Privacy Policy

Draft — pending legal review. Last updated August 2026.

1. Who we are

lunuvai is operated by an individual developer based in the EU. For any privacy question or request, contact gfapps28@gmail.com.

2. What we collect

We collect:

  • Your email address, from Apple or Google sign-in.
  • Your onboarding answers (about your sleep and anxiety patterns).
  • Your check-in history and brain dump (journal) entries.
  • Basic usage data needed to run and improve the app.

3. Sensitive data

Your onboarding answers and journal entries may reveal details about your sleep, anxiety, and wellbeing. We treat this as sensitive information: it's used only to personalize your plan and app experience, and by continuing past onboarding you consent to this processing. You can withdraw consent at any time by deleting your account.

4. Why we process your data

To provide the app (performance of our agreement with you), and — for the sensitive data described above — based on your explicit consent, which you can withdraw at any time.

5. Who we share it with

We don't sell your data. We use a small number of service providers to run the app — currently Supabase (database, authentication, hosting) and an AI provider that processes your onboarding and brain dump content to generate your plan and chat responses, under their own data-processing terms. We don't share your data with advertisers.

6. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your data — this is permanent and can't be undone.

7. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data (available directly from your profile).
  • Export your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these, contact us at the email above.

8. International transfers

Some of our service providers may process data outside the EU/EEA. Where that happens, we rely on the safeguards required by GDPR, such as standard contractual clauses.

9. Children

lunuvai is not intended for children under 16.

10. Changes to this policy

This policy may change as the product changes. We'll do our best to keep this page current and to flag material changes.