFlow+ feature that lets you share a small summary with one person you choose, such as a partner or co-parent. Nothing is shared unless you turn it on, tick what to share, and approve the person who joins.

What can be shared

Only the categories you tick, which may include: cycle phase and expected period dates, fertile window estimates, suggested pregnancy test dates, pregnancy or postpartum stage, a one-line mood and symptom summary, and upcoming appointment dates (with titles only if you choose). Private intimacy logs, journal entries and personal notes can never be shared.

End-to-end encryption

What you share is encrypted on your device and can only be decrypted on your partner's device. The encryption keys stay on your devices. LunaFlow's servers store only encrypted data that we cannot read. This also applies to your partner's first name, support messages, weekly check-in answers and shared checklists.

We never sell shared information and never use it for advertising.

What our servers can see

To connect you, our servers hold: the two account identifiers and email addresses, that the accounts are connected, the connection status and dates, public encryption keys, a one-way scrambled (hashed) copy of the invite code, encrypted data with its size and update time, and push notification tokens. When a notification is needed, our servers know the kind of event (for example, that support was sent), but not its content.

Notifications

If you allow notifications, a push token for your device is stored and notifications are delivered through Expo and Apple's push notification service. Notification previews are always generic and never include fertility, pregnancy or health details.

Partner accounts

Partner accounts are free and are used only to view what has been shared with them. A partner account needs an email address. LunaFlow Partner does not require cloud sync to be turned on.

Stopping and deletion

You can pause sharing, or stop it at any time. When you stop, either with a notification to your partner or quietly, everything shared through the connection is deleted from our servers. Your partner can also leave at any time, with the same result. Deleting either account also ends the connection and deletes what was shared. Support messages are kept for up to 30 days, and the shared summary is replaced each time it updates.

If you ever feel unsafe with the person you share with, you can stop quietly at any time. If you are in danger, contact emergency services.

10. International Data Transfers

Some service providers may store or process data outside Australia.

Where this occurs, we take reasonable steps to ensure information is handled in accordance with applicable privacy obligations and industry security standards.

We will update this policy if our international data handling practices change. Transparency around overseas disclosures is an important privacy requirement.

11. Subscription Services

LunaFlow+ subscriptions may be processed through:

Subscription providers may process payment information directly.

LunaFlow does not store your full payment card information.

12. Analytics and Diagnostics

We may collect limited analytics and diagnostic information to:

Where possible, analytics are anonymised or aggregated.

13. Accessing and Correcting Information

You may request access to personal information we hold about you.

You may also request correction of inaccurate information.

Requests can be submitted through our support channels.

We will respond within a reasonable period and in accordance with applicable laws. Australian privacy guidance generally recognises rights of access and correction.

14. Data Retention

We retain information only for as long as reasonably necessary to:

When information is no longer required, we will take reasonable steps to delete or de-identify it.

15. Children's Privacy

LunaFlow is intended for adults and older teenagers capable of managing their own wellness information.

Parents or guardians should supervise use where required by law.

16. Account Deletion

You may request deletion of your account and associated personal information.

Where legally permitted, we will delete or de-identify your information within a reasonable timeframe.

Certain records may be retained where required for legal, regulatory, security, or operational purposes.

17. Privacy Complaints

If you believe we have breached your privacy, please contact us first so we can investigate and resolve the issue.

We will respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

18. Changes to This Policy

We may update this Privacy Policy from time to time.

When significant changes occur, we will notify users through the app or by other appropriate means.

The latest version will always be available within LunaFlow.

19. Contact Us

For privacy enquiries, data access requests, correction requests, or privacy complaints:

Email: privacy@luna-flow.com

Support: support@luna-flow.com