Privacy Policy
The short version
- Everything you log stays on your iPhone and in your own iCloud. We cannot read it.
- There is no account, no password and no email address for us to hold.
- Nothing you log is sold, rented, shared, or used for advertising. Ever.
- Only two things ever leave your phone: feedback you choose to send us, and the fact that a subscription is active.
Who is responsible for your data
Luna Shift is published by Yael Michal Dredzen, the data controller for the limited information described below. You can reach us at lunashiftsupport@gmail.com.
What stays on your device
Everything you record in Luna Shift is written to a database on your iPhone. That includes your symptom logs, hormone therapy doses, supplements, bleeding and cycle entries, daily factors, appointments, lab results, symptom check-ins and any notes you write.
That database is held in an encrypted store protected by iOS file protection. It stays encrypted until the first time you unlock your iPhone after it restarts. We deliberately keep it readable after that point so your dose reminders can still reach you while the screen is locked.
A backup is kept in your own iCloud, in the private area of your Apple Account, so your history survives moving to a new phone. That copy belongs to you. We operate no server that holds it and we have no technical means of reading it.
Apple Health
If you switch it on, Luna Shift reads sleep, heart rate and heart rate variability, steps, workouts and weight from Apple Health, one category at a time and only with your explicit permission. It is used solely to display those figures alongside your own logs.
- Luna Shift only reads from Apple Health. It never writes anything back.
- Data read from Apple Health is never sent anywhere. It is not stored on our servers, because we have no server that receives it.
- You can withdraw access at any time in the Health app, under Sharing, Apps, Luna Shift.
We do not use Health data for advertising, and we never share it with third parties. Apple's HealthKit rules prohibit both, and we have no interest in doing either.
What actually leaves your device
1. Feedback, only if you send it
If you use the feedback form inside the app, the message you type, the star rating you give and a category label are sent to our database so we can read and act on it. If you choose to attach a screenshot, that image is uploaded too. An anonymous, randomly generated identifier is used to group an attachment with its message. That identifier is created on your device, is not linked to your name or email, and is never used to track you.
Do not type anything into that box you would not want us to read. It is the one place in the app where what you write reaches us.
2. Your subscription status
Payment is handled entirely by Apple. We never see your card details, billing address or Apple Account credentials. We receive confirmation that a subscription is active, along with an anonymous customer identifier and your device's vendor identifier (an identifier Apple provides that is unique to Luna Shift on your device, and is not your advertising identifier), so the app knows to unlock.
Companies that process data on our behalf
- Apple — the App Store, payments, and your own private iCloud backup.
- RevenueCat — subscription status and the anonymous customer identifier.
- Supabase — storage for feedback messages and any screenshot you attach.
Like any service an app connects to, RevenueCat and Supabase can see your device's IP address when the app contacts them. We do not use it to identify or locate you. The app never asks for, and never collects, your advertising identifier.
Feedback data may be stored on servers outside your country. Where that involves a transfer out of the UK or the European Economic Area, it is covered by the standard contractual clauses those providers operate under.
Permissions the app asks for
Apple Health
Optional. To show sleep, heart, activity and weight next to your logs.
Camera
Optional. To read a supplement or vitamin label so it can be logged. The image is processed on your device and is not uploaded.
Photo library
Optional. To pick a photo of a supplement label so it can be logged (read on your device and not uploaded), or to attach a screenshot to feedback.
Notifications
Optional. For dose reminders and a daily check-in nudge, if you turn them on. They are off by default.
What we never do
- We do not sell, rent or trade your data. There is no circumstance in which we would.
- There are no advertising trackers, no analytics SDKs and no cross-app tracking.
- We do not ask for your name for any purpose other than greeting you, and that name never leaves your phone.
- We do not build a profile of you, and we could not — we hold nothing to build one from.
- We make no automated decisions about you that have legal or similarly significant effects.
- We do not use anything you log, or any feedback you send, to train artificial intelligence models.
- We do not record your screen, taps or keystrokes (sometimes called “session replay”), in the app or on this website.
- We do not send marketing emails to people who use the app. We do not have your email address unless you write to us, and then we only reply to what you sent.
When we would disclose information
We share the limited information we hold (feedback and subscription status) only in these cases:
- Service providers. Apple, RevenueCat and Supabase, as listed above, only to run the app for you.
- The law. If we are legally required to, for example by a valid court order, and only what is required. Your health entries live on your phone and in your iCloud, so we have none to hand over.
- A change of ownership. If Luna Shift is ever sold or merged, the limited information above could pass to the new owner, who would have to keep honouring this policy. We would tell you in the app first.
- When you ask us to. For example, if you ask us to forward a support request.
