Solisluna records the practice you log so it can show it back to you. Your data is tied to your account, is never sold, and carries no advertising.
Two features send data to an AI provider to generate written text. The Mirror sends what you have written — up to thirty days of your journal entries. The Weekly Transmission sends figures only, never anything you wrote. Both are described precisely below, and neither runs unless you use it.
You can delete your account and its data at any time, from inside the app.
Solisluna ("the app", "we", "us") is a practice-tracking application operated by an independent developer. This policy explains what the app collects, where it goes, and the choices you have. By using Solisluna you agree to the practices described here.
Who is responsible
Solisluna is operated by an individual developer, not a registered company. For any privacy question or request, contact [email protected].
What we collect
Account information
Your email address, when you create an account. Authentication is handled by Supabase; passwords are stored by them in hashed form and we never see them in plain text.
Practice and journal data
What you log in the app: daily practice marks, sleep, training, fasting windows, nutrition entries, meditation and breathwork minutes, cold exposure, and the written reflections you choose to enter. This is the core data the app exists to record.
Vitals
Heart-rate variability, heart rate and daily step count are stored alongside your journal entries so your history persists across devices.
Health and fitness data — only if you connect it
If you grant permission, the app reads from Health Connect (Android) or HealthKit (iOS): heart rate, resting heart rate, heart-rate variability, sleep sessions, steps, exercise sessions, distance and elevation gained. This populates your journal. The app reads from your health records; it never writes to them. You can revoke this at any time in your device settings.
Subscription status
Subscriptions are processed by Google Play and managed through RevenueCat. We receive your entitlement status only. We never receive or store payment-card details — those are handled entirely by Google Play.
Technical data
Basic operational data needed to run the app and keep your account in sync. The app contains no third-party advertising or ad-tracking software.
What is sent to an AI provider
Two features generate written text using Anthropic's Claude API. Both are optional and require a subscription. What is sent differs between them, and the difference matters:
The Mirror
This one sends what you have written. Up to thirty days of your journal entries are included: your daily intention, your notes on the day's work, your written reflection, what you were glad of, your intention for tomorrow, and your answer to the day's prompt. Each is shortened to 280 characters. This is the feature that reads your own words back to you, so your own words are what it sends.
The Weekly Transmission
This one sends figures only. No text you have written is included. A summary of the past week is sent: your stage, days logged, the disciplines you marked, sleep hours and sleep score, heart-rate variability, resting heart rate, training distance and climb, fasting hours, and any nutrient shortfalls. Your written reflections, seed-force notes, what-helped notes and food notes are never sent by this feature.
Anthropic processes this data to generate the text returned to you. The generated text is stored in your account so the app does not regenerate it each time you open it.
If you would rather send nothing to an AI provider, do not use these two features. Every other part of the app works without them.
Food search
If you search for a food, the food name you typed is sent to the U.S. Department of Agriculture's FoodData Central database to retrieve nutrition figures. No account identifier, email or personal information travels with that request.
How your data is stored and shared
Your data is stored with Supabase and associated with your account. We share it only with the providers needed to operate the app:
- Supabase — authentication, database and storage
- Anthropic — generation of the Mirror and Weekly Transmission text, as described above
- RevenueCat and Google Play — subscription processing
- U.S. Department of Agriculture — food-name lookups only, with no identifier attached
- Resend — delivery of account emails
- Cloudflare — domain, network and email routing
These providers process data on our behalf under their own terms. We do not otherwise disclose your data except where required by law. We do not sell your data and we do not use it for advertising.
Health data
Health and fitness data is sensitive and is treated as such. It is used to populate your own journal inside the app and is shown back to you on the Vitals and Fitness screens.
Some of it is sent to the AI provider. Specifically, the Weekly Transmission includes your heart-rate variability, resting heart rate, sleep figures, and training distance and climb, as described above. Nothing else is disclosed: health data is not sold, not shared for advertising, and not passed to any third party beyond the storage provider holding your account and the AI provider named above.
You can disconnect Health Connect or HealthKit at any time in your device or app settings, and you can delete this data along with your account.
Retention
We keep your data for as long as your account exists, so the app can show you your own history. When you delete your account it is removed as described below.
Deleting your account and data
You can delete your account from inside the app, under Settings. This does two things:
- Every piece of data held on your device is erased — your journal, your profile, your cached history and your preferences
- Your account is removed from our systems, along with your profile, all journal entries, and all generated Mirror and Transmission text
Deletion is permanent and cannot be undone. Full instructions are on our data deletion page, or you can email [email protected] to request it.
Children
Solisluna is intended for adults and is not directed at children under 13, or under the minimum age of digital consent in your region. We do not knowingly collect data from children.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data. To exercise any of these, contact [email protected].
Changes to this policy
We may update this policy. Material changes will be reflected by the date at the top of this page.
Contact
Questions about this policy or your data: [email protected].