Privacy Policy

Last updated: 23 July 2026
Application: Lunaria
Data controller: Deniz Bedirhan Öksüz
Contact: info@lunariapp.site

This Privacy Policy explains how Lunaria ("Lunaria", "the App", "we", "our", "us") handles your information. Lunaria is an AI-assisted dream journal that records your dreams, generates symbolic interpretations, supports follow-up questions, and can optionally produce AI dream artwork. By using the App you agree to this Policy.

We follow data minimization: we collect only what the App needs, keep most of your data on your device, and route AI requests through our own backend so that third-party providers never receive your Apple ID, device identifiers, or account credentials — only the dream content to be processed.

The App is intended for users aged 16 or older.

Living in Türkiye? This document is the general summary. Under Turkish data-protection law (KVKK) we have additional disclosure duties — please also read the KVKK Aydınlatma Metni.

1. Information we collect

Stored locally on your device

The following is stored on your device (iOS UserDefaults) and is never uploaded to our servers (Lunaria Plus subscribers additionally get an iCloud backup of their dream records — see below):

• Profile you enter at onboarding: name, date of birth, optional time of birth, and an optional "about me" note.
• Dream records: the dream text you type or dictate, the generated interpretation, preview summary, title, optional AI dream image, creation time, mood, dream type, clarity, symbols, follow-up Q&A, and favorite flag.
• Wallet & entitlement state: your free-interpretation counter, credit balance, processed StoreKit transaction IDs, and a cache of your latest subscription status.
• On-device diagnostic events: a lightweight in-app log of actions such as paywall views and purchase taps.

You can permanently erase all of it from Settings → Delete Account. After deletion it cannot be recovered.

iCloud backup (Lunaria Plus only)

If you subscribe to Lunaria Plus, the App backs up your dream records to your own private iCloud (an app-specific container under your Apple ID) so you don't lose your journal and can restore it on a new device.

• The backup lives in your iCloud storage, under your Apple ID. We — the developer — cannot read it: it is never sent to, stored on, or accessible by our backend.
• AI dream images are excluded from the backup; only your text-based dream data is included.
• Apple keeps the backup in sync across devices signed into the same Apple ID.
• It runs only while you have an active Plus subscription and are signed into iCloud. Free users' data stays only on the device and is never sent to iCloud.
• When you delete your account, the App also makes a best-effort deletion of this backup file. You can additionally remove it at any time from iOS Settings → [your name] → iCloud → Manage Account Storage.

Voice input (temporary)

If you dictate a dream, the App records a temporary audio file on your device, sends it over HTTPS to our backend, which forwards it to a speech-to-text provider only to obtain the transcript. The audio file is deleted from your device as soon as transcription finishes, and no copy is kept on our backend.

Subscriptions and credits

Subscriptions and credit packs are processed by Apple's StoreKit. We never see your Apple ID, payment method, or billing address — only the transaction identifiers and entitlement state StoreKit returns on your device.

2. No tracking, no ads, no analytics SDKs

Lunaria contains no third-party analytics, attribution, or advertising SDKs. We do not use AppsFlyer, Firebase, or similar tools. We do not use the Advertising Identifier (IDFA), we do not show the App Tracking Transparency prompt, and we show no advertising. The diagnostic events in §1 never leave your device.

3. How AI interpretation works

Before your first AI interpretation, the App shows a notice explaining that your dream text will be shared with third-party AI providers, and asks for your consent. Your dream text is not sent anywhere until you agree.

To produce a result, your dream text (and any optional profile context you chose to add) is sent through our backend to:

• OpenAI — for interpretation, voice transcription, summaries, and titles.
• Google (Gemini API) — only when you choose to generate a dream image, for that single image prompt.

These providers receive only the content of that request; your name, identifiers, and location are never included. See https://openai.com/policies/privacy-policy, https://openai.com/policies/api-data-usage-policies, and https://ai.google.dev/gemini-api/terms. Under OpenAI's published API policy, API content is retained for a limited period for abuse monitoring and is not used to train their models; refer to each provider for current details.

4. Our backend and what it stores

Our backend exists so that third-party API keys never live on your device. It:

• receives your dream/voice request over HTTPS, forwards it to the appropriate provider, and returns the response;
• does not store your dreams, interpretations, or generated images;
• keeps a minimal account record — an identifier associated with your Sign in with Apple, plus your free-usage quota timers and last-known subscription status — used only to run your account and the free-quota system;
• applies basic per-user and per-IP rate limiting to prevent abuse;
• logs only operational metadata (timestamps, response codes, error categories), retained for 90 days. These logs do not contain your dream content.

Deleting your account removes this server-side account record.

5. Who we share information with

We share information only as needed to run the App, with providers required to protect it:

• Apple — Sign in with Apple, App Store payments and subscriptions. https://www.apple.com/legal/privacy/
• OpenAI — dream interpretation, transcription, summaries. https://openai.com/policies/privacy-policy
• Google — AI image generation (Gemini API). https://ai.google.dev/gemini-api/terms

We do not sell your personal information, we do not share dream content with advertisers, and we use no data brokers. We may disclose information if required by law or to protect our rights, and in connection with a business transfer.

6. International data transfers

Our providers (OpenAI, Google) and backend may process data outside your country of residence, in particular in the United States. By using the App you consent to this transfer. Where applicable, transfers rely on Standard Contractual Clauses or equivalent mechanisms. If you live in Türkiye, see the KVKK Aydınlatma Metni for the KVKK Article 9 cross-border transfer disclosure and consent.

7. Retention and deletion

You can delete your dream journal or your entire account at any time from within the App, or email info@lunariapp.site to request deletion.

8. Your rights and choices

You can:

• Review the data the App holds — most of it is local, visible in the Profile screen and your dream history.
• Correct your profile from the Profile screen.
• Delete all device data via Settings → Delete Account (this does not cancel an active Apple subscription — manage that in Settings → Apple ID → Subscriptions).
• Remove your Lunaria Plus iCloud backup — deleting your account best-effort removes it, and you can also remove it yourself in iOS Settings → [your name] → iCloud → Manage Account Storage.
• Withdraw consent to AI processing by simply not requesting interpretations, using the App as a private journal with no third-party data flow.
• Contact info@lunariapp.site for access, correction, or deletion requests.

If you live in Türkiye, your KVKK Article 11 rights are listed in the KVKK Aydınlatma Metni.

9. Security

All backend communication uses HTTPS. On-device data is protected by iOS's app sandbox and device encryption (when a device passcode is set). We do not store passwords, payment data, or biometric data.

10. Children

The App is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has used the App, contact us and we will act accordingly.

11. AI-generated content disclaimer

Dream interpretations, follow-up answers, and dream images are produced by third-party AI models. They are reflective, symbolic, and entertainment-oriented — not medical, psychological, legal, financial, or spiritual advice. Do not act on AI output for decisions affecting your health, safety, finances, or legal situation without consulting a qualified professional.

12. Changes

We may update this Policy. The "Last updated" date reflects the latest revision. If we make material changes that require it, the App will surface the updated Policy and ask for your consent again before continuing with AI features.

13. Contact

• Data controller: Deniz Bedirhan Öksüz
• Email: info@lunariapp.site

If you live in Türkiye, see also the KVKK Aydınlatma Metni and your rights under KVKK Article 11.