Legal — Privacy Policy

Your family's data.
Always yours.

Lunara is built on a single principle: your baby's data exists to help your family — and only your family. We never sell it, never profile it, and never share it without your explicit consent.

📅 Effective: 1 May 2025 🔄 Last updated: 1 May 2025 🌍 Global · All regions
🔒 HIPAA Compliant 🌍 GDPR Compliant 👶 COPPA Compliant 🇮🇳 India DPDP 🔐 End-to-End Encrypted
01

About Lunara

Lunara is an AI-powered parenting wellness platform designed to help parents and caregivers track and understand their child's development. Through the Lunara mobile application, parents can monitor sleep patterns, feeding sessions, diaper changes, growth measurements, developmental milestones, vaccination records, and daily activities — and receive personalised AI-generated insights to support their parenting journey.

Lunara is operated by Lunara Technologies Private Limited, a company incorporated in India. We serve users globally, including families in the United States, Canada, the United Kingdom, Australia, the United Arab Emirates, member states of the European Union, and beyond.

Important: Lunara provides educational and informational parenting guidance only. Lunara does not provide medical advice, diagnosis, or treatment. All content generated by Lunara — including AI-generated insights — is for informational and educational purposes only and is not a substitute for advice from a qualified healthcare professional.

By downloading, installing, or using the Lunara application, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the application and contact us to request deletion of any data we hold.


02

Information We Collect

We collect information you provide directly, information generated through your use of the application, and limited information collected automatically by our technical infrastructure. Below is a complete description of each category.

🔐 Account Information

  • First and last name
  • Email address
  • Password (stored only in encrypted, hashed form — never in plain text)
  • Login credentials and authentication tokens
  • Social login data if you choose to sign in with Google or Apple (name, email, and profile picture from those services — we do not receive your social login password)
  • Profile photo (optional)
  • Account preferences and settings

👶 Child Profile Information

  • Child's first name or nickname
  • Child's date of birth
  • Child's gender (optional)
  • Child's profile photo (optional)
  • Multiple child profiles where created by you
  • Gestational age at birth (optional, for preterm adjustment in growth charts)

📊 Parenting Tracking Data

  • Sleep data — session start and end times, duration, nap vs night classification, notes
  • Feeding data — breast, bottle, formula, pumping sessions, solid food entries, volumes, durations, sides
  • Diaper tracking — time, type, and optional notes
  • Growth measurements — weight, height/length, head circumference, timestamps
  • Health tracking — temperature readings, illness notes, symptom observations
  • Activity and tummy time tracking
  • Developmental milestone records — dates achieved, photos, videos, notes
  • Vaccination records — vaccine name, date, provider, clinic, batch or lot number, injection site, post-vaccine observations
  • Doctor and well-baby visit logs
  • Any free-text notes entered by parents or caregivers

✨ AI Interaction Data

  • Questions and queries submitted to the AI assistant
  • Chat conversation history with the AI
  • Prompts entered by the user
  • AI-generated responses viewed by the user
  • Feedback provided on AI responses (helpful / not helpful)

AI interaction data is used to generate personalised insights and to improve the relevance of future AI responses for your account. We do not use your personal child data to train shared AI models for other users or third parties.

📱 Device and Technical Information

  • Device model, manufacturer, and operating system version
  • Application version
  • Device identifiers (advertising identifier, device ID — where permitted by your operating system settings)
  • IP address
  • Crash reports and error logs
  • App performance and usage analytics (screen views, feature interactions, session duration)
  • Push notification tokens (for reminders and alerts)
  • Time zone and locale settings

💳 Subscription and Billing Information

  • Subscription plan and tier
  • Purchase history and subscription status
  • Trial start and end dates
  • Billing status (active, cancelled, lapsed)
Payment security: Lunara never stores, processes, or has access to full credit card numbers, card verification codes, or banking details. All payment transactions are processed exclusively through authorised payment providers (such as Apple In-App Purchase, Google Play Billing, and third-party payment processors). We receive only a transaction confirmation token from these providers.

