Your birth information is personal. This notice explains what Luna uses, why it uses it, and how you can manage it.
1. Who is responsible
The controller is Marko Grzunov, Franka Lisice 2D, 23000 Zadar, Croatia. Contact info@lunaastrology.net for privacy questions or requests.
This notice covers the Luna mobile app, its account service, subscriptions where offered, support and the Luna presentation website. It also applies to Luna beta testing, with the additional Apple information below.
2. Information you provide
Your account: email address, a randomly assigned account identifier and a password hash. We do not store your password as readable text.
Your chart: first name or nickname, birth date, birth time and its stated accuracy, and selected birth city and coordinates. Coordinates refer to the city you choose; Luna does not request your device's GPS location or address book. Your name is used to address you personally. You can indicate an unknown or approximate birth time; that limits time-sensitive chart details.
Readings: calculated charts, personal portraits, horoscopes, relationship readings and a history of content shown, to keep your experience consistent and reduce repetition.
Journal: optional short notes about everyday experiences and local drafts. Journal text is not used to compose horoscopes or analysed. The journal is not a medical record and is not intended for information about health, sex life, religious or political beliefs, or other special-category information. Do not enter that information or other people's private details. If you save it accidentally, you can delete the entry or ask for help without sending its content again by email.
Preferences and support: language, theme, time zone, daily-advice preferences, and the information you include when contacting us. You do not have to add a partner, keep a journal or enable notifications to create your own chart. Without account and birth information, we cannot provide the corresponding account or personalised chart service.
3. Information about a partner
A Luna user may enter another person's first name or nickname, birth date, time, time accuracy and birth city for a private relationship reading. That user is the source of the information; we do not obtain it from public databases. The resulting profile and readings are linked to the user's account and are visible to that user.
Before entering someone else's information, give them this notice, explain the comparison and obtain their permission. Explain that the information is stored on Luna's server and that you will see the resulting interpretations. Do not enter their information if they do not agree or do not know about the processing. This also applies to a potential partner; wanting a comparison is not permission. A user's checkbox is not the other person's direct consent to Luna.
The basis for this processing is the legitimate interest of the user and Luna in providing a requested, private, symbolic comparison with the other person's knowledge. It does not authorise secret profiling, public sharing or consequential decisions about that person. We balance this purpose against the person's privacy and reasonable expectations.
You can object or request removal even if you have no Luna account. Email info@lunaastrology.net. We will ask only for information reasonably needed to identify the relevant entry and verify the request, without disclosing someone else's account or journal.
Luna and partner comparisons are intended for people aged 16 and over. Do not enter information about anyone under 16. For partners aged 16 or 17, it is especially important that they understand the purpose, storage and their right to decline. We give particular consideration to their privacy and expectations when assessing a request.
4. Why we process information
- Providing the service you request — performance of a contract: account access, your chart and readings, optional saved journal entries, account support and verifying purchased access.
- Keeping Luna secure and reliable — legitimate interests: protecting accounts, limiting abusive requests, preventing unauthorised subscription access, making recovery copies and preserving deletions during restoration.
- Responding to general enquiries — legitimate interests: answering a message you send and retaining the correspondence needed to resolve it.
- Meeting legal obligations: handling applicable data-protection requests and retaining information where a specific law requires it. We assess any exception to erasure against the obligation concerned.
The separate basis for partner information is explained above. Where processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal. Device notification permission can be changed in your phone's settings.
Luna calculates astronomical positions and assembles interpretations from an authored library on its server. Personal information and journal entries are not sent to external AI or translation services. Readings offer symbolic reflection; they are not factual findings about you and do not make decisions with legal or similarly significant effects. Luna does not sell personal data, serve advertising or include cross-app advertising tracking.
5. Your device and offline content
Previously loaded profiles, charts and readings are stored in protected device storage for offline reading. Cached content older than 30 days is not displayed and is removed during a subsequent successful content save. Explicit sign-out clears cached readings and local journal drafts; Luna warns before discarding unsaved entries. An expired session can leave protected unsaved drafts on the device so they can be recovered after signing back in.
Deleting data on the server cannot instantly erase a device that is offline. Its local copies remain subject to the device's storage and cache controls. New content, changes and server verification require a connection. Paid cached readings, where offered, require renewed verification within 24 hours and cannot remain accessible beyond the confirmed entitlement expiry.
Daily advice uses your chosen schedule and device notification permission. Notification text may be visible on the lock screen, depending on your phone's settings.
6. Who processes information and where
Luna and hosting: authorised administration can access information for maintenance and support. The app communicates with Luna's service over HTTPS. The main Hostinger VPS is in Frankfurt, Germany; its weekly provider backups are listed in Lithuania. Luna also keeps independent recovery copies on the owner's computer in Croatia. These are not end-to-end encrypted against authorised administration.
Email: Hostinger provides Luna's recovery email and support mailbox. Hostinger confirmed that email and mailbox backups are stored in the EU; it did not specify individual countries for that service.
Hostinger also identified Proofpoint, Inc. (United States) for email protection, Cloudflare, Inc. (United States) for email availability and security, and MailChannels Corporation (Canada) for delivery and scanning. Email-related processing can therefore occur outside the EEA. Hostinger states that transfers to Proofpoint and Cloudflare rely on their participation in the EU–US Data Privacy Framework and the associated adequacy decision, and that applicable Canadian transfers rely on an adequacy decision. Its Data Processing Addendum also provides transfer safeguards where applicable. Contact us to request information about the safeguards relevant to your data.
