Privacy Policy

Account Information

If you create an account, we collect your email address and a password (hashed, never stored in plaintext). If you sign in with Google, we receive your email address and a unique identifier from Google. We use this information to authenticate you and manage your account. We also store a reported signup platform, when available, to understand account registration. A signup platform does not establish that an app was downloaded or used.

Purchase Information

The initial production release does not offer or require a subscription or in-app purchase. The application does not initiate purchases or send new purchase receipts to our backend in this release.

User-Created Content

Observations, schedule entries, and personal notes you create within LuNAC are stored locally on your device using AsyncStorage. If you enable an available cloud-sync feature, eligible records are transmitted to our backend for that account.

User Preferences

Display settings (timezone mode, constellation frame, meteor density, notification preferences, and other preferences) are stored locally on your device using AsyncStorage. Eligible preferences may be transmitted when account cloud sync is enabled.

Account Activity Reporting

Account activity reporting is not currently activated. When it is made available, a clear in-app notice will explain that reporting is on by default after the notice is shown. Existing off choices will remain off. Reporting applies to eligible signed-in accounts using a supported app or web client while it is in the foreground and connected.

We associate limited first and last observed use times with your account, including first and last times for reported Android, iOS, web or unknown platforms. We also retain your reporting choice, the notice version, when your choice changed, and the start of your current reporting period. Reporting is limited to approximately 15-minute intervals per platform; it is not a complete history of use and does not establish downloads, installs or time spent in the app.

We use these summaries to understand recent use and platform coverage and operate and improve LuNAC. Authorized administrators can view account-linked summaries and aggregate counts. This reporting does not include your calendar entries, notes, screen-by-screen actions, precise location, advertising identifiers or a device fingerprint. It does not create an offline activity backlog.

You can turn reporting off for your account across devices in More without losing features. Once the server confirms your change, it stops accepting activity for that account and removes retained activity summaries from the live service. If the change is pending because you are offline or a request fails, reporting stops on that device, but the account-wide change is not confirmed until the request succeeds. Turning reporting back on starts a new reporting period. Pausing collection globally stops new reports but does not itself delete existing summaries.

Website and Waitlist

If you join the LuNAC waitlist, we collect your email address and optionally your first name to send a confirmation and an availability notice. You may unsubscribe through the link in those emails. If you submit a contact form, we collect the contact details and message you provide to respond to your request. Contacting us does not enroll you in marketing emails.

Activity Retention and Backups

We retain first/last-use summaries for the current reporting period until you turn reporting off, request account deletion, or the reporting data is reset. There is no automatic 7-day or 30-day deletion timer: those are reporting windows, not retention limits. We retain your off preference so other devices can honor it. Activity preferences are deleted when account deletion is finalized.

Encrypted database backups may contain earlier copies. Our recurring backup process keeps the newest 30 completed backup sets, normally created daily; this is not a guarantee of deletion within 30 days if backups are interrupted. Recurring backup copies are removed through backup rotation rather than individual record edits. Deleting live records does not immediately erase earlier backup copies. Separately saved manual or offline recovery backups are not covered by recurring backup rotation and may remain until manually deleted. Restoring a backup must not silently resume activity reporting from an old choice.

On Your Device

Authentication tokens are stored in SecureStore (encrypted, device-local storage). User-created content and preferences are stored in AsyncStorage (device-local storage). Uninstalling LuNAC removes all locally stored data.

On Our Server

If you create an account, your email address and hashed password are stored on our backend server (api.lunac.app). Eligible account-owned records are also stored there when cloud sync is enabled. Access tokens are short-lived and refresh tokens can be revoked by signing out. Your information is stored securely and is not shared with third parties for marketing purposes. We implement reasonable security measures to protect your data.

Google Sign-In (Optional)

If you choose to sign in with Google, LuNAC uses Google's OAuth 2.0 protocol. Your Google ID token is sent to our backend server for verification. We receive your email address and a unique identifier. We do not access your Google contacts, files, or any other Google services. You may revoke access at any time from your Google account settings at myaccount.google.com under "Third-party apps with account access."

App Distribution

Apple's App Store and Google Play may process app distribution under their own terms. The initial production release has no active in-app purchase or subscription path and does not send new purchase receipts to LuNAC.

Vercel (Website Analytics)

The website uses Vercel Web Analytics for page views and selected interactions such as download-link clicks, contact/waitlist form submissions and calendar-preview selections. Analytics can include page URL, referrer, event time, browser/device information and approximate region derived from network information. Our custom events use labels and categories rather than form message contents or email addresses. A download-link click does not prove an app download or installation.

Vercel processes these website analytics separately from LuNAC account activity reporting. The account activity switch does not disable website analytics or crash reporting. For Vercel's data-handling details, see https://vercel.com/docs/analytics/privacy-policy. We do not claim that all website analytics are controlled by your LuNAC account preference.

Sentry (Crash and Error Reporting)

LuNAC uses Sentry for crash and error reporting in production builds. When an unhandled error or crash occurs, Sentry may collect technical diagnostic data including device model, operating system version, app version, stack traces, and error context. LuNAC does not intentionally include your observations, notes, passwords, or other user-created content in crash reports. Crash reports are used solely to identify and fix application errors. You can learn more at sentry.io/privacy.

Local Data

You can delete all locally stored data by uninstalling LuNAC from your device.

Account Deletion

You can delete your account from within the app by navigating to More > Account > Delete Account. You can also request deletion by emailing hello@lunac.app from the email address associated with your account.

When you request account deletion, your account enters a 30-day grace period. During this period your account is suspended and you cannot use account features. You can sign back in to cancel deletion during the grace period. After authoritative backend finalization, your account and associated server data are permanently deleted and cannot be recovered.

The following server data is permanently deleted when backend finalization occurs: your account profile (email, display name, authentication credentials), cloud-synced observations, cloud-synced calendar events, synced app settings and preferences, sessions, and entitlement records.

Account-owned data retained locally on a device is made inaccessible when deletion is scheduled. It is not physically erased based only on a client-side deadline. Until LuNAC receives an authoritative backend confirmation mechanism for device cleanup, uninstalling the app remains the way to remove all local namespaces from that device.

Activity reporting is disabled and live activity summaries are removed when account deletion is scheduled. Canceling deletion does not automatically turn activity reporting back on. Backup copies follow the rotation described above.

Data Retained After Deletion

Security and audit logs may remain after account deletion for fraud prevention, abuse detection, incident response, and legal compliance. LuNAC does not currently enforce a fixed automatic deletion period for its stored administrator audit records. These retained records do not include your personal content (observations, events, or settings).

Subscriptions

The initial production release has no active LuNAC subscription or in-app purchase path.

Google Account

You can revoke LuNAC’s access through your Google account settings. Revoking Google access does not by itself delete your LuNAC account; use the account deletion process above.