03

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing core app functionality — enabling you to log, view, and manage your child's tracking data across all features
  • Personalising parenting guidance — adapting AI insights, developmental alerts, and milestone windows to your child's exact age and data history
  • Generating AI insights — analysing your tracking data to produce personalised weekly digests, pattern detection, regression alerts, and growth spurt predictions
  • Tracking child development — maintaining your child's chronological health and development record within the application
  • Delivering reminders and alerts — sending push notifications and emails for upcoming vaccine appointments, milestone windows, and personalised AI insights
  • Improving app features — analysing aggregated, anonymised usage data to understand which features are most useful and where to invest in improvement
  • Customer support — responding to support enquiries, troubleshooting issues, and resolving account-related requests
  • Security and fraud prevention — detecting and preventing unauthorised access, abuse, or fraudulent activity
  • Analytics and performance monitoring — measuring app stability, crash rates, and feature performance to maintain quality
  • Subscription management — processing subscription activation, renewal, cancellation, and billing status updates
  • Legal compliance — meeting obligations under applicable laws and responding to lawful regulatory or law enforcement requests
We do not use your personal or child tracking data for advertising targeting, behavioural profiling for third parties, or selling insights derived from your data.

04

AI Features & How They Work

Lunara uses artificial intelligence and machine learning to analyse your child's tracking data and generate personalised insights. Understanding how our AI works — and its limitations — is important.

How AI insights are generated

Lunara's AI analyses patterns across your child's sleep, feeding, growth, and milestone data simultaneously. It applies pattern-recognition models calibrated to published paediatric research and clinical guidelines from the World Health Organization (WHO), the American Academy of Pediatrics (AAP), and the Centers for Disease Control and Prevention (CDC) to produce insights and recommendations personalised to your child's age and historical data.

Important limitations of AI outputs

AI responses are generated automatically. While Lunara's AI is designed with clinical guidance in mind, AI outputs may not always be accurate, complete, or appropriate for every individual situation. Parents and caregivers should independently verify important information and exercise their own judgement before acting on any AI-generated recommendation.
  • AI guidance provided by Lunara is educational and informational only
  • Lunara's AI is not a doctor, paediatrician, therapist, psychologist, or any kind of healthcare provider
  • AI outputs should never be used as a substitute for professional medical advice, diagnosis, or treatment
  • In any medical situation or emergency, always contact a qualified healthcare professional or emergency services immediately
  • AI models are reviewed and updated periodically by Lunara's paediatric advisory team, but they may not reflect the most recent clinical guidelines at all times
  • Your child's data is processed within your account to generate insights for your family only — we do not share individual child data with third parties to train shared AI models

Data used by AI features

The AI processes tracking data you have entered into the app — sleep logs, feeding records, growth measurements, and milestone data. It uses this data solely to generate insights for your account. AI interaction history (your questions and the AI's responses) is stored within your account and is not used to train shared models for other users.


05

Medical Disclaimer

IMPORTANT — PLEASE READ CAREFULLY

Lunara is not a medical device. Lunara does not provide medical advice, medical diagnosis, or medical treatment. No information, content, AI-generated insight, alert, recommendation, or communication provided through the Lunara application constitutes or should be treated as professional medical advice of any kind.
  • Lunara does not diagnose any medical condition, illness, developmental disorder, or disease
  • Lunara does not treat any medical condition
  • Lunara does not cure any medical condition
  • Lunara does not prevent any disease or medical condition
  • Lunara is not regulated as a medical device in any jurisdiction
  • Developmental milestones and growth reference data displayed in Lunara are general population references, not individual clinical assessments
  • Any concerns about your child's health, development, feeding, growth, or wellbeing should be discussed with a qualified, licensed healthcare professional — including a paediatrician, general practitioner, or specialist
Emergency situations: If you believe your child is experiencing a medical emergency, call your local emergency services (911 in the US, 999 in the UK, 112 in the EU, 108 in India) immediately. Do not rely on this application in an emergency.

06

Children's Privacy

Lunara is an application designed exclusively for use by adults — specifically parents, guardians, and caregivers of children. The application is not directed at children and is not intended to be used by individuals under the age of 18.

How child information is handled

  • All child profile information is entered by and controlled by the parent or guardian who created the account
  • Children do not have separate accounts or interact directly with the application
  • Parents may create, edit, update, or delete child profiles and all associated tracking data at any time through the application settings
  • Child data is linked exclusively to the parent's account and is accessible only by the parent and any caregivers the parent has explicitly invited to share access

COPPA compliance (United States)

Lunara does not knowingly collect personal information directly from children under 13 years of age. All information relating to children in the application is provided by adults who are the child's parent or legal guardian, in accordance with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently received direct personal information from a child under 13, we will delete it promptly.