Apple: Apple processes App Store purchases and, if used, TestFlight participation under its own privacy notices. Luna does not receive your payment-card number. See Apple's privacy policy and TestFlight and privacy.
We disclose information to competent authorities only where required by applicable law. Hosting in the EU does not mean that every service provider's processing takes place exclusively in the EU.
7. Purchases and subscriptions
To verify an Apple purchase, Luna uses a transaction identifier and a random token linking the purchase to your Luna account. Birth details, your name and journal entries are not sent to Apple for this verification.
Our server records the original transaction identifier, product, environment, subscription state, expiry and verification dates, and renewal setting. These records provide purchased access and protect against misuse. We retain identifiers of processed Apple notifications to avoid processing the same event twice; we do not retain their full payloads.
Deleting your Luna account removes its subscription link and records from Luna's active database. Apple retains its own purchase information. Deleting a Luna account does not cancel an Apple subscription. Manage or cancel it in your Apple Account settings.
8. How long information is kept
- Account, birth profiles, readings and saved journal entries: while the account remains active, unless you remove them earlier. Profile → Delete account removes the account and linked information from the active database and ends account access.
- Recovery codes: usable once within 20 minutes. Password changes invalidate previous sessions. Expired recovery-code hashes are cleaned up when subsequent recovery requests are handled; expiry of a code is not a promise of immediate removal of every technical record.
- Support correspondence: unresolved requests remain while being handled; resolved requests are removed from Luna's mailbox within 12 months of closure, unless a documented legal obligation or dispute requires relevant information to be retained longer.
- Email deletion: Hostinger automatically empties Trash every 30 days; it can also be emptied manually. Removal from Trash deletes the message from the active service. Hostinger states that permanently deleted messages are removed from backups within 14 days. These periods do not control copies in your own mailbox.
- Email logs: Hostinger retains delivery, access and action logs for 180 days.
- Server logs: Luna's system journal is configured for a seven-day retention limit and a 1 GB size limit. Request access logging is disabled for the Luna website and API. Nginx error logs use daily rotation with 14 retained archives; empty logs are not rotated, so this is not a fixed 14-day deletion guarantee.
- Subscription notification identifiers: entries older than 90 days are removed when another notification is processed. They can remain longer if no further notification arrives.
- Managed Luna backups: cleanup uses a 30-day age limit and a maximum of 14 successful snapshots per destination, after a new backup has been verified. If replacement fails, the previous recovery point is preserved temporarily. Historical recovery copies need separate review and removal; they are not all covered by automatic rotation.
- Hostinger VPS backups: the provider describes rotation of two weekly backups, with a new successful backup replacing the oldest. This is a rotation rule, not a guaranteed deletion deadline if a backup fails or the service stops producing replacements.
Deleting live data does not instantly remove it from existing backups. Recovery copies have restricted access and are used for recovery. A separate deletion record uses digests of random identifiers, rather than names or email addresses, to preserve account deletions during restoration. It is retained while a recoverable copy could restore the deleted account. Individual profile and partner removals must also be checked against the separate deletion-request record before a restored service is reopened.
Technical request information supports security and abuse prevention; password recovery uses hashed email/IP identifiers for rate limits. Retention depends on the specific security purpose and any incident being investigated. We do not use these records for advertising. We keep a minimal record of resolved privacy requests for up to 12 months after closure, unless a documented legal obligation or dispute requires longer retention. The separate digest record needed to prevent erased information from returning is kept while a relevant recoverable backup exists.
9. Your choices and rights
You can request access, correction, erasure, restriction and, where applicable, a portable copy of your information. You can object to processing based on legitimate interests, including partner comparisons. Contact info@lunaastrology.net; you do not need a subscription or a Luna account to make a request.
We normally respond within one month. If a lawful extension is needed, we explain it within that month. We verify identity proportionately to protect your information; we do not routinely require an identity document. Never send your password or a sign-in code to support.
You may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.
10. Website, beta testing and changes
The presentation website does not register accounts, collect birth details, or use analytics, advertising trackers, contact forms or third-party fonts. Your browser sends technical connection information to the host to load its pages. If you email us, your email provider transmits the information you include.
TestFlight users are also subject to Apple's handling of beta usage, crash information and feedback. Before sending a screenshot to Luna or Apple, check whether it reveals another person's information.
We will update this notice when the service or its data practices change. The published page will show its revision date. Significant changes will be brought to users' attention through an appropriate service notice.
11. Users aged 16 and 17
People aged 16 and 17 may also use Luna. The minimum age of 16 is Luna's service rule; it does not mean that every purchase or type of processing is legally permitted without further conditions. If applicable law requires a parent or guardian's approval to enter a contract or subscribe, obtain it before making a purchase.
Luna is not intended for people under 16. If you believe such information has been entered, or a minor's information is being used without the required permission, contact info@lunaastrology.net. We will check the circumstances and restrict or remove information where appropriate. Claiming to be a parent does not automatically give someone access to another person's account, chart or journal.
You do not need legal knowledge to understand your choices: you can correct your information or request deletion; keeping a journal and adding a partner are optional; a partner can decline a comparison; you do not need a subscription to ask for help. Never send us your password or sign-in code.