Raluna Privacy Policy

Last updated: October 11, 2026

Raluna is a period tracker and body-care companion with Nara, a clay moon cat. What you log in it is about your body, so we treat it as health data: the most sensitive kind there is. This policy says what Raluna keeps, where, who else handles it, and what you can do about it. It covers the Raluna app on Android and iPhone, and the raluna.app website.

The short version

• Without an account, everything stays on your phone. We can’t see it.
• Nothing leaves your phone until you say yes to that specific thing, at the moment it would happen. You can take every yes back in You → Data & privacy.
• Your private notes about sex and contraception never leave your phone through Raluna. No backup, no sharing, no card writing, no analytics.
• No ads. We never sell your data, and we never share it for advertising. Raluna has no ad or tracking tools in it.
• You can export everything and delete your account in the app, at any time.
• Raluna is not a medical service. Its estimates are not a diagnosis, not contraception and not a way to plan a pregnancy.

Who we are

Raluna is run by Aldi Irawan, Central Java, Indonesia (“Raluna”, “we”, “us”). We decide how your personal data is used (the “controller” under the GDPR, the “Pengendali Data Pribadi” under Indonesia’s Personal Data Protection Law, UU PDP).

Questions or requests about your data: privacy@raluna.app.

We are appointing representatives in the European Union and the United Kingdom (GDPR Article 27). Their details will be listed here; until then, write to privacy@raluna.app and we will answer you directly.

What stays on your phone

Everything you put into Raluna is first saved on your phone only:

• what Nara calls you, your settings and reminder times
• check-ins (energy, sleep, stress, soreness, mood) and what you chose to do each day
• periods, flow, symptoms and water
• what you tell Nara, and the cards and letters she writes back
• lessons you finished, Nara’s growth, her outfits and rooms

Some things never leave your phone through Raluna, even with an account and backup on:

• Private notes: sex (with or without protection), your contraception and your pill. They are encrypted on your phone (AES-256), with the key kept in your phone’s secure key store (the Android Keystore, or the iPhone Keychain).
• Pregnancy mode and your due date.
• The fertile-window setting.
• Your answer to “Are you 18 or older?” (only yes or no; we never ask for your birth date).

Reminders (check-in, period, pill, Full Moon Night, trial ending) are scheduled by your phone itself. Their lock-screen words are neutral on purpose.

Your phone’s own backup (Google’s backup on Android, iCloud or a computer on iPhone) may include Raluna’s files, as it does for other apps. Your private notes stay encrypted inside it.

The PDF for a doctor’s visit and the export are made on your phone and leave it only when you share them yourself. Private notes are left out of both unless you switch them on, every time.

What leaves your phone, and only when you choose it

Your account

To back up, write to Nara, join friends or link a partner, you need an account. We keep:

• your email address and a password (stored only as a hash), or your Sign in with Google or Sign in with Apple identity
• the name you give and your app language (so sign-in emails come in your language)
• a record of each consent you gave or took back, with the date and the version of the words

The sign-in service also logs sign-ins, including the IP address, to keep accounts safe. These logs are kept for up to 90 days.

Backup

Only if you say yes to backup. Then a copy of your check-ins, plans, sessions, periods, flow, symptoms, water, what you told Nara with her cards and letters, finished lessons, and Nara’s growth and wardrobe is kept with your account, so a new phone picks up where you left off.

Turn backup off in You → Data & privacy. You can delete the copy on our servers at the same moment. Your account stays.

Cards and letters from Nara

Only if you say yes. Nara’s cards and Moon Letters are written with the help of AI models from OpenAI and Anthropic (Claude). When you ask for one, our server sends the model provider:

• for a card: the words you wrote (up to 800 characters), your language, the time of day, today’s check-in levels, today’s choice (move, recover or rest), whether you’re on your period, and two counts: rest days this week and poor nights of sleep in the last seven
• for a Moon Letter: numbers about your month (days you took care of yourself, check-ins, sessions, rests, what you chose most), Nara’s growth stage, one pattern from your check-ins, whether energy and mood went up or down, the names of things you picked for Nara, and, only if you say so, up to eight lines you wrote to Nara

What you write is also checked by OpenAI’s moderation model for signs of self-harm. If it finds them, no card or letter is written and you are shown where to get help.

We never send your name, email, account id, birth date or private notes. Our requests ask the provider not to store them. Neither OpenAI nor Anthropic uses data sent through its API to train its models; each may keep requests for up to 30 days to detect abuse before deleting them. Both process them in the United States.

The card or letter comes back to your phone and is kept with your other notes (backed up only if backup is on). Our server keeps only counts (how many cards you asked for today), to apply the daily limit.

Friends

Only if you turn friends on. Friends see the name you choose, your Nara (her coat, outfit, how grown she is) and her rooms. They never see your cycle, check-ins or notes. We keep your invite code, who you’re friends with, hugs and pets (deleted after 30 days), who you blocked, and names you reported. We read reports to keep Raluna safe.

Turning friends off removes your card, your code, your friendships and your hugs. Your blocks stay, for your safety.

Partner

Only if you link a partner. Your partner sees one short line, only around your period: that it started (and which day), or that it’s likely soon. Nothing else: no symptoms, notes, moods or fertile window. The line stops showing by itself (10 days after your period started, or 7 days after “soon”). A link code lasts 24 hours. Either of you can unlink at any time; that removes the link and both lines, and the other person isn’t told.

Hugs on your lock screen

If you allow notifications for friends, your phone’s push token is stored with your account so a friend’s hug can reach you. The words (“Ana sent Nara a hug.”) go through Expo’s push service to Google (Android) or Apple (iPhone). Turn this off on the You tab or in your phone’s settings.

