Privacy-first cycle tracking. Made in EU.
Hetzner Cloud (EU) · self-hostedLuna grows with you: from your menstrual cycle through pregnancy, postpartum and breastfeeding, into perimenopause and menopause. One private companion for every life stage, not just the fertile years.
Your cycle, journal, and profile fields are encrypted with AES-256-GCM on your device before they reach our database: the key is derived from your password (PBKDF2). We store only ciphertext. In Max-Privacy mode only your own recovery key can unlock it; in standard mode password recovery is available.
AI personalisation — the Sofía nutrition coach, daily tips, recipe suggestions — runs on EU-hosted AI (Anthropic Claude, Frankfurt); data is anonymised first. Recipe images are generated via OpenAI (USA, EU Standard Contractual Clauses) using English search terms only, no health data, no identity.
Core infrastructure in the European Union, self-hosted on Hetzner. No advertising, no trackers, no data sales. No surveillance.
Luna’s core services are self-hosted on Hetzner Cloud servers in the EU, no US cloud providers in the data chain. What you log is encrypted on your device (AES-256) before it syncs, so the servers only hold unreadable ciphertext. Details on the security page.
No. Luna has no ads, no ad SDKs, no advertising ID and sells no data: it is funded by subscriptions only. This is independently verifiable: the Exodus Privacy report for Luna shows one tracker (Sentry, crash reporting) and no advertising or analytics SDKs. Every claim with its source: the Luna fact sheet.
Yes. Luna covers full cycle tracking plus pregnancy, breastfeeding and menopause, with EU hosting, on-device encryption and no ad tracking. Whether it fits you depends on what you need: sync and doctor-ready PDF reports are included; the source code is not public (yet). See the detailed comparison with Flo, Clue, drip and Euki.
drip and Euki are open source and keep everything on one device. If that minimalism covers your needs, they are a good choice. Luna is for people who also want sync across devices, doctor-ready PDF reports and support across life phases, while data stays EU-hosted and encrypted on the device. In Maximum Privacy mode, only your device holds the key.
Yes. Luna Plus includes a fertility-treatment companion: keep track of clinic appointments and medication, and take your treatment cycles to your doctor as a PDF. Luna documents and reminds. It does not give medical advice, make diagnoses or calculate medical prognoses.
Sofía, the optional AI coach, is asked anonymously: in essence “tips for someone in the second half of their cycle”. She never receives your name, email or journal; requests are processed on EU-hosted AI and are not stored. She is not zero-knowledge, though. If you want maximum restraint, simply don’t use her; the rest of the app works without her.
Yes. Syncing between devices needs an account; local-only apps without accounts have a structural advantage there, and we say that openly. You can export your data and delete your account with all entries at any time.