Back to Luna

Privacy Policy

Last updated: April 5, 2026

Luna is a personal companion. That means we handle information that's personal to you — your birth details, your questions, your reflections. This policy explains what we collect, why, how we protect it, and the rights you have over it. We've tried to keep it plain-spoken. If anything is unclear, email us at [email protected].

1. Who we are

Luna (“Luna,” “we,” “us,” or “our”) is an AI-powered Vedic astrology companion operated by Luna AI (the “Company”), accessible at lunaknows.me. For privacy questions, data requests, or to reach our data protection contact, email [email protected].

2. Information we collect

Information you give us directly

  • Account information — your email address and authentication credentials, managed by our identity provider Clerk.
  • Birth details — your name or chosen name, date of birth, time of birth, and birth location. These are required to compute your Vedic chart. Birth data is sensitive because it is unique to you; we treat it with the same care as account credentials.
  • Conversations — the messages you send to Luna and the responses you receive. Conversations are stored so you can return to them and so Luna can provide continuity across sessions.
  • Payment information — if you subscribe, billing details are collected and processed by Stripe. Luna never sees or stores your full card number. We store only a Stripe customer identifier, subscription status, and billing events necessary to operate your account.

Information collected automatically

  • Usage and diagnostic data — timestamps, error logs, request metadata, and aggregate cost metrics used to operate and improve the service. We also record per-account question counts, daily reset dates, and fair-use limit timestamps. Authorized administrators can review these records for support, fair-use enforcement, and abuse prevention.
  • Device and connection data — IP address, browser type, and operating system, collected via standard server logs and our CDN provider Cloudflare for security, fraud prevention, and abuse protection.
  • Essential cookies — strictly necessary cookies set by Clerk to keep you signed in and by Cloudflare to protect the service. Luna does not use advertising cookies or cross-site tracking.

What we do not collect

  • We do not collect biometric data, precise GPS location, or health records.
  • We do not knowingly collect information from children under 16.
  • We do not sell or rent your personal information to anyone, ever.

3. How we use your information

We use your information for the following purposes, and only these purposes:

  • To provide the service — computing your chart, generating personalized responses, maintaining conversation history, and delivering features you request.
  • To operate your account — authentication, subscription management, billing, and customer support.
  • To keep Luna safe — detecting abuse, fraud, rate-limit evasion, and security incidents.
  • To improve the service — diagnosing bugs and analyzing aggregate, de-identified usage patterns. We do not use the content of your conversations to train third-party AI models.
  • To communicate with you — transactional emails (receipts, security alerts, account changes). We only send marketing or product updates if you opt in, and you can unsubscribe at any time.
  • To comply with the law — responding to lawful requests, enforcing our Terms, and protecting rights and safety.

4. Legal bases for processing (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Performance of a contract — to deliver the service you signed up for, including computing your chart and processing payments.
  • Legitimate interests — to secure the service, prevent abuse, debug problems, and improve the product. We balance these interests against your rights.
  • Consent — for optional marketing communications. You can withdraw consent at any time.
  • Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

5. AI processing and third-party language models

Luna generates responses using large language models provided by third-party AI infrastructure providers. When you send Luna a message, the content of that message and the relevant context from your chart are transmitted to these providers so they can generate a response. These providers process the content on our behalf under their own privacy and data-handling commitments and do not use your content to train their foundation models when accessed through their API in the manner Luna uses.

Please do not share information in chat that you would not want processed by an automated system — such as government identifiers, financial account numbers, or medical records. Luna is a companion, not a vault.

6. Who we share information with

We share personal information only with service providers that help us run Luna, only to the extent necessary, and only under contracts that require them to protect your data:

  • Clerk — authentication and account management.
  • Stripe — payment processing and subscription billing.
  • AI model providers — large language model inference.
  • Railway — application hosting.
  • Cloudflare — DNS, CDN, and security.

We may also disclose information if required by law, to respond to valid legal process, to protect our rights or the safety of our users, or in connection with a merger or acquisition (in which case we will notify you and your rights under this policy will carry over).

7. International data transfers

Luna is operated from the United States. If you access the service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses for international transfers of personal data.

8. How long we keep your information

  • Account and chart data — retained while your account is active, and for a reasonable period after closure to handle disputes, fraud, and legal obligations.
  • Conversations — retained while your account is active. You can delete individual conversations or your entire account at any time from your settings; deletion propagates to our database within 30 days.
  • Billing records — retained as long as required by applicable tax and accounting law (typically 7 years).
  • Backups and logs — rolling retention windows of 30 to 90 days.

9. Your rights

Depending on where you live, you may have the following rights over your personal information:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to fix inaccurate or incomplete information.
  • Deletion — ask us to delete your account and associated data.
  • Portability — request an export of your data in a machine-readable format.
  • Objection and restriction — object to or restrict certain processing, including processing based on legitimate interests.
  • Withdraw consent — at any time, where processing is based on consent.
  • Complain — lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days. We will never discriminate against you for exercising your rights.

10. California residents (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 9 above, plus the right to know the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it — all of which are described in this policy. Luna does not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

11. Children

Luna is not directed to children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, email [email protected] and we will delete it.

12. Security

We protect your data with industry-standard measures including encryption in transit (TLS), encryption at rest for sensitive fields, scoped access controls, audited infrastructure, and third-party providers (Clerk, Stripe) that maintain their own strong security certifications. No system is perfectly secure, but we treat security as a product feature, not a checkbox.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you by email or via a prominent notice in the app before the changes take effect. The “Last updated” date at the top of this page will always reflect the current version.

14. Contact us

Privacy questions, data requests, or anything else: [email protected]
General support: [email protected]