← Back to Luna

Your data.

How Luna protects your data, explained honestly.

Hetzner Cloud (EU) · self-hosted

Your journal is a vault.

What you log — period, symptoms, mood, notes — is encrypted right on your device (AES-256) before it goes anywhere. Our servers hold it encrypted, apart from a few details for reminders and syncing.

Forget your password, and by default we can help you back in. If you'd rather we couldn't, you switch on Max-Privacy mode. Then only your device holds the key, and not even we can reach your entries.

And Sofía, the AI? What she gets, and what she doesn’t.

For tips, Sofía uses selected information about your phase and health, such as categories, averages or hormone values, but not the name or email address from your account, and not your journal. When you chat with her, she reads your message and the recent conversation word for word, so the chat is not encrypted the way your journal is.

This is processed on AI in the EU (AWS Bedrock). Our servers only pass your requests on and do not store your chat; your chat history stays encrypted on your device.

In the EU. Without trading in you.

Core infrastructure in the European Union, self-hosted on Hetzner. No data sales, no ad tracking, no advertising profiles. What you log in Luna stays with you.

Where your data really is.

And you don't have to just take our word for it.

Independent tracker report: Exodus Privacy: result: 1 tracker (Sentry, crash reporting), no advertising SDK. Every claim with its source: the Luna fact sheet. · Last updated: July 30, 2026

Common questions

Can Luna read my entries?

Your entries are stored on our servers encrypted (AES-256), apart from a few details for reminders and syncing; those details and the number, timing and size of your entries still allow some inferences (see the privacy policy). By default we also keep a backup of your key so we can help you back into your account if you forget your password; in that mode we therefore don’t promise that access by us is technically impossible. In Maximum Privacy mode only your device holds the key; then even we cannot help. What you share with Sofía is processed in readable form (see below).

Where is my data stored?

On EU servers: self-hosted on Hetzner Cloud. Sofía, the optional AI, runs on AWS Bedrock in the EU.

What does the AI (Sofía) see?

Selected health information such as your phase, age group or hormone values and, when you chat, your messages with the recent conversation. Never the name, email address or journal from your account. Processed on AI in the EU; our servers do not store your chat.

How can I verify this?

Through the independent Exodus Privacy report (1 tracker: Sentry) and the Luna fact sheet, where every claim comes with its source.