Children's data rights

Parents and guardians may exercise data rights on behalf of their children at any time, including the right to access, correct, export, or delete all data associated with a child profile. See Section 11 — Your Rights and Section 12 — Account Deletion for full details.


07

Data Sharing

Lunara does not sell your personal data. We do not sell, rent, or trade your personal information or your child's data to any third party for any purpose, including advertising.

We share data only in the limited circumstances described below, and only to the minimum extent necessary:

☁️ Cloud Infrastructure Providers

Lunara uses cloud hosting providers to store and process data securely. These providers act as data processors on our behalf and are contractually bound by strict data processing and security requirements. They do not use your data for any purpose other than providing infrastructure services to Lunara.

📊 Analytics Providers

We may use analytics services to understand aggregated, anonymised usage patterns across the application. Analytics data does not include personal child health information and is used solely to improve the application.

✨ AI Service Providers

To generate AI insights, some data may be processed by AI infrastructure providers. These providers are bound by data processing agreements that prohibit them from using your data to train their general AI models or sharing your data with third parties. We take commercially reasonable steps to ensure AI providers meet our privacy standards.

💳 Payment Providers

Subscription and billing transactions are processed by authorised payment providers such as Apple and Google through their respective in-app purchase systems. Lunara receives only transaction confirmation tokens; full payment details are held exclusively by those providers under their own privacy policies.

⚖️ Legal Obligations

We may disclose information if required by law, court order, or lawful request from a government authority. We will notify users of such requests where legally permitted to do so.

🏢 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Lunara's assets, user data may be transferred as part of that transaction. We will notify users via email and/or a prominent notice in the application prior to any such transfer and inform users of any changes to how their data will be handled.


08

Data Retention

We retain your personal data and your child's tracking data for as long as your account remains active. When your account is active, all data you have entered is retained to provide the full historical functionality of the application — including long-term growth curves, developmental timelines, and vaccination history.

  • Active accounts: Data is retained and accessible for the lifetime of your account
  • Deleted accounts: Upon account deletion, all personal data and child tracking data is permanently deleted within 30 days, subject to the exceptions below
  • Inactive accounts: Accounts with no activity for 24 consecutive months may receive a notice prompting you to confirm continued use; accounts confirmed as no longer needed may be closed

Retention exceptions

Certain categories of data may be retained beyond account deletion for the following reasons:

  • Financial transaction records required for tax, accounting, or legal compliance purposes (typically 7 years under Indian company law)
  • Anonymised, aggregated data that does not identify any individual
  • Data subject to an active legal hold, regulatory investigation, or dispute resolution process
  • Fraud prevention and security records where required to prevent harm

09

Data Security

Lunara takes the security of your family's data seriously and implements commercially reasonable technical and organisational measures to protect it against unauthorised access, loss, misuse, or disclosure.

  • Encryption in transit: All data transmitted between the application and our servers is encrypted using TLS (Transport Layer Security)
  • Encryption at rest: Stored data is encrypted at rest using industry-standard encryption
  • Password security: Passwords are never stored in plain text; they are processed using one-way cryptographic hashing
  • Access controls: Access to production systems and user data is restricted to authorised personnel on a strict need-to-know basis
  • Authentication: The application supports secure authentication mechanisms including token-based session management
  • Security monitoring: We monitor our systems for suspicious activity, unauthorised access attempts, and security incidents
  • Per-family data isolation: AI processing infrastructure uses per-account data isolation to prevent cross-contamination between family datasets
No system is impenetrable. While we implement strong security measures, no method of data transmission or storage can be guaranteed 100% secure. In the event of a data breach that is likely to affect your rights or freedoms, we will notify you in accordance with applicable law.

10

International Users

Lunara is operated from India and serves users globally. When you use Lunara, your data may be processed or stored in countries other than your country of residence, depending on the location of our cloud infrastructure and service providers.

