Your data.
How Luna protects your data, explained honestly.
Hetzner Cloud (EU) · self-hostedYour journal is a vault.
What you log — period, symptoms, mood, notes — is encrypted right on your device (AES-256) before it goes anywhere. All that reaches our servers is unreadable gibberish we cannot read.
Forget your password, and by default we can help you back in. If you'd rather we couldn't, you switch on Max-Privacy mode. Then only your device holds the key, and not even we can reach your entries.
And Sofía, the AI? A deliberately anonymous conversation.
For Sofía to give you tips, she needs to know something about your phase, but not who you are. We ask her anonymously, in essence: “Tips for someone in the second half of their cycle.” Your name, your email, your journal: she never receives them.
This is processed on EU-hosted AI, and it is not stored.
In the EU. Without trading in you.
Core infrastructure in the European Union, self-hosted on Hetzner. No data sales, no ad tracking, no profiling. What you log in Luna stays with you.
Where your data really is.
- On your devicePeriod, symptoms, mood, journal: in plain text, only for you.
- On our serversv2:8Fq3…aZ9k·b7X2…Q1mOnly gibberish (AES-256) we cannot read.
- What Sofía (AI) sees“2nd half of the cycle”, age group; no name, no ID.
And you don't have to just take our word for it.
Independent tracker report: Exodus Privacy: result: 1 tracker (Sentry, crash reporting), no advertising SDK. Every claim with its source: the Luna fact sheet. · Last updated: July 30, 2026
Common questions
Can Luna read my entries?
No. What you log is encrypted on your device (AES-256) before it syncs; our servers only hold unreadable ciphertext. By default we can help you back into your account if you forget your password; in Maximum Privacy mode only your device holds the key. Then even we cannot help.
Where is my data stored?
On EU servers: self-hosted on Hetzner Cloud. No US cloud providers in the core data chain.
What does the AI (Sofía) see?
Only an anonymous question like “tips for someone in the second half of their cycle” plus an age group; never your name, email or journal. Processed on EU-hosted AI and not stored.
How can I verify this?
Through the independent Exodus Privacy report (1 tracker: Sentry) and the Luna fact sheet, where every claim comes with its source.