Privacy policy
Lunarbor is an astrology garden app for adults. This is the same policy the app shows under You → Help → Privacy policy. It explains what Lunarbor keeps, who else receives data and the choices you have. If anything here is unclear, write to [email protected].
Who we are
Lunarbor is made by Valentyn Yakovliev, the developer named on its App Store and Google Play pages, who is responsible for your data (the controller): avenue Pravdy, build 80, Kyiv, 04123, Ukraine. Write to [email protected] about anything here.
What Lunarbor keeps
On your phone and, once you have an account, on Lunarbor's server, where what you write is encrypted with a key of your own (AES-256-GCM), so a copy of the database alone reveals none of it. It is never sold and never used for ads.
- Your account: your email and how you sign in (Apple, Google or an email link)
- Your name, birth date, time and place, and gender
- Your check-ins, feelings, notes, evening lines and Day book
- Your talks with Selene and the thoughts you kept
- Your people and the birth details you gave for them; with a linked partner, your answers to questions for two and the moments you keep together
- Dew, level, garden settings, reminders and whether you have Premium
- A push-notification token, to send the reminders you ask for
Lunarbor does not collect your location (a birth place is typed, not detected), contacts, photos, files, calendar or the advertising id. It shows no ads.
Your cycle and Closeness stay on your phone
Cycle data and Closeness marks are kept encrypted on your phone only. If you turn on Share cycle tips for a linked partner, the server receives only today's phase (such as "luteal") so your partner can see a tip; never the dates, the flow or Closeness. A partner sees only what you share on purpose, such as your answer to a question for two.
Selene
Selene's replies are written by an outside AI service (Anthropic), and only after you agree to it. It receives what you write to her, her last few answers, how today feels and your energy, today's Moon, your chart's signs when you ask about them and a person's first name when you ask about them, only to write the reply. A Chapter of us letter is written the same way, from that week's questions and what you and your linked partner answered, only when you have both given that yes (for someone who is not in the app, from your answers alone); otherwise it is written without the outside AI and nobody's answers are sent. Your notes, your days and your cycle are never sent. You → Your data → Consents turns it off.
Steps and pulse (Health)
Only if you turn on You → Health: Lunarbor then reads, never writes, your steps and newest heart-rate sample from Apple Health or Health Connect. They stay on your phone, are never sent, sold or used for ads, and turning Health off, signing out or deleting your account erases them from Lunarbor.
Analytics
Off until you tick the box at sign-in. Then counts of what you open and finish go to Amplitude, our analytics provider: for an account under a pseudonym our server makes from it with a secret key (never your account id or email), for a guest under a random id made on your phone.
Your birth details, gender, Closeness, cycle data and anything you write never travel in an event. Turning analytics off stops the counts.
This website
lunarbor.app sets no cookies and keeps nothing on your device. It uses Cloudflare Web Analytics, which counts visits without cookies or tracking across sites, and it counts how often a page is opened and a store button is tapped, with no identifier or invite code attached; only daily totals are kept. We do this to know whether the site works (our legitimate interest).
Crash reports
When the app crashes, Sentry, our error-reporting provider, receives what broke: the code that failed, the phone model and system, and which screens came just before; for a small share of sessions, also how long screens and requests took. It never receives your account, your IP address, your words, your birth details or anything from the cycle or Closeness. We do this so Lunarbor works (our legitimate interest).
Who else receives data
Only what each needs to do its job for us, on our instructions:
- Our hosting in Germany and Cloudflare: the servers and their backups (what you write stays encrypted in them)
- Apple and Google: sign-in, and purchases through their stores
- RevenueCat: whether your subscription is active, under your account id
- Google Firebase: delivering notifications to your phone (Apple's push service on an iPhone)
- Resend: your email address, to send a sign-in link
- The AI service above, for Selene and the letters, only after you agree
- Amplitude (only with your consent) and Sentry, as described above
Legal bases (EEA and UK)
- Running your account and the features you use: our contract with you.
- Health-related data (how you feel, the cycle, steps and pulse), Selene's outside AI and analytics: your explicit consent, which you can withdraw at any time in You → Privacy & consents.
- Crash reports, security and preventing abuse: our legitimate interest in a working, safe app.
- Purchase records: our legal obligations for accounting.
Where and how long
Some of these providers work outside your country, including in the United States, under the safeguards the law requires (such as the EU standard contractual clauses).
We keep your data while you have an account. Talks with Selene go after a year. A guest garden nobody opens for 180 days is taken off the server and erased for good 30 days later. When you delete your account, it goes from the server right away and from backups within 7 days; your encryption key is destroyed, so your words in those backups can no longer be opened. Records of purchases that tax and accounting law require are kept by Apple, Google Play and RevenueCat.
Your rights
You can see and download your data (You → Your data), correct it in the app, erase one kind of it or all of it, object to or restrict how we use it, and withdraw a consent at any time without affecting what happened before. You can also complain to the data protection authority where you live.
Your choices
- You → Privacy & consents turns each consent on or off.
- You → Your data downloads a copy, erases one kind of data, or deletes your account and everything with it. You can also delete your account without the app.
- To use any of these rights by email, write to [email protected] from the address you sign in with. We answer within 30 days.
Age
Lunarbor is for adults 18+. It does not knowingly keep data about anyone younger; if you believe it does, write to us and we will delete it.
Changes
If this policy changes in a way that matters, the app tells you before the change applies. The date at the top shows the latest version.
Questions
Write to [email protected].