Privacy Policy — LunaCare

LunaCare is a women's health, safety, and wellness application. We are deeply committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using LunaCare, you agree to the practices described in this policy. If you do not agree, please discontinue use of the app. Please also read our Terms of Service.

1 Information We Collect

a) Information You Provide Directly

Full name, email address, and mobile number when you provide them for account creation or profile settings
Health data you voluntarily enter — period dates, cycle length, mood logs, journal entries, symptoms
Emergency contact details you add for SOS functionality
Profile information such as age and health preferences

b) Automatically Collected Information

Device location — only when you explicitly grant permission, and only used for SOS emergency tracking and finding nearby doctors/NGOs
Basic app usage data stored locally on your device via localStorage

c) What We Do NOT Collect

We do not store card, UPI, or bank details. Payments are handled by Razorpay.
We do not track your activity outside of the LunaCare app
We do not collect data from your contacts, camera, microphone, or files unless explicitly used for a specific feature you activate

2 How We Use Your Information

We use your information solely to provide and improve LunaCare's features:

To authenticate your account securely via Google Authentication using email/password or phone verification
To power your personal health dashboard — cycle tracking, mood vault, journal
To send SOS emergency alerts with your live location to your chosen emergency contacts only
To provide relevant nearby doctors, NGOs, and helplines based on your location
To process Aviro messages and enforce the daily Aviro usage limit

💛 Important: Profile, mood, journal, SOS contact, guardian, usage, and subscription data may be transmitted to and stored by our backend when you use the related signed-in features.

3 Payments, Usage and AI Processing

Payment data

Payments are handled by Razorpay. LunaCare does not store your card, UPI, or bank details. We store only subscription status, plan, renewal date, and Razorpay subscription and payment IDs needed to provide Plus and reconcile billing.

Usage data

We store a daily count of Aviro messages per account. This count is used to enforce the Free plan's 50-message daily limit, which resets at midnight IST, and to provide unlimited Aviro access while a valid Plus period is active.

AI processing

Aviro messages, relevant conversation history sent with a request, and information included in your request are sent to NVIDIA-hosted AI models to generate replies. We do not sell Aviro messages or use them for advertising. LunaCare does not maintain a dedicated permanent Aviro conversation archive in its own Firestore collections, but requests may be processed or retained by NVIDIA under its applicable terms for [AI RETENTION PERIOD].

4 Firebase & Third-Party Services

LunaCare uses the following third-party services:

Google Authentication — Used for secure email/password or phone number-based login. Authentication data is processed according to Google's Privacy Policy.
Firebase Realtime Database (Google) — Used to store SOS location telemetry during emergency sessions. Retention depends on the active safety workflow and our retention schedule.
Vercel — Hosts the LunaCare backend and frontend.
Razorpay — Processes subscription checkout and recurring payments.
NVIDIA API — Powers the AViro AI assistant. Messages you send to Aviro are processed by NVIDIA's API for generating responses. Refer to NVIDIA's privacy policy at nvidia.com/privacy-policy for details.
Resend — Sends transactional emails such as Guardian invitations and safety review messages.

We do not sell, rent, or share your personal data with any advertising companies or third-party marketers.

5 Sensitive and Location Data

🆘 SOS Use Only: Your live location is accessed and shared with your emergency contacts ONLY when you manually activate the SOS feature. Location is never accessed in the background without your knowledge.

Location access requires your explicit permission via your device settings
Location telemetry used during an SOS session is sent to the backend and Firebase Realtime Database so the safety flow can work. Nearby-resource searches may use location or a city supplied by you.
You can revoke location permission at any time from your device settings

Health information includes period and cycle data, mood entries, journal entries, symptoms, age, and health preferences. SOS contacts, guardian links, and location are collected to provide safety features. This information is accessible to you and, for safety data, to guardians you explicitly approve through the app. We use Firebase security rules, backend authentication, access controls, and encrypted transport to protect it.

6 Data Storage & Security

Some health and profile data is cached in browser localStorage, while signed-in profile, mood, journal, SOS, guardian, usage, and billing data is handled by the backend and Firebase.
We use HTTPS, Firebase security controls, backend authentication, server-side secrets, and restricted server ownership of plan and subscription fields.
Your account is protected by Google Authentication. LunaCare does not store or have access to your password; Google securely manages password credentials.
We regularly review our security practices to protect your data

⚠️ Note: Clearing your browser/app cache may delete local cached data, but it does not by itself delete server-side data.

7 Children's Privacy

LunaCare is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

8 Your Rights

You have the following rights regarding your data:

Access: You can view all data stored in your profile within the app
Correction: You can edit your profile and health data at any time
Deletion: You can delete your account and all associated data by contacting us
Portability: Your locally stored data can be exported if the app provides an export feature
Withdrawal: You can withdraw location consent at any time from your device settings
DPDP Act rights: Subject to applicable law, you may request access, correction, deletion, withdrawal of consent, and grievance redressal under India's Digital Personal Data Protection Act, 2023.

Contact our Grievance Officer at vraxismultiventures@gmail.com. We will acknowledge and respond within [RESPONSE TIME], subject to verification and applicable law.

9 Data Retention and Deletion

We retain account, usage, subscription, and safety data only for as long as needed to provide LunaCare, meet legal and accounting obligations, resolve disputes, prevent abuse, and enforce agreements. Aviro request data may be retained by our AI provider for [AI RETENTION PERIOD]. We retain payment and transaction records for [PAYMENT RETENTION PERIOD] where required.

When a subscription ends, billing records and legally required records may remain, but Plus access ends at the paid period. When an account is deleted, we will delete or anonymise associated personal data within [ACCOUNT DELETION PERIOD], except data we must retain by law or for legitimate security, fraud, dispute, or accounting purposes.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes your acceptance of the updated policy.

📬 Contact Us

For any privacy-related questions, data deletion requests, or concerns — reach out to us directly.
[BUSINESS ADDRESS]

vraxismultiventures@gmail.com