← Back to Moon Planner
Privacy Policy
Effective date: February 23, 2026 · Last updated: February 23, 2026
1. Introduction
Moon Planner ("we," "us," or "our") is a wellness guidance application that combines lunar cycle awareness, menstrual cycle tracking, and habit-building tools to help you plan your days with intention. This Privacy Policy explains how we collect, use, store, and protect your personal information, including sensitive health data.
We are based in Washington State, United States. We take your privacy extremely seriously — especially when it comes to reproductive health data. This policy is designed to comply with the Washington My Health My Data Act, the California Consumer Privacy Act (CCPA), the California Confidentiality of Medical Information Act (CMIA), and Apple's App Store privacy requirements.
By using Moon Planner, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.
2. Data We Collect
We collect only the data you voluntarily provide. We do not collect data from third-party sources or infer data about you. Here is a complete list of the categories of data we collect:
Profile Data
- Your first name (used for personalized greetings)
- Spirituality preference (Grounded, Balanced, or Mystical — used to tailor content tone)
Reproductive Health Data
- Last menstrual period start date
- Typical cycle length
- Cycle phase calculations derived from the above
Mood & Symptom Data
- Daily mood entries (e.g., calm, energized, tired)
- Symptom logs (e.g., cramps, headache, bloating)
Habit Tracking Data
- Habits you create and track
- Daily habit completion status
Device Location
- Your device's approximate GPS coordinates are used solely to calculate accurate moon phase and rise/set times for your location
- Location data is processed on your device and is never stored, transmitted, or logged to any server
Device Information
- Basic device type and operating system version (collected only in the event of a crash report, if you opt in)
- We do not collect device identifiers, advertising IDs, or fingerprinting data
3. How We Use Your Data
We use your data for the following purposes only:
- Personalization: To generate your daily guidance messages, tailored to your cycle phase, moon phase, and preferences
- Cycle tracking: To calculate and display your menstrual cycle phases and predictions
- Moon phase display: To show accurate lunar data for your location
- Habit tracking: To record and display your habit completion over time
- Mood & symptom history: To show you patterns in your entries over time
- App functionality: To sync your data across sessions and provide a seamless experience
We do not use your data for: advertising, marketing, profiling, selling, data brokering, training AI models, behavioral targeting, or any purpose other than providing you the Moon Planner service.
4. Consumer Health Data — Washington State
Under the Washington My Health My Data Act (RCW 19.373), your menstrual cycle data, mood logs, and symptom entries are classified as "consumer health data." We comply with this law as follows:
- Consent: We collect consumer health data only with your explicit, voluntary, opt-in consent. You provide this data by actively entering it into the app. We never collect health data passively or without your knowledge.
- Purpose limitation: Consumer health data is used solely to provide the Moon Planner service as described in this policy. We do not use it for any secondary purpose.
- No sale: We do not sell, share, or otherwise make available your consumer health data to any third party, without exception.
- No geofencing: We do not use geofencing technology around healthcare facilities or use location data to identify consumers seeking health care services.
- Access and deletion: You may request access to or deletion of your consumer health data at any time (see "Your Privacy Rights" below).
- Valid authorization required: We will not collect, share, or sell consumer health data without valid authorization as defined under Washington law.
5. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Confidentiality of Medical Information Act (CMIA) provide additional protections for your data. Under California law, menstrual cycle data is classified as sensitive personal information.
As a California resident, you have the right to:
- Know what personal information we collect about you and how it is used
- Delete your personal information
- Opt out of the sale or sharing of your personal information (we do not sell or share, so there is nothing to opt out of)
- Non-discrimination for exercising your privacy rights
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than providing the Moon Planner service.
6. Data Sharing & Third Parties
We minimize third-party involvement to protect your privacy. Here is a complete list of third-party services that may process your data:
- Supabase (infrastructure provider): Your data is stored in a Supabase-managed PostgreSQL database. Supabase acts as a data processor on our behalf. Data is stored in the us-east-1 region. Supabase's privacy policy is available at supabase.com/privacy.
- Apple (App Store & future HealthKit): Apple processes your app purchase and subscription data. If we integrate Apple HealthKit in the future, this will involve separate, explicit permissions (see Section 9).
- Expo / React Native (app framework): The app is built with Expo. Crash reports, if you opt in, may be processed by Expo's services. No personal health data is included in crash reports.
We do NOT share your data with:
- Advertisers or ad networks
- Analytics platforms (no Google Analytics, no Meta Pixel, no tracking SDKs)
- Data brokers or data aggregators
- Social media platforms
- Law enforcement (unless compelled by valid legal process — see below)
- Any other third party not listed above
Law enforcement requests: We will only disclose user data in response to a valid warrant, subpoena, or court order. We will notify you of such requests unless legally prohibited from doing so. Given that we use anonymous authentication, we may have limited ability to identify specific users.
