Lunara Privacy Policy / Lunara 隐私政策
Effective: September 30, 2026 / 生效：2026年9月30日
Updated: October 17, 2026 / 更新：2026年10月17日
Operator / 运营主体：河南二进制数字科技有限公司
Contact / 隐私联系邮箱：binarydigitaltechnology@gmail.com
Application / 应用：Lunara (com.binary.lunara), Android
Policy URL: https://sites.google.com/view/lunaras/privacy-policy
Delete your Lunara account association: https://lunara-billing-tj6fystdjq-uc.a.run.app/account-deletion
1. What Lunara does
Lunara provides ambient soundscapes, offline playback, saved mixes and optional Plus subscriptions. Free sounds do not require sign-in. Subscribing or restoring Plus requires Sign in with Google so a purchase can be associated with the same verified account across devices. This policy describes the Android app, its subscription service and this policy website.
2. On-device information
Sound recordings are included in the app. Favorites, mix names and sound levels, language, appearance and playback preferences are stored in private app storage. We do not upload listening history or saved mixes to an analytics service. The app contains no advertising or analytics SDK and does not request microphone, location, contacts, camera, photo-library or shared-storage access. Android media controls receive playback titles and state to support notification, lock-screen and background playback. Lunara does not record your surroundings.
3. Google sign-in and payment information
Google handles sign-in and Google Play checkout. Lunara does not receive your Google password, complete card details or wallet credentials. Google's sign-in interface may display profile information; Lunara uses the verified stable Google account identifier to derive an application-specific hash. We do not save your Google name, email, profile image or Google ID token in our subscription database. The app keeps a short-lived Google ID token in memory and sends it over HTTPS to our service for authentication. This token may contain name and email claims, which are processed transiently in request memory and are not saved in the subscription database.
The app and service use the account hash, Google Play purchase token and purchase-token hash, installation public-key fingerprint, subscription product and plan, state, expiry, acknowledgement and retry information. These are used only to associate and restore purchases, prevent unauthorized reuse, confirm orders, process renewals and synchronize refunds or revoked purchases. Google Play also receives an obfuscated account identifier during purchase for this association. Payment methods, taxes, localized prices and availability are controlled by Google Play. Monthly and annual plans unlock the same Plus soundscapes.
3a. Optional complimentary access codes
Some users may receive a complimentary access code. Redeeming a code in Settings does not require Google sign-in, create a Google Play purchase, charge a payment method or start automatic renewal. The service validates the code hash and current grant configuration with an installation public-key proof. It uses installation-derived identifiers and the same short-lived anti-replay and rate-limit records described below. The app sends the code over HTTPS for redemption and does not save the raw code to device storage or application logs. Only a signed installation-bound access pass is cached on the device.
Complimentary passes last no more than 15 minutes. Continued access requires online validation of an enabled grant; the operator can disable the grant or rotate its version, with existing offline passes expiring within their remaining validity. If a pass expires before online renewal, the user must redeem the code again. Remove code access in Settings clears the local pass. This does not cancel or refund any separate Google Play subscription, and does not delete a Google account association. The code supplies content access only; it does not provide access to other users' accounts, orders or personal information.
4. Hosting, security and short-lived access
The service runs on Google Cloud in the United States (us-central1). Google Cloud provides hosting, restricted database storage, event delivery and scheduled order checks. Service-account permissions restrict access to the necessary server components. Requests use HTTPS; installation private keys remain in Android Keystore. Google Play notifications trigger a fresh official status check rather than granting access based only on a notification. We do not put Google ID tokens, purchase tokens, passwords or private keys into application logs. Hosting infrastructure may process network information such as IP addresses, timestamps and HTTP status for service delivery and security under Google's applicable policies.
A signed subscription access pass stored on the device is bound to the verified Google account and installation. Complimentary code passes are bound to the installation and grant. It lasts no more than 15 minutes and never beyond the verified subscription expiry. Renewal needs an online check. Rebooting or an unverifiable clock requires an online check. Revocation cannot reach a completely offline device immediately; its existing valid pass expires within this short window. Passes and sign-in credentials are excluded from app preference backup or device transfer.
5. Retention and deletion
Active subscription-processing records are retained to handle the subscription. Order records are scheduled for automatic deletion 90 days after the expiry returned by Google Play; renewal extends the expiry and this retention date. If Google has not provided an expiry, the fallback is 90 days after creation. Expired-order scans do not restart that period. Cloud database automatic deletion may take additional processing time after a record becomes eligible.
In Settings, you can sign out or choose Delete Lunara account association. You can also use the deletion website above after uninstalling: sign in with the same Google account, review the explanation and explicitly confirm deletion. Deletion removes the association to your Lunara account and the local access pass on the device making the in-app request. Minimal purchase-processing information remains for the period above so acknowledgements, renewals, refunds and security checks can finish. An irreversible hashed deletion marker without raw Google identity, email or purchase token is retained for 90 days to prevent requests already in progress from restoring a deleted association. Consumed anti-replay hashes remain for 10 minutes; anonymous rate-limit counters last 2 minutes; notification-deduplication records last 7 days. These database deletion times are eligibility times subject to background processing.
Signing out, deleting an association, clearing app data or uninstalling does not cancel Google Play automatic renewal. Manage or cancel your subscription at https://play.google.com/store/account/subscriptions. Deletion does not delete your Google account or Google's transaction records. An explicit later Restore purchases action with the same account can associate an eligible purchase again. Local mixes and preferences can be removed in the app or by clearing app data. You may contact us for access, correction, deletion or privacy questions; we may request proportionate identity verification. Do not email passwords, full payment details, purchase tokens or Google ID tokens.
6. This website and Google Analytics
The policy website is hosted on Google Sites and has been configured with Google Analytics for website visits. This is separate from the Android app and does not add app analytics. Depending on the browser and website settings, Google Sites or Analytics may process cookies or similar identifiers, page views, interactions, browser/device information, language, referring pages, approximate region and network information. Google's service settings and policies govern its retention and processing; data may be processed outside your country. Manage cookies through your browser or use https://tools.google.com/dlpage/gaoptout where supported. Blocking website analytics does not prevent use of Lunara. Google privacy information: https://policies.google.com/privacy.
7. Sharing, support and changes
We do not sell personal information or share it for targeted advertising. Information is disclosed only as necessary to provide the described Google sign-in, payment, hosting and website functions, respond to support requests, protect security or meet legal obligations. Support email contains the information you choose to send and is used to resolve your request. We retain it only as needed for that purpose or applicable obligations. Rights depend on your jurisdiction. No transmission or storage method can be guaranteed completely secure.
Lunara is intended for a general adult audience and is not directed at children. We do not knowingly seek children's personal information. A parent or guardian can contact us about a child's information. We will update this policy when data practices change; material changes will be disclosed in the app before new processing is used. Contact: binarydigitaltechnology@gmail.com.