  • European Union users (GDPR): If you are located in the EEA, your data may be transferred to countries outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission
  • United States users: Lunara implements practices aligned with HIPAA's security and privacy standards for health information, even though Lunara is not a covered entity under HIPAA. We treat your child's health tracking data with the same level of protection
  • India users (DPDP Act): Processing of personal data is conducted in accordance with India's Digital Personal Data Protection Act (DPDP) 2023. You have the rights afforded under that Act, including the right to consent, access, correction, and erasure
  • United Kingdom users: We process data in accordance with the UK GDPR and Data Protection Act 2018
  • All users: Regardless of your location, we apply the same baseline privacy and security standards described in this policy

11

Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data and your child's data. We honour these rights for all users regardless of location.

👁 Right of Access

You may request a copy of all personal data and child tracking data we hold for your account. You can access most of your data directly within the application. For a complete data export, contact us at privacy@yourdomain.com.

✏️ Right to Correction

You may correct inaccurate or incomplete data at any time through the application's editing features. For account-level corrections, contact our support team.

🗑 Right to Deletion (Right to be Forgotten)

You may request deletion of your account and all associated data at any time. See Section 12 for the full deletion process. Certain records may be retained for legal or security purposes as described in Section 8.

📤 Right to Data Portability

You may request an export of your data in a structured, commonly used format. The Lunara application provides PDF report export for health records. For a full data export, contact us at privacy@yourdomain.com.

🚫 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

🔒 Right to Restrict Processing

You may request that we restrict processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we verify it.

❌ Right to Close Account

You may close your Lunara account at any time through the application settings. Account closure initiates the deletion process described in Section 12.

To exercise any of these rights, contact us at privacy@yourdomain.com. We will respond to all verified requests within 30 days.


12

Account Deletion

You have the right to delete your Lunara account and all associated data at any time. Lunara provides multiple ways to exercise this right.

How to delete your account

  1. Open the Lunara application on your device
  2. Navigate to Settings → Account → Delete Account
  3. Confirm your identity and confirm the deletion request
  4. Your account and data deletion will be initiated immediately

How to delete a child profile

  1. Navigate to Settings → Children → [Child Name] → Delete Profile
  2. All tracking data, milestones, vaccine records, and AI interaction history associated with that child profile will be permanently deleted

What is deleted

  • Your account credentials and personal information
  • All child profile information
  • All tracking data — sleep, feeding, growth, milestones, vaccines, notes
  • All AI conversation history and interactions
  • All saved preferences and settings
  • All photo and video memories stored within the application

Deletion timeline

Personal data and child tracking data are permanently deleted from our active systems within 30 days of your deletion request. Backup copies may persist for up to an additional 30 days as part of our backup rotation cycle. Data subject to legal retention requirements (see Section 8) is retained separately and then deleted when the retention period expires.

Alternative deletion request

If you are unable to delete your account through the application, you may submit a deletion request by emailing privacy@yourdomain.com with the subject line "Account Deletion Request" and the email address associated with your Lunara account.


13

Cookies & Analytics

The Lunara mobile application itself does not use browser cookies. However, we use the following technologies for performance monitoring and usage analytics:

  • App performance analytics: We collect anonymised data about app launches, screen views, feature interactions, and session duration to understand how the application is used and to identify areas for improvement
  • Crash reporting: When the application experiences an error or crash, diagnostic information is automatically collected to help us identify and fix the issue
  • Advertising identifiers: We may collect advertising identifiers (IDFA on iOS, GAID on Android) subject to your device's tracking permission settings. You can opt out by adjusting your device's privacy settings at any time
  • Push notification tokens: We store a device-specific token to deliver push notifications for reminders and alerts. You can disable push notifications at any time through your device settings

If Lunara offers a web application or website, standard web cookies may be used for session management, preferences, and analytics on that web platform. A separate cookie notice will be provided at that time.


14

Third-Party Services

To provide, improve, and operate the Lunara application, we may use third-party services. The services used may include, but are not limited to:

  • Google: May be used for authentication (Google Sign-In), analytics, cloud infrastructure, and crash reporting services
  • Apple: May be used for authentication (Sign In with Apple) and in-app purchase processing
  • Firebase (Google): May be used for backend infrastructure, authentication, real-time database, analytics, and crash reporting
  • RevenueCat: May be used for subscription management and in-app purchase tracking across iOS and Android
  • AI providers: May include providers of large language model or AI inference infrastructure to power the AI insights feature. We do not disclose specific providers as these may change; all AI providers are bound by data processing agreements
  • Payment providers: Apple In-App Purchase, Google Play Billing, and potentially additional authorised payment processors
  • Customer support platforms: May be used to manage and respond to support tickets and enquiries
Each third-party service has its own privacy policy governing how it handles data. We recommend reviewing the privacy policies of the services listed above. Lunara uses contractual protections to ensure these providers handle data responsibly and in accordance with this policy.

