Everything you log in Luna — your cycle dates, your mood, your symptoms, your journal, your check-in answers — is stored on your device first, in your browser's local storage. Not on a server. Not in a database that someone else controls. On your phone. Luna does not need a server to function for you personally.

The only data that ever leaves your device is the small slice you choose to share with your connected person through the Room Code system.

When you connect to Aura, you share a 6-character Room Code. Think of it as a private key to your door. Only the person who has this exact code can see your shared data — not us, not anyone else, not even by accident.

The Room Code is generated randomly on your device. It is not stored on our servers linked to your identity. We do not know what your code is. We cannot look it up. The connection exists only between your two devices, passing through Firebase — Google's real-time database — in transit. It does not sit in a readable database anywhere.

Every data point that reaches Aura goes through your Privacy Controls. You can share your phase without your mood. You can share your symptoms without your flow intensity. Each toggle is a real filter — not just a display setting, but a data-level switch that stops that field from being written to the shared room entirely.

When you pause sharing with the Ghost Switch, zero data is written to the shared room. Your person's app shows nothing. They are not notified. The silence is invisible.

We do not sell your data. Not to advertisers, not to pharmaceutical companies, not to insurance providers, not to anyone.

We do not show you advertisements. Luna has no ad system, no tracking pixels, and no third-party analytics embedded in the app.

We do not profile you for any purpose other than personalising your own experience. The data you log stays inside your experience of Luna — it does not leave to build profiles, train public models, or be traded in any form.

We do not retain your data if you reset Luna. When you reset, everything is wiped from your device and the shared room is deleted from Firebase simultaneously.

Luna was built on a single conviction: the most intimate data a woman has is her body data. It deserves more protection, more respect, and more control than any other type of personal information.

You connected your person because you chose to. Every piece of what they see, you authorised. Every silence, you created. The system does not have opinions about what you share or don't — it only does exactly what you tell it to do.

Your body. Your data. Your rules. Always.