Lunara Privacy Policy

Last updated: September 16, 2026


Lunara is provided by Golden Boat ("we", "us", or "our"). This Privacy Policy explains how information is handled when you use the Lunara app for iPhone and iPad, its AI Chat feature, and related support services.

Privacy contact: contact@goldenboat.io


1. Information stored on your device

Lunara stores information on your device to provide and personalize its features. This includes:

• Your date of birth and selected area of interest, when provided.

• Language, notification, and card-reversal preferences.

• Saved readings and journal entries, including dates, questions, selected cards, notes, favorites, and any outcomes you record.

• Reading counts, streaks, onboarding progress, and records of free-feature use.

The app and its widget share some local storage so their features and preferences can work together. The widget does not make separate AI requests.

Your complete journal is not automatically uploaded to our servers. Your date of birth is not included as a separate field in AI Chat requests. However, information you include in a chat message or reading question can be sent as described below. Depending on your device settings, local app data may also be included in backups managed by Apple or another backup service you choose.


2. Information used for online services

When Lunara connects to our services, we process an app-generated device identifier and session credentials to recognize the app installation, authorize requests, apply usage limits, and help prevent abuse. The identifier is a randomly generated value, not Apple's advertising identifier. It is stored in device-only Keychain storage and may remain on your device after the app is deleted and reinstalled. Free-feature usage markers may also remain in Keychain.

Our services receive connection information such as your IP address. Service records may include request times, usage or allowance information, subscription verification results, and technical error or security information needed to operate the service.

Subscription verification can occur when the app checks or restores paid access, independently of whether you choose to use AI Chat.


3. AI Chat and your permission

AI Chat is optional. Before starting a new chat, Lunara asks for your permission to share information with the AI service. If you decline, that chat does not start. Declining AI sharing does not by itself remove access to other features available under your subscription or free allowance.

After you agree and send a message, Lunara sends the following information through our backend to OpenRouter and the Google Gemini AI service to generate a response:

• Your current message and a limited portion of recent messages and replies in that conversation.

• Your app language.

• When discussing a particular reading, its question, spread, selected cards, and card orientations.

• Findings calculated from your journal, such as recurring cards, reading frequency, recorded outcomes, or repeated questions. A finding may include the wording of a question you previously entered.

Journal findings are not necessarily anonymous. Although your full journal is not uploaded, selected questions and messages may contain personal information if you enter it. Please avoid sharing sensitive information, passwords, payment details, or information about other people that you do not have permission to share.

Permission applies to the current chat. You can stop sending messages and close it at any time, and decline permission when starting another chat. Closing a chat does not recall information already transmitted or automatically delete information held by our service providers.

The app keeps the current conversation in memory while that chat is active; it does not provide a saved chat-transcript archive. Recent conversation context sent with an AI request is separate from the readings saved in your Journal. This does not mean that servers or AI providers never retain information they process.


4. How information is used

We use information to deliver readings and journal features, personalize the app, generate AI responses you request, maintain service access and usage limits, verify subscriptions, respond to support requests, and protect the service against misuse. Information may also be processed where necessary to comply with legal obligations or handle disputes.

The Lunara iOS app does not include third-party advertising SDKs or use Apple's advertising identifier for advertising tracking.

If you contact us, we receive your email address, your message, and any attachments or other information you choose to provide. We use that information to address your request.


5. Service providers and sharing

Information is shared as needed with the providers involved in the features you use:

• Hosting and infrastructure providers support our backend and its operation.

• OpenRouter routes AI requests, and Google Gemini processes the supplied context to generate responses.

• Apple processes App Store purchases and manages the Apple services you use.

• When you export a journal or share a reading, the destination you choose receives that information under its own privacy practices.

Our policy is to require service providers processing personal information on our behalf to provide protection at least equivalent to that described in this policy and required by applicable law. AI providers may also process data for safety, abuse prevention, and legal compliance under the terms applicable to their services. Their retention and any permitted use for service improvement depend on the applicable service terms and privacy configuration; sending a message does not guarantee immediate deletion or exclude all provider retention or review.

Provider privacy information:

We may disclose information when required by law or when reasonably necessary to protect users, enforce our terms, or address fraud and security incidents.


6. Purchases

Apple handles subscription payments. We do not receive your full payment-card number or your Apple Account password. The app and our backend process Apple-signed transaction information and subscription status to verify access, recognize renewals or expired access, and restore purchases.

Deleting the app or requesting deletion of data does not cancel an App Store subscription. Manage or cancel it through your Apple Account subscription settings.


7. Retention and deletion

Local journal records remain on your device until you delete them or remove the local app data. The Journal screen currently requires Premium; within that screen, you can delete individual entries, clear the journal, or export it. You do not need an active subscription to contact us about privacy or exercise applicable privacy rights. Removing the app normally removes its local app-container data, but Keychain identifiers and usage markers can remain. Exports, device backups, and copies shared with others are separate and must be managed through the relevant destination or backup service.

For information held by us, our retention policy is to keep it only for as long as reasonably necessary for the purposes described here, and then delete or de-identify it. We determine the retention period by considering the type and sensitivity of the information, the service being provided, operational and security needs, and any legal or dispute-related obligations. Different categories, such as service-usage records, support correspondence, and subscription records, may have different retention periods.

AI content transmitted to providers is also subject to their applicable retention practices. Ending a chat, clearing the local journal, or uninstalling Lunara does not automatically delete information already processed by a provider.

You can request access to or deletion of personal information held by us by emailing contact@goldenboat.io with the subject "Lunara Privacy Request". Describe the request and provide only the information needed to help us locate the relevant records, such as the approximate date of use. We may need additional information to verify the request or match device-based records. Do not send passwords or full payment-card details.

We will explain any information needed to process your request and any legal or technical limitations. Information that must be retained for legal, security, or dispute-related reasons may be excluded from deletion for as long as that reason applies. We cannot directly erase files that exist only on your device or copies controlled by recipients you selected.


8. Your choices and privacy rights

You can edit available profile settings, decline AI sharing, stop an active chat, and control notifications through Lunara and your device settings. Daily reminders are scheduled locally and require notification permission.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to certain processing, withdraw consent, or raise a complaint with a data-protection authority. Contact us at contact@goldenboat.io to make a request. Withdrawing consent does not undo processing that already occurred, and information required for another valid purpose may need to be retained.


9. Security and international processing

The app communicates with our production backend over HTTPS and uses device Keychain storage for its persistent device identifier. No method of storage or transmission is completely secure.

Our service providers may process information in countries other than the country where you live. Protections and legal requirements can differ between countries. Where required, appropriate safeguards must apply to these transfers.


10. Children's privacy

Lunara is not designed for children. If you are a parent or guardian and believe a child has provided personal information through Lunara, contact contact@goldenboat.io so we can investigate and address the information we hold.


11. This policy page and external links

If you read this policy on Google Sites, Google may process technical information about your visit under its own privacy policy. Visiting this page does not itself give Lunara permission to send your journal or chat content to an AI service. External websites and services you choose to visit have their own privacy practices.


12. Changes and contact

We may update this policy to reflect changes to Lunara or its data practices. The updated version will show a new "Last updated" date. Where a change requires notice or renewed consent, we will provide it as required.

For questions about this policy or privacy requests, contact:


Golden Boat — Lunara

Email: contact@goldenboat.io