7. Data Storage & Security
We employ the following measures to protect your data:
- Local storage: Your data is stored on your device using secure, encrypted local storage (AsyncStorage with device-level encryption)
- Cloud storage: A synced copy is stored in Supabase's managed PostgreSQL database in the us-east-1 region (United States)
- Anonymous authentication: You are identified by an anonymous, randomly generated ID. No email, password, phone number, or other identifying credential is required
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
- Encryption at rest: Data stored in Supabase is encrypted at rest using AES-256 encryption
- Row-Level Security (RLS): Supabase enforces row-level security policies, ensuring that only your anonymous session can access your data
- No shared access: There is no admin dashboard or internal tool that allows Moon Planner staff to view individual user health data
8. Your Privacy Rights
Regardless of where you live, you have the following rights regarding your data:
- Access: You can view all data the app has collected about you at any time within the app
- Correction: You can edit your name, cycle dates, and preferences at any time in Settings
- Deletion: You can delete all your data using the "Reset App" button in Settings. This removes data from both your device and our servers
- Data portability: You may request a copy of your data in a machine-readable format by contacting us
- Withdraw consent: You may stop using the app and request deletion of your data at any time
To exercise any of these rights, you can:
We will respond to all data requests within 30 days. We do not charge a fee for processing these requests. We will not discriminate against you for exercising your privacy rights.
9. Data Retention & Deletion
Your data is retained for as long as you use the app. We do not impose a retention schedule — your data remains available to you until you choose to delete it.
When you use the "Reset App" feature in Settings:
- All data is deleted from your device's local storage
- All data associated with your anonymous ID is deleted from our Supabase database
- A new anonymous session is created with no prior data
- This action is permanent and irreversible
If you uninstall the app without using "Reset App," your cloud data will be retained in case you reinstall. You may request deletion of orphaned cloud data by emailing us.
10. Apple HealthKit
Moon Planner may integrate with Apple HealthKit in a future update. If and when this feature is added:
- HealthKit access will require your explicit, separate permission and is entirely optional
- HealthKit data will be used solely to enhance cycle predictions and wellness recommendations within the app
- HealthKit data will never be used for advertising, shared with third parties, or sold
- HealthKit data will never be stored on our servers — it will remain on your device only
- We will comply with all Apple HealthKit guidelines and requirements
11. Push Notifications
Moon Planner may send push notifications, such as your daily morning guidance message. Notifications are:
- Entirely optional — you choose whether to enable them
- Used only for app-related content (your daily guidance, cycle reminders)
- Not used for marketing, advertising, or promotional purposes
- Not used for tracking your engagement or behavior
You can disable notifications at any time in your device's Settings.
12. Location Data
Moon Planner requests access to your device's location for one purpose only: to calculate accurate moon phase, moonrise, and moonset times for your geographic location.
- Location is processed entirely on your device
- Your GPS coordinates are never transmitted to our servers or any third party
- Your location history is never stored, logged, or recorded
- If you deny location permission, the app will use a default location for moon calculations
13. Children's Privacy
Moon Planner is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at moon.wisdom.app@gmail.com and we will promptly delete it.
For users between 13 and 18, we recommend use with parental awareness and guidance.
14. Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will:
- Notify affected users within 30 days of discovering the breach, as required by Washington State law
- Notify the Washington State Attorney General if the breach affects more than 500 Washington residents
- Provide a clear description of the breach, the types of data involved, and the steps we are taking to address it
- Offer guidance on steps you can take to protect yourself
Because we use anonymous authentication, a breach of our database would not expose email addresses, passwords, or other traditional identifying information. However, menstrual cycle data and mood entries could still be considered sensitive, and we treat any unauthorized access with the utmost seriousness.
15. International Users
Moon Planner is operated from the United States. If you use the app from outside the United States, please be aware that your data will be transferred to and stored in the United States (specifically, in Supabase's us-east-1 region).
By using the app, you consent to the transfer of your data to the United States. The United States may not have data protection laws as comprehensive as those in your country of residence. We will, however, apply the protections described in this policy to all user data regardless of your location.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes:
- The "Last updated" date at the top of this page will be revised
- For material changes (especially those affecting how health data is handled), we will provide notice through the app
- Continued use of the app after changes are posted constitutes acceptance of the updated policy
We encourage you to review this policy periodically.
17. Contact Information
If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about your privacy, please contact us:
We aim to respond to all privacy inquiries within 30 days.