Lucky Jet: Fast Period Tracker — Privacy Policy
Effective October 2, 2026 · Version 1.5.0 · Publisher: Lunara Bloom Studio
Medical notice. This is not a medical device. Not for diagnosis. Consult a
qualified healthcare professional for medical concerns. This app is a personal
log, not a clinical tool.
Lucky Jet: Fast Period Tracker is a menstrual cycle diary. Everything you log
stays on your Android device. The app does hold one network permission, used for
notifications and in-app messages only. This page states exactly what leaves the
phone and what never does, in terms you can check.
1. The one sentence that matters
Your cycle data never leaves your device. The internet permission exists solely
so notifications and in-app messages can be delivered; nothing you log is
attached to them.
2. What stays on the device, always
* Every entry is written to a local SQLite database file named bloom.db inside
the app's sandboxed private storage.
* That file is reachable only by this app; the Android OS isolates it from
other installed apps.
* There is no remote copy of your diary. There is no account. There is no
server of ours holding cycle data.
This covers bleeding pattern, basal body temperature, cervical mucus,
mittelschmerz, symptoms, mood, energy, sleep, stress, free-text notes, your
chosen diary mode (own cycle / partner's cycle / wellbeing only), predictions,
and reminder times.
3. Why cycle data is treated as sensitive
* Menstrual data can reveal pregnancy, miscarriage, fertility intent, hormonal
therapy, perimenopause, and contraceptive use.
* In several jurisdictions this category of information has been subpoenaed in
legal proceedings related to reproductive healthcare.
* Our response is structural, not promissory: no code path in the app reads
the diary database and hands it to the network layer. The messaging SDK is
given device and delivery details only, listed in section 4.
4. What is sent off the device, and to whom
Notifications and in-app messages are delivered through OneSignal
(OneSignal, Inc., https://onesignal.com/privacy_policy). When the app opens,
OneSignal receives:
* a push token issued by Google Firebase Cloud Messaging, and a OneSignal
subscription identifier for this installation;
* basic technical details about the device: model, Android version, app
version, system language, time zone;
* the country code of your SIM card, and your phone's language, sent as two
labels ("sim_country", "device_lang") so messages can be shown in a relevant
language and region;
* your IP address, as any network request carries. OneSignal derives an
approximate country from it. We do not receive or store a street-level
location, and the app does not contain OneSignal's location module.
What is never sent: your diary entries, symptoms, temperatures, notes, dates,
predictions, diary mode, or any identifier you could be contacted by. No name,
no email address, no phone number.
Message targeting rules that use anything beyond the two labels above are
evaluated on your phone, not on a server: the app hands OneSignal local
"triggers" for the current session, and they are discarded when the session
ends.
Transport is HTTPS in every case.
5. What the app does not do
* No user account, login, email address or phone number is collected.
* No cloud sync of the diary, no server API for entries, no background upload
of cycle data.
* No product analytics SDK (Firebase Analytics, Mixpanel, Amplitude, Segment:
none of them).
* No advertising SDK, no remarketing pixel, no social-network SDK.
* No advertising ID is read. No device fingerprinting.
* We operate no crash-reporting service of our own. The OneSignal SDK may send
diagnostic and crash reports about its own components to OneSignal.
* Nothing is sold, rented, licensed, or shared with health insurers, data
brokers, fertility-product retailers, or advertising networks.
6. Permissions and their narrow purpose
* INTERNET and ACCESS_NETWORK_STATE — to deliver push notifications and in-app
messages. This is the only reason the app touches the network.
* POST_NOTIFICATIONS — only so reminders and messages can appear. You may deny
it; the diary works unchanged.
* RECEIVE_BOOT_COMPLETED — so your reminders survive a phone restart.
* SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM — to deliver a reminder at the time
you set rather than whenever the system batches alarms.
* WAKE_LOCK, VIBRATE, FOREGROUND_SERVICE — used by the messaging SDK to
deliver a notification reliably.
The app does not request location, contacts, microphone, camera, calendar, SMS,
or phone-state permissions. It reads the SIM's country code, which needs no
permission on Android and reveals no position.
7. Turning messaging off
Settings → Push notifications switches the app's subscription off. After that no
further push is delivered and the device stops being addressable from our
dashboard. In-app messages require no permission and appear only while you have
the app open; they stop as well once the subscription is off.
You can also deny or revoke the notification permission in Android Settings →
Apps → Lucky Jet: Fast Period Tracker → Notifications.
8. Backups and exports
* If your device uses Google's Android Auto-Backup, Android may include the
app's local data file in your own encrypted backup to your Google account.
That channel is operated by Google, not by us; you can disable it in your
device's Backup settings.
* The app offers a manual export to a JSON file that you choose the location
of. The exported JSON is plain text: anyone you give the file to can read it.
* Import reads such a file back. Neither export nor import involves a network.
9. Data retention and deletion
* Diary data lives only on your phone and is destroyed when you uninstall the
app or clear its storage. We cannot delete it for you because we never have
it.
* The delivery data in section 4 is held by OneSignal for the lifetime of the
installation. Uninstalling the app ends delivery. To have the OneSignal
record for your installation erased, write to the address in section 11 and
we will submit the deletion request.
10. Children
The app is not directed at children under thirteen. We collect nothing with
which an age could be verified, and we knowingly collect no information from
anyone in that group.
11. Changes to this policy, and contact
If the data flow changes — even by a single additional field — this page is
updated with a new effective date before the new app version is published.
Earlier versions remain readable at the same URL under a "history" link.
Lunara Bloom Studio
Privacy questions: privacy@lunarabloom.studio
Postal address available on written request to the same address.
Lunara Bloom Studio is an independent two-person project. We do not work with
health insurers, data brokers, fertility-product retailers, or advertising
networks. This is not a medical device. Not for diagnosis. Consult a qualified
healthcare professional for medical concerns.