Luna ("Luna," "the App," "we," "us," "our") is developed and operated by Paradigm Shift Apps, based in Singapore. This Policy covers Luna and, where relevant, our other products.
By downloading or using Luna, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
1. Information we collect
Account information. Your email address and authentication credentials, handled through our backend provider, Supabase. Passwords are hashed and stored securely by Supabase; we never see them in plain text.
Sleep and wellness data. Bedtime and wake times, alarm settings, sleep logs, and any task, log, or journal-style entries you create in the App, along with the AI-generated check-ins and weekly reflections the App produces for you.
Photo verification ("Face check" and "Room check")
Luna's alarm can be set to require a Face check or a Room check before it will turn off. When you use either, your device's front-facing camera captures a photo. That photo is encoded and sent from your device to our backend — a Supabase Edge Function — which forwards it to Anthropic's Claude API for analysis. The result Claude returns is what allows the alarm to be dismissed.
We want to be explicit about what this means: the image leaves your device. Luna performs no on-device face detection or image analysis. The photo is transmitted off your phone to our backend and on to a third-party AI provider every time you complete a Face check or Room check.
We do not store these images. The photo is never written to our database and is never saved to a storage bucket — it exists only for the duration of the request that verifies it. The only thing our backend records is a rate-limiting counter row containing your user ID, the name of the function that was called, and a timestamp. That row contains no image data. The photo file itself remains in the App's local cache on your own device, where you can clear it by clearing the App's data or uninstalling the App.
Journal entries and sleep data sent for AI coaching
To generate your check-ins and weekly reflections, the text of your journal entries and your sleep data are sent to Anthropic's Claude API through the same backend path. The content you write in Luna — including personal reflections you may consider sensitive — is therefore processed by a third-party AI provider in order to produce the coaching content the App shows you.
Usage and device data. General app usage information used to maintain and troubleshoot the service.
What we don't collect. Luna does not access your precise location, contacts, or microphone.
2. How we use your information
- To provide core functionality: sleep tracking, alarms, tasks, and Unwind sounds
- To generate AI-powered check-ins and weekly reflections from your journal entries and sleep data, using Anthropic's Claude API
- To analyze Face check and Room check photos, using Anthropic's Claude API, solely to decide whether your alarm can be dismissed
- To authenticate your account and support password reset, via Supabase
- To maintain, secure, and improve the App
We do not sell your personal information, and we do not use your data for third-party advertising.
3. Third-party service providers
Luna relies on the following processors to operate:
- Supabase — authentication, database, and secure storage of your account and app data
- Anthropic (Claude API) — receives and processes (a) the text of your journal entries and sleep data, to generate your check-ins and reflections, and (b) your Face check and Room check photos, to verify your alarm dismissal
- Superwall — powers our subscription paywall and manages purchases. Superwall receives a user identifier, your first name, and your age range. It does not receive health or sleep data, journal content, or photos.
Anthropic is an independent company, not part of Paradigm Shift Apps. Content we send to the Claude API is handled by Anthropic under its own terms and privacy policy for API customers, not under this Policy — see Anthropic's Privacy Policy and Commercial Terms of Service. We do not control Anthropic's infrastructure, and their handling of this data is governed by those terms.
These providers may process or store data on servers located outside your home country. Because Luna is developed in Singapore and used primarily by people in the United States, your information may be transferred to and processed in Singapore, the United States, or other countries where our providers operate.
4. Data retention
We retain your account, sleep, and journal data for as long as your account stays active, or as needed to provide the service. You can request deletion of your account and associated data at any time — see Section 6.
Face check and Room check photos are not retained by us at all. They are not written to our database or to any storage bucket; they are processed in-flight and discarded. What our backend does retain for these events is a rate-limiting record — your user ID, the function name, and a timestamp — which we keep to prevent abuse of the service. Copies of the photos may remain in the App's local cache on your device until you clear the App's data or uninstall it.
5. Data security
- Session tokens are stored using device-level secure storage, not plain local storage
- Data in transit is encrypted (HTTPS/TLS)
- Our backend functions enforce rate limiting, POST-only request handling, and schema validation
See our Security page for further detail.
6. Your rights and choices
You can delete your account and all associated data directly in the App: tap the gear icon on the Sleep tab, scroll to the bottom, and choose Delete my account. You can also access, correct, or request deletion of your data at any time by emailing suria@paradigmshiftapp.com.
Depending on where you live, you may have additional rights. For example, California residents have rights under the CCPA/CPRA to know, delete, and correct their personal information, and to opt out of "sale or sharing" of data (we do not sell or share your data with third parties for advertising).
7. Children's privacy
Luna is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.
8. International users
Luna is developed in Singapore and made available to users in the United States and elsewhere. By using Luna, you consent to your information being processed and stored as described in this Policy, which may take place outside your country of residence.
9. Changes to this policy
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and where the change is material, we'll provide additional notice in the App.
10. Contact us
Paradigm Shift Apps
Email: suria@paradigmshiftapp.com
Website: paradigmshiftapp.com