Last updated: October 11, 2026
This policy covers “consumer health data” as defined by the Washington My Health My Data Act and similar laws in other US states (such as Nevada and Connecticut). It applies to Raluna, run by Aldi Irawan (“we”). Our full Privacy Policy is at raluna.app/privacy.
In Raluna, we treat everything you log about your body, and the fact that you use a period tracker, as consumer health data.
1. Consumer health data we collect, and why
Kept only on your phone (we never receive it): everything you log while you have no account; private notes about sex, contraception and your pill; pregnancy mode and due date; the fertile-window setting; your 18+ answer.
Received by us only with your consent, for the purpose stated when we ask:
| Category | Purpose and use |
|---|---|
| Account details (email, name, sign-in identity, app language), which show that you use a period-tracking app | To run your account and send sign-in emails |
| Check-ins (energy, sleep, stress, soreness, mood), daily choices and sessions | Backup and sync between your phones |
| Periods, flow, symptoms, water | Backup and sync |
| What you write to Nara, and her cards and letters | Backup and sync; writing a card or letter when you ask for one |
| Derived signals: today’s check-in levels, whether you’re on your period, counts of rest days and poor sleep, monthly patterns | Writing a card or letter when you ask for one |
| Your period status (“started on [day]” or “likely soon”) | Showing it to the one partner you linked, if you turn partner sharing on |
| Lessons finished in Nara’s Library | Backup and sync |
We use consumer health data only for these purposes. We do not use it for advertising, profiling or research, and we do not sell it.
2. Where it comes from
Only from you, through the Raluna app, and, if you allow it, a one-time read of your past periods from Health Connect (Android) or Apple Health (iPhone). We don’t buy data or collect it from anyone else.
3. Consumer health data we share, and with whom
Shared, with your separate consent:
- Your linked partner sees your period status only (one line: started on a day, or likely soon). Nothing else.
Disclosed to processors that work for us under contract, only to provide the feature you asked for:
| Category of processor | Service | What it receives |
|---|---|---|
| Cloud database and hosting | Supabase (EU) | Account details and backed-up data |
| Writing assistance (AI models) and safety check | OpenAI (US), Anthropic (US) | For a card or letter you request: your text and the derived signals in section 1, never your name, email or account id |
| Subscription status | RevenueCat (US), Google Play, Apple | Your account id and purchase history |
| Sign-in email | Resend (EU) | Your email address and sign-in code |
| Notification delivery | Expo (US), Google, Apple | A friend’s hug message (no health data) |
We have no affiliates. Friends on Raluna never see health data: only your display name, your Nara and her rooms.
4. Your rights, and how to use them
You can, free of charge (at least twice a year):
- Confirm and see whether we hold your consumer health data, get a copy of it, and get the list of all third parties and affiliates we shared it with, with a way to contact them. The fastest way to get a copy: Raluna → You → Data & privacy → Export.
- Withdraw consent to collecting or sharing it: switch off backup, cards and letters, or partner sharing in You → Data & privacy. Switching off backup lets you delete the server copy at the same time.
- Delete it: Raluna → You → delete account. This deletes your account and everything stored with it on our servers. We also tell our processors to delete it. Copies in our backup systems are deleted within 30 days.
Or write to privacy@raluna.app with your request. If you have a Raluna account, we may ask you to confirm the request from inside the app or from the account’s email; you never have to create a new account. We answer within 45 days. If we need more time (up to 45 more days), we tell you why within the first 45.
Appeal: if we turn down your request, you can appeal by writing to privacy@raluna.app with “Appeal” in the subject. We answer in writing within 45 days and explain why. If we deny the appeal, you can contact the Washington State Attorney General or your own state’s Attorney General.
We will never treat you differently for using these rights.