Privacy Policy

Solisluna ("the app", "we", "us") is a self-mastery and practice-tracking application operated by an independent developer. This policy explains what information the app collects, how it is used, and the choices you have. By using Solisluna you agree to the practices described here.

Who is responsible for your data

Solisluna is operated by an individual developer (sole operator), not a registered company. For any privacy question or request, contact: [email protected].

Information we collect

• Account information. When you create an account we collect your email address. Authentication is handled by our backend provider (Supabase). Passwords are stored by that provider in hashed form; we never see them in plain text.
• Practice and journal data. The information you log in the app — daily practices, scores, streaks, reflections, fasting windows, nutrition entries, and (for users who enable it) menstrual-cycle tracking. This is the core data the app exists to record and display back to you.
• Health and fitness data (only if you connect it). If you grant permission, the app reads health metrics from Health Connect (Android) or HealthKit (iOS) — such as heart rate, heart-rate variability, sleep, steps, and exercise sessions — to populate your journal. This data is read into the app at your request; the app does not write to your health records.
• Strava activity (only if you connect it). If you authorise Strava, the app retrieves activity data (such as runs and workouts) to auto-fill your journal.
• Subscription status. Subscriptions are processed by Google Play and managed through RevenueCat. We receive your subscription and entitlement status. We do not receive or store your payment-card details — those are handled entirely by Google Play.
• Limited technical/diagnostic data. Basic operational data necessary to run the app and keep your data in sync. The app does not include third-party advertising or ad-tracking SDKs.

How we use your information

• To provide the app's core function: recording your practices and showing your progress, scores, and stage in the program.
• To sync your data across your devices and back it up to your account.
• To manage your subscription and unlock subscriber features.
• To send account-related emails (such as sign-up confirmation and password reset).

We do not sell your personal data, and we do not use it for third-party advertising.

How your data is stored and shared

Your data is stored in our backend (Supabase) and is associated with your account. We share data only with the service providers needed to operate the app:

• Supabase — authentication, database, and storage.
• RevenueCat and Google Play — subscription processing and management.
• Strava — only if you connect it, and only to retrieve your activity.
• Resend — delivery of account emails.
• Cloudflare — domain, network, and email routing infrastructure.

These providers process data on our behalf under their own security and privacy terms. We do not otherwise disclose your personal data except where required by law.

Your health and cycle data

Health, fitness, and menstrual-cycle data is sensitive. It is used solely to populate and personalise your own journal and guidance inside the app. It is not sold, not shared for advertising, and not disclosed to third parties beyond the storage provider that holds your account data. You can disconnect Health Connect / HealthKit or Strava at any time in your device or app settings, and you can request deletion of this data along with your account.

Data retention

We keep your data for as long as your account exists, so the app can show you your history. When you delete your account, your associated personal data is removed from our active systems (see below).

Deleting your account and data

You can request deletion of your account and all associated data at any time. Full instructions are on our data deletion page, or email [email protected].

Children

Solisluna is intended for adults and is not directed to children under 13 (or the minimum age of digital consent in your region). We do not knowingly collect data from children.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise any of these, contact [email protected].

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy or your data: [email protected].

---