Privacy Policy
Last updated: 21 May 2026
This policy explains what data LunaSync collects, why we collect it, and the choices you have. We are the data controller for the personal data you provide.
1. Data We Collect
- Account data: email, username, password hash.
- Profile data: sleep schedule, routine, age, top goal and any other information you share to personalise insights.
- Wearable data: metrics from connected devices, where you opt in.
- Usage data: pages visited, features used, device and browser information.
- Billing data: handled by our payment processor; we never store full card details.
2. How We Use Data
- Provide personalised energy, focus and sleep insights.
- Operate, secure and improve the service.
- Send transactional emails (account, billing, reminders).
- Comply with legal obligations.
3. Legal Bases (GDPR)
- Contract: to deliver the service you signed up for.
- Consent: for optional features such as wearable integrations.
- Legitimate interests: security, fraud prevention, product improvement.
- Legal obligation: tax, accounting, regulatory requests.
4. Sharing
We share data only with trusted processors who help us run the service (cloud hosting, authentication, payments, email delivery, analytics). They are contractually bound to protect your data. We do not sell your personal data.
5. International Transfers
Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.
6. Retention
We keep account data while your account is active and for a limited period after deletion to meet legal obligations. Billing records are retained for 7 years.
7. Security
Data is encrypted in transit and at rest. Access is restricted via role-based controls and audit logs.
8. Your Rights
You can access, correct, export or delete your data — see our GDPR & Data Rights page for details.
9. Children
LunaSync is not directed at children under 16. We do not knowingly collect their data.
10. Contact
Privacy questions: privacy@lunasync.live.