Usage counts (optional)

Only if you say yes. We count a few events per day: the app opened, a check-in, a session or a lesson finished, the Library opened, the Plus screen shown, a purchase, an account made, an export. Each count carries a random id made for this install, the day, the app version, the platform and the language. It is never linked to your account and holds no health data and no text. Saying no changes nothing in the app. Taking the yes back deletes what this install sent. Counts are kept for up to 13 months.

Crash reports

When Raluna crashes, a report of what broke and where is sent to Sentry (EU data region). It holds no name, email, account id, IP address, device name or anything you logged, only the screens you moved between. Reports are kept for up to 90 days. You can turn crash reports off in You → Data & privacy.

Purchases

Raluna Plus is bought through Google Play on Android and the App Store on iPhone. We use RevenueCat to know whether you have Plus. RevenueCat receives your account id (not your email), your purchases and basic device and app information. Google or Apple handle payment; we never see your card.

Full Moon Night and the Library

When you join Full Moon Night, we add one to that night’s count. The phone sends a random token made for that one night, not your account; tokens are deleted three days later. Lessons are downloaded without your account. “Report a mistake” sends the lesson, the page, your reason and an optional note, with nothing that identifies you. Please don’t put personal details in the note. Reports are kept for up to 12 months.

Importing your periods

If Raluna offers it on your phone and you allow it, Raluna can read your past periods once from Health Connect (Android) or Apple Health (iPhone). It only reads, never writes, and never uses health data for advertising or data mining.

The website and the waitlist

raluna.app has no ads, no analytics and no cookies. It is hosted by Cloudflare, which handles each visit and may keep technical logs (such as your IP address) for a short time for security.

If you join the waitlist, we keep your email address, the language of the page, when you agreed and the exact words you agreed to, and when you confirmed. We use your email only to tell you when Raluna is on Google Play and to send a few short updates before that. Emails are sent through Resend. Every email has a link to unsubscribe, and unsubscribing removes your address from the list. We delete the whole waitlist within three months after Raluna launches. The legal basis is your consent, which you can take back at any time.

When you write to an @raluna.app address, your message is stored in our mailbox at Zoho Mail.

Who else handles your data

We use these services to run Raluna. Each one may use your data only to provide its service to us.

When you open a link in Raluna (a lesson’s source, a help line), that website sees your visit under its own policy.

We don’t sell or rent personal data, and we don’t share it for targeted advertising. We would hand data to someone else only if the law makes us (see “Requests from authorities”), or with the business if Raluna is ever sold, under this same policy.

Where your data is kept

Our servers are in the European Union (Frankfurt). Some services above are in the United States, so some data travels there. For those transfers we rely on the safeguards the services offer under the GDPR, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. If you live in Indonesia, this also means your data is sent abroad; we only use services that protect it at least as well as Indonesian law asks (UU PDP Article 56).

Why we may use your data (legal bases)

• Health data (cycle, check-ins, what you tell Nara): your explicit consent, asked at the moment it would leave your phone (GDPR Article 9(2)(a); specific personal data under the UU PDP).
• Running your account and Plus: to provide the service you asked for.
• Crash reports and keeping Raluna safe (rate limits, reports, blocks): our legitimate interest in a working, safe app. You can turn crash reports off.
• Usage counts and the waitlist: your consent.

How long we keep it

Your choices and rights

In the app, at any time:

• Export everything as a file you can keep (You → Data & privacy).
• Delete your account. This deletes your account and everything stored with it on our servers (backup, cards and letters, friends, partner link, push tokens, consent records) and this phone’s usage counts, and revokes Raluna’s access to your Apple ID if you used Sign in with Apple.
• Take back any consent with one switch: backup, cards and letters, friends, partner, usage counts, crash reports.
• Delete the app to remove everything on the phone.

Depending on where you live, you also have the right to access, correct, delete or move your data, to object to or limit how we use it, to withdraw consent, and to complain to a data protection authority (in the EU, the one where you live; in Indonesia, the authority under the UU PDP). Write to privacy@raluna.app. We may ask you to confirm the request comes from you. We answer within one month, or sooner where the law of your country asks for it.

People in Washington State and other US states with consumer-health-data laws: see our Consumer Health Data Privacy Policy.

Age

Raluna is for people aged 16 and over. If the law where you live asks for a parent’s or guardian’s consent at your age (in Indonesia, under 18), please use Raluna with their consent. We don’t knowingly collect data from children under 13. Private notes are only for people who confirm they are 18 or older.

Security

Data travels encrypted (TLS) and is encrypted at rest on our servers. Database rules let each account reach only its own data and what friends or a partner were meant to see. Your sign-in stays in your phone’s secure storage. Private notes are encrypted on your phone with a key kept in its secure key store, and can be locked behind your fingerprint, face or screen lock. No system is perfectly safe; if a breach affects you, we will tell you and the authorities within the time the law requires.

Requests from authorities

We keep as little as possible, so there is little to hand over. Your private notes, pregnancy mode and fertile-window setting are never on our servers. We hand over data only when the law requires it, check each request, and tell you unless the law forbids it.

Not medical advice

Raluna offers general information and personal observations. Its period and fertile-window estimates are not contraception, not a way to plan a pregnancy and not a diagnosis. Nara’s cards and letters are not medical or mental-health advice. If you’re worried about your health, talk to a doctor.

Changes

If we change this policy in a way that changes what happens to your data, we’ll tell you in the app first, and ask again where your consent is needed. The date at the top always shows the latest version.