01
Who controls your data
Lunora is a brand owned and operated by LUNORA COSMOS PRIVATE LIMITED (“Lunora,” “we,” “our,” or “us”). This Policy covers our mobile app, WhatsApp experience, website, and related services (the “Services”).
Questions: support@lunora.me. Using the Services also means you agree to our Terms of Service.
02
What we collect
Depending on how you use Lunora, we may collect:
- Account details — login phone number, nickname, and optional email
- Birth details — date, time, place of birth, and timezone when you provide them for astrological timing awareness
- Optional profile — profession, pronouns, relationship status, and goals you choose to share
- Profile picture — an optional photo you upload
- Conversations and content — messages, questions, decision contexts, preferences, and similar content you submit
- Profiles of others — information you choose to add about other people (for example nickname, birth details, and tags for compatibility or match features)
- Connections and bumps — who you connect with, and when you bump a connection: the two people, the activity you chose, the status, and the time
- Push notifications — if you allow them, a device token for that phone (Android or iOS) and the app version, so we can deliver alerts
- Payments — order and transaction metadata from payment providers or app stores (we do not store full card numbers)
- Device and usage — information needed to operate, secure, and improve the Services (such as app interactions, device basics, product analytics, session replays, and security signals like IP used for rate limiting)
03
How we use data
We use the data you provide to:
- Generate pattern insights and timing awareness relevant to your decisions
- Maintain continuity across conversations and personalize your experience
- Show your profile picture, connections, and bumps to the people those features are for
- Deliver push notifications you have allowed
- Process payments, send support or service messages, and keep the Services secure
- Understand how the product is used, including through product analytics and session replays, and improve it
Your personal decision contexts are not sold or used for third-party advertising. Ever.
04
AI processing
To generate insights and chat replies, we may send your messages, decision context, and the birth or timing details needed to answer to third-party AI inference providers. They process that content to return a response.
We do not sell this content for advertising. We do not use it to train a public Lunora model. Providers process it under their terms to return inferences.
Using chat or insight features is your consent to that processing. Stop using those features to stop sending new content, or delete your account.
05
Location
Birth place (name and coordinates) is used to calculate charts and timing context when you provide it. You can choose not to provide a birth place; some timing features will then be unavailable.
We do not collect your current GPS location and we do not use location for continuous background tracking.
06
Profile pictures
You choose whether to upload a profile picture. We store the image and show it to your connections. It can also appear to someone you send a connection request to, on a bump, in notifications about you, and to anyone who can open your profile in the app. A push notification about you can include a link to the image.
We do not publish a public directory of photos. The image is hosted at a web address, and anyone who has that address can open it.
Before we keep a photo, we check it for explicit content. You can remove the picture in the app. If you delete your account, we delete the stored file.
07
Bumps
A bump is a signal you send to someone you are already connected with, for an activity you choose. We store the two people, the activity, the status (waiting, matched, or declined), and the time.
The other person can see that you bumped them, in the app and — if they allow notifications — on a push alert. A bump is between the two of you. People you have blocked do not receive it. A bump stays active for that day.
08
Push notifications
If you allow notifications on Android or iPhone, we store a push token for that device, the platform, and the app version. We use the token to deliver Lunora alerts.
Alerts go through Google Firebase Cloud Messaging. On iPhone, Apple Push Notification service delivers them. An alert can show another person’s name, a short line (they want to connect, they accepted, they bumped you, or they bumped you back), and a path to the right screen. If they have a profile picture, the alert can include a link to it. A daily insight alert is about your own reading and does not name someone else.
We do not send these alerts between people who have blocked each other. Logging out removes the token from our systems. You can also turn notifications off in your phone settings.
09
Product analytics and session replay
We use PostHog for product analytics. The mobile app sends events about how you use Lunora, such as screens and actions, tied to your account. On release builds we also record sessions: a playback of what was on screen during that visit.
With those app events we may store your nickname, username, and profile details you have saved, such as pronouns, relationship status, profession, and year of birth, plus the app version and whether you are on Android or iPhone. We do not attach your phone number, email, or login code to those app events. On WhatsApp, the text of a message may be included in a product analytics event.
PostHog processes this in the United States. We use it to understand the product and fix problems. We do not sell it, and we do not use it for third-party advertising. Logging out resets the analytics identity on that device. Recordings and events already sent stay with PostHog until their retention period ends.
10
How we share information
We do not sell your personal information.
We may share information with:
- Other people on Lunora — your display name, profile picture, connection activity, and bumps, as described in this Policy. We share a bump only with the connection it was sent to
- Service providers who help us run the Services — for example messaging platforms (including WhatsApp / Meta), cloud hosting, astrology calculation providers, AI inference providers, payment processors and app stores, product analytics and session replay (PostHog), push delivery (Google Firebase Cloud Messaging and, on iPhone, Apple Push Notification service), and image hosting and explicit-content checks (Amazon)
- Legal and safety — when required by law, or to protect rights, security, and integrity
- Business transfers — in connection with a merger, acquisition, or reorganization, subject to appropriate safeguards
Service providers are required to provide the same or equal protection of user data as stated in this Policy.
We may also share aggregated or de-identified data that cannot reasonably identify you.
We do not sell personal data for third-party advertising, and we do not use it to track you across other companies’ apps for advertising.
11
Retention
We retain personal data while your account is active and as needed to provide the Services, meet legal obligations, resolve disputes, and maintain security. When data is no longer required, we delete, anonymize, or aggregate it.
12
Your control and deletion
You control what you share. You can:
- Choose not to add profiles about other people
- Remove your profile picture, or choose not to upload one
- Turn off notifications in your phone settings, or log out to remove the push token and reset analytics on that device
- Stop using AI chat or insight features so we stop sending new content to model providers
- Request access or correction by emailing support@lunora.me
- Delete your account at any time
See our Data Deletion Request page for full instructions, including in-app deletion and email requests (include your login phone number). Or email support@lunora.me.
13
Children
Lunora is for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete the account and related personal data.
14
Security
We implement reasonable administrative, technical, and organizational measures to protect data. No system is perfectly secure; we work to improve safeguards over time.
15
International processing
Your information may be processed or stored in locations other than where you live, including by service providers that operate outside India. We use appropriate safeguards consistent with applicable law.
16
Policy updates
We may update this Policy to reflect changes in practices or law. Material updates will be shown by changing the “Last updated” date and, where appropriate, through notice in the Services. Continued use after updates means you accept the revised Policy.
17