Privacy Policy

What we collect, where it lives, and what you can do about it

Last updated: September 23, 2026

Who Is Responsible for Your Data

Lunanul is operated by MTM CYA Corp, trading as MTM Cofounders & Associates. That company is the data controller for the personal information described in this policy — it decides what is collected and why, and it is who you contact to exercise your rights.

At a Glance

  • We do not sell your personal information, and we do not run targeted advertising.
  • Your readings and reflections are stored on our servers, not only on your device — that is what lets a reading build on the ones before it.
  • To write your interpretation, the relevant parts of that history are sent to Google's Gemini AI.
  • We never see your card details. Apple and Google take the payment.
  • You can ask us to delete your account and its data at any time.

This summary is for orientation only. The full text below is what governs.

Introduction

This policy explains what personal information Lunanul collects, why, who it is shared with, and the choices you have. It covers the Lunanul mobile app and lunanul.com.

Information We Collect

We collect what we need to give you a reading that remembers you. Here is what that means in practice:

Information You Provide Directly

  • Account information — your email address, username, and profile picture
  • Your answers to the Attunement questions, which determine the guide you are matched with
  • Reading preferences, focus areas, and personalization settings
  • Your readings, the reflections and outcome check-ins you record about them, and the notes you keep — these are stored on our servers so that later readings can take them into account
  • Feedback, reviews, and anything you send our support team

Information the Service Creates About You

Using Lunanul produces information about you that we store alongside what you typed:

  • Your reading history and the cards drawn
  • The AI-generated interpretations written for you
  • The running narrative and milestones the app builds from your history — the part that lets it notice patterns over time
  • Usage counts and streaks that drive progress and plan limits
  • Your subscription status and entitlements

Information Collected Automatically

  • App usage patterns, features used, and time spent in the app
  • Device type, operating system, app version, and device identifiers
  • Analytics data about how the app and website are used
  • Technical logs, including error reports and diagnostic information

What We Do Not Collect

We do not collect your payment card details — Apple and Google take the payment and only tell us whether a subscription is active. We do not run advertising networks in the app, and we do not build advertising profiles about you.

How AI Is Involved

Lunanul's interpretations are written by artificial intelligence, not by a person. This is the part of the service most worth understanding:

  • We use Google's Gemini API to generate the written interpretation, and Google's text-to-speech models to voice it when you listen to a guide.
  • To do that, we send the context of your reading — the cards drawn, the guide you are matched with, your saved reflections, and the running narrative built from your history — to that provider.
  • This happens so that the interpretation can be about you rather than generic. It is not used to advertise to you.
  • AI output can be wrong or inconsistent. Interpretations are for reflection, never a statement of fact about your life — see our terms of service.

Because this content is generated by a third-party model, Google processes it as our service provider and under its own terms for that service.

How We Use Your Information

We use your information to:

  • Draw your readings and generate interpretations that build on your history
  • Run your account, your subscription, and the limits of your plan
  • Improve the app, fix problems, and develop new features
  • Send service messages, respond to you, and provide support
  • Keep the service secure and investigate abuse
  • Meet our legal obligations and protect our rights
  • Send promotional messages, where you have agreed to receive them

Our Legal Bases

If you are in a place with data-protection law of this kind — the EU, the UK, and much of Latin America — we rely on these grounds:

  • To perform our contract with you: running your account, producing your readings, and managing your subscription
  • Our legitimate interests: keeping the service secure, understanding how it is used, and improving it
  • Your consent: analytics cookies on the website, marketing messages, and any optional device permission you grant — you can withdraw it at any time
  • Legal obligation: keeping records we are required by law to keep

Who We Share It With

We do not sell your personal information. We share it with the service providers that make Lunanul work, and otherwise only as described here:

  • Google (Firebase) — authentication, database, file storage, hosting, and the cloud functions that run the service
  • Google (Gemini API) — generating your written interpretations and guide audio, as described above
  • RevenueCat — reconciling your subscription status across the app stores
  • Apple and Google — as the sellers of record for in-app purchases; they take the payment and tell us whether your subscription is active
  • Analytics providers — understanding how the app and website are used
  • Authorities, when the law or a valid legal process requires it, or to protect our rights and the safety of others
  • A buyer or successor, if the business is merged, acquired, or sold — with notice to you

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

How Long We Keep It

We keep your account and the content in it for as long as your account exists, because the service is built on that history. When you ask us to delete your account, we delete your profile, your readings and interpretations, your reflections, and your narratives and milestones.

Some records outlast the account: anonymised usage statistics, support correspondence, and transaction records we are required to keep for tax and accounting purposes. These are either not linked to you or kept only as long as the law requires.

Data Security

Your data is held in Google Cloud infrastructure, encrypted in transit and at rest, and access to it is restricted to the service itself and to the people who need it to operate and support the product. No system is perfectly secure, and we cannot guarantee absolute security, but we take this seriously and will notify you and the relevant authority if a breach requires it.

International Data Transfers

Lunanul is operated from the United States and runs on Google Cloud infrastructure, so your information is processed in the United States and potentially other countries where our providers operate. If you are in the European Economic Area, the United Kingdom, or a country with similar rules, that means your data is transferred outside your own country; where it is required, those transfers rely on the safeguards approved under applicable law, such as standard contractual clauses.

Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you and receive a copy
  • Correct information that is wrong or incomplete
  • Have your account and personal data deleted
  • Receive your data in a portable format
  • Restrict or object to certain processing
  • Withdraw consent where our processing relies on it
  • Opt out of marketing messages at any time
  • Complain to your local data protection authority

To exercise any of these, write to us at privacy@lunanul.com.

We will not treat you differently, or degrade the service, because you exercised a privacy right.

Deleting Your Account

You can ask us to delete your account and its contents at any time. Our account deletion page sets out exactly what is removed, what is kept, and how long it takes. Read how account deletion works

Deleting your account does not cancel a subscription bought through Apple or Google. Please cancel that in your Apple or Google subscription settings as well.

Cookies and Tracking

The Lunanul website uses cookies and similar technologies. Analytics only runs if you accept it, and declining does not limit the site. You can change your choice at any time from the cookie preferences in the footer, and each category is explained in our cookie policy.

Children's Privacy

Lunanul is not intended for children under 13, and where local law sets a higher age for consenting to online services — 16 in parts of the European Union — that higher age applies. We do not knowingly collect personal information from children below the applicable age. If you believe a child has given us their information, write to us and we will delete it.

Changes to This Policy

We may update this policy as the service develops. When a change is significant we will tell you in the app or by email before it takes effect, and we will always update the date at the top of this page.

Contact Us

If you have questions about this policy, or want to exercise a right described in it, contact MTM CYA Corp at privacy@lunanul.com .

A postal address for formal correspondence is available on request.