15

Subscriptions & Billing

Lunara offers a free tier and optional paid subscription plans (Lunara Pro). The following terms apply to subscription billing:

  • Auto-renewal: Paid subscriptions are auto-renewing. Your subscription will automatically renew at the end of each billing period unless cancelled before the renewal date
  • Free trials: Where a free trial is offered, you will not be charged during the trial period. Charges begin automatically at the start of the first paid period if you do not cancel before the trial ends
  • Payment processing: Payments are processed by Apple (App Store) or Google (Google Play) through their respective in-app purchase systems, or by an authorised third-party payment processor. Lunara does not directly process payment card information
  • Cancellation: You may cancel your subscription at any time through your App Store or Google Play subscription management settings. Cancellation takes effect at the end of the current billing period; you will retain access to Pro features until that date
  • Refunds: Refund requests are handled in accordance with the refund policies of Apple App Store and Google Play respectively. Lunara does not independently issue refunds for purchases made through app store platforms
  • Price changes: We reserve the right to change subscription pricing. We will provide reasonable advance notice of any price changes through the application or by email

16

Limitation of Liability

Please read this section carefully. It limits the liability of Lunara Technologies Private Limited in connection with your use of the application and any decisions made based on information provided by the application or its AI features.

To the fullest extent permitted by applicable law, Lunara Technologies Private Limited, its directors, employees, agents, licensors, and service providers shall not be liable for any loss, damage, injury, or harm of any kind arising from or in connection with:

  • AI-generated content: Any reliance on, use of, or decisions made based on AI-generated insights, recommendations, alerts, or suggestions provided by the application
  • Parenting decisions: Any parenting, caregiving, feeding, sleep, or health decisions made based on information provided through the application
  • Development predictions: Any predictions, estimates, or projections about a child's developmental progress, milestone timing, or growth trajectory
  • Milestone guidance: Any interpretation of developmental milestone data, including any delays or concerns flagged by the application
  • Health-related recommendations: Any health guidance, vaccine scheduling information, or wellness recommendations provided through the application
  • Data accuracy: Any inaccuracies in tracking data resulting from user input errors
  • Service interruption: Any loss of data, functionality, or access resulting from technical failures, maintenance, or disruptions
  • Third-party services: Any actions, omissions, or failures of third-party services used in connection with the application

In jurisdictions that do not permit the exclusion or limitation of certain warranties or liability, our liability is limited to the maximum extent permitted by law. Nothing in this section limits our liability for fraud, death, personal injury caused by our negligence, or any other matter that cannot be excluded by law.

Our total aggregate liability for any claim arising in connection with the application shall not exceed the greater of (a) the total fees paid by you to Lunara in the 12 months preceding the claim, or (b) INR 1,000 (or the equivalent in your local currency).


17

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the features of the application, applicable law, or for other operational, legal, or regulatory reasons.

  • When we make material changes to this policy, we will notify you by displaying a prominent notice within the application and, where we have your email address, by email
  • The "Last updated" date at the top of this policy will be revised to reflect the date of the most recent changes
  • Your continued use of the application after the effective date of the updated policy constitutes your acceptance of the revised terms
  • If you do not agree with the updated policy, you should discontinue use of the application and contact us to request deletion of your data

We encourage you to review this Privacy Policy periodically. Previous versions of this policy are available upon request by contacting us at the address below.


18

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please contact us using the details below. We are committed to resolving all privacy enquiries promptly and transparently.

Company Lunara Technologies Private Limited
Privacy Contact privacy@yourdomain.com
Support Email hello@yourdomain.com
Website yourdomain.com
Business Address [Your Registered Address], India
Response Time Within 30 days of receipt
Data Protection Officer: If you are located in the European Union and wish to raise a concern with a Data Protection Authority, you are entitled to do so with the supervisory authority in your country of residence or establishment. Contact details for EU data protection authorities are available at edpb.europa.eu.

📅 Policy effective: 1 May 2025  ·  Last updated: 1 May 2025