How we protect information
Your entries are stored in an encrypted, file-protected database on your iPhone and in your private iCloud, which only your Apple Account can open. Feedback and subscription data travel over encrypted connections (HTTPS) to our providers, who apply their own technical and organisational safeguards. No system is perfectly secure, so we keep what reaches us to the minimum described here. If a security incident ever affected information we hold, we would tell you and the relevant authorities as the law requires.
Your choices
- Export. You can export your full history from the app at any time, including after a free trial or subscription ends.
- Delete. Settings, then Erase everything and start over, removes every entry from this device and from your iCloud backup. It cannot be undone.
- Withdraw Health access. Health app, Sharing, Apps, Luna Shift.
- Turn off notifications. In the app's own settings, or in iOS Settings.
- Cancel your subscription. iOS Settings, your name, Subscriptions.
- Delete the app. This removes the copy on that phone. Your iCloud backup is kept, so a reinstall restores your history. Use Erase everything and start over first if you want it gone.
If you live in the United States
Several US states give residents privacy rights, including California (CCPA, as amended by the CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others. Some states, such as Washington (My Health My Data Act) and Nevada, also have laws specifically about consumer health data. The information you log in Luna Shift counts as health data under those laws. It stays on your device and in your own iCloud, and we do not collect it, sell it or share it.
- What we collect. Only the feedback you choose to send (text, rating, category and any screenshot), and subscription status with an anonymous customer identifier and vendor identifier. Both come straight from you or your device.
- Why. To answer and act on feedback, and to unlock what you have paid for.
- Who receives it. Only the service providers listed above. We have not sold or shared personal information for money, for targeted advertising or for cross-context behavioural advertising, in the past 12 months or ever.
- Sensitive information. We do not use or disclose sensitive personal information to infer characteristics about you, or for any purpose that would give you a right to limit it.
- Your rights. Depending on your state, you can ask to know what we hold, get a copy, correct it, delete it, and opt out of sales, targeted advertising and profiling (we do none of these). You can also withdraw consent for health data, which you do directly by withdrawing Health access or erasing your entries.
- How to ask. Email lunashiftsupport@gmail.com. We reply within 45 days. We may ask a few questions to confirm the request is yours. You can use an authorised agent, and we may ask for proof that they can act for you.
- Appeals. If we decline a request, you can appeal by replying to our answer with "Appeal" in the subject. We respond within 60 days. If you are not satisfied, you can contact your state Attorney General.
- No discrimination. Using these rights never changes the price or features you get.
- Global Privacy Control and Do Not Track. The app has no tracking to switch off. Our website uses no advertising or analytics cookies, so these signals have nothing to stop.
If you are in the UK or the European Economic Area
You have the right to ask for a copy of the personal data we hold, to have it corrected or erased, to restrict or object to how it is used, and to receive it in a portable form. In practice the only personal data we hold is feedback you have sent us, so a request will usually concern that. Email lunashiftsupport@gmail.com.
Our legal basis for handling feedback is our legitimate interest in supporting and improving the app. Our basis for subscription status is performance of the contract you entered when you subscribed. You can complain to your national supervisory authority; in the UK that is the Information Commissioner's Office at ico.org.uk.
When you turn on Apple Health, the camera or notifications, the basis is your consent, which you can withdraw at any time in iOS Settings without affecting anything done before. The controller is Yael Michal Dredzen, contactable at the email above.
How long we keep things
Your entries stay on your device and in your iCloud until you delete them. Feedback is kept for as long as it is useful for support and improving the app, and is deleted on request. Subscription records are kept for as long as required for accounting and tax purposes.
Children
Luna Shift is made for adults. Its 12+ App Store rating describes its content, not who it is made for. It is not directed at children, children under 13 should not use it or send us feedback, and we do not knowingly collect information from anyone under 13 (or under 16 in the UK and European Economic Area). If you are a parent or guardian and believe your child has sent us feedback, email us and we will delete it promptly.
This website
- This website has no cookies, no analytics, no advertising and no session recording.
- Its fonts and images are served from this website itself, not from Google Fonts or any other font or image service, so opening a page does not send your IP address to them.
- If you choose light or dark mode, that choice is saved only in your own browser and is never sent to us.
- The site is hosted on GitHub Pages. Like any web host, GitHub receives your IP address to deliver the page and may log it for security. GitHub’s own privacy statement covers that.
Other sites and services
The app and this website link to Apple, our support page and other sites. Those are run by others under their own privacy policies, which we encourage you to read.
Changes to this policy
If this policy changes in a way that matters, we will update the date at the top of this page and note the change in the app's release notes. Continuing to use Luna Shift after a change means you accept the updated policy.