Privacy Policy
The short version
- Aurava has no account and no login. Your goals, your journal and your practice history are stored on your iPhone.
- When you use a feature that writes something back to you, the text of that intention is sent to Google to generate the response. That is the one time your writing leaves your phone, and section 4 describes it in full.
- Anonymous usage statistics are collected so the app can be improved. Your name, your goals and your journal are never included in them.
- Nothing is sold, nothing is shared with advertisers, and Aurava does not track you across other apps or websites.
- You can delete everything from inside the app at any time.
Who this covers
This policy applies to the Aurava iPhone app and to this website at lunaplum.com. Both are published by Lunaplum, an independent app studio, which is the data controller for the purposes of UK and EU data protection law.
You can reach a person at hello@lunaplum.com.
There is no account
Aurava has no sign up, no login, no password and no user profile on any server. You are never asked for an email address, a phone number or a date of birth. Nothing you enter is tied to a real world identity, because Aurava has no way of knowing one.
What stays on your phone
Aurava stores the following on your device, in Apple's on-device database. It is covered by your iPhone's own encryption and, if you have iCloud Backup switched on, it is included in your device backup in the same way as your other apps.
- The first name you give during setup, and optionally your star sign and how experienced you say you are.
- Your goals, including the category you pick and the specific intention you write for each one.
- Your journal entries, including the text you write, the prompt you were answering, and whether you marked the entry as a receipt.
- Your practice history: which methods you ran, when you completed them, and your streak.
- Your reminder times and which notifications you have switched on.
None of this is uploaded to a Lunaplum server, because there is no Lunaplum server. The only text that ever leaves the device is described in the next section.
What leaves your phone for AI features
Some parts of Aurava write a sentence back to you: a daily affirmation, an insight about a goal you are working on, a message when you return after a gap. To produce those, Aurava sends text to Google.
Which service
Google's Gemini 2.5 Flash-Lite model, reached through Firebase AI Logic. Firebase is operated by Google LLC.
What is sent
- The goal or intention text relevant to the feature, as you wrote it.
- Journal text, where the feature you are using is about something you have written.
- Light context such as the goal's category, how long your streak is, and the first name you entered, where the response is meant to address you by name.
What is not sent
Your full journal is never uploaded. Aurava sends the text a specific feature needs at the moment you use it, and nothing more. There is no background sync and no bulk upload.
Please read this part
Manifestation journals are often about money, relationships, health and family. Please treat anything you type into a feature that generates a response as text that will be processed by a third party company outside your device. If there is something you would rather keep only on your phone, write it in your journal and do not run a generating feature over it.
What happens to it
Google processes the text in order to produce the response and returns it to your phone. Lunaplum does not store your prompts on any server, does not use them to train any model, and does not sell or share them with anyone. Google's own handling of that text is governed by its terms for Firebase and Google Cloud, and by the Google Privacy Policy and the Firebase Privacy and Security page.
If it fails
Every generated line in Aurava has a written fallback behind it. If the request fails, if you are offline, or if the service is unavailable, the app shows text that was written in advance and stays fully usable.
Abuse protection
Firebase App Check is used to confirm that requests are coming from a genuine copy of Aurava rather than from a script. It attests the app and the device, and it does not send anything you have written.
Subscriptions and payments
Aurava offers a paid subscription. Payment is handled entirely by Apple through the App Store. Lunaplum never sees your card number, your billing address or your Apple Account details.
Subscription status is managed using RevenueCat, which sits between the app and Apple's receipts. RevenueCat receives an anonymous identifier it generates for your install, your purchase receipt from Apple, and your country. It does not receive your name, your goals or your journal. See the RevenueCat privacy policy.
Managing or cancelling a subscription is done in your Apple Account settings, because Apple holds the subscription.
Usage statistics
Aurava uses PostHog to understand how the app is actually used, so that confusing parts can be found and fixed. PostHog receives events such as which screen was opened, that a method was completed, or that the paywall was shown, along with an anonymous identifier generated for your install, your app version, and general device type.
The text of your goals, the text of your journal entries and your name are never sent to PostHog. Events are sent to PostHog's United States region. See the PostHog privacy policy.
Notifications
Aurava's reminders are scheduled locally by your iPhone at the times you choose. There is no push server, and no notification content leaves your device. You can turn them off in the app or in iOS Settings.
What Aurava never does
- No advertising, and no advertising networks in the app.
- No selling of personal information, and no sharing with data brokers.
- No tracking of you across other companies' apps or websites, so Aurava does not ask for App Tracking Transparency permission.
- No access to your location, contacts, photos, microphone, camera, calendar or health data. Aurava does not ask for these permissions.
- No advertising identifier is read or used.
Deleting your data
Open Settings inside Aurava and choose Delete Account. That permanently removes every goal, journal entry, session, streak and setting from your device. It cannot be undone, and because the data was only ever on your phone, that is the end of it.
Deleting the app also removes its data from your device. If you have iCloud Backup switched on, a copy may persist in your backups until those backups roll over, which is controlled by Apple in your iOS settings.
Two things are outside that deletion, because they are not held by Lunaplum. Apple keeps its own record of your purchases, under Apple's policies. Anonymous usage events already sent to PostHog are not linked to your identity, so they cannot be traced back to you and picked out. To have those removed as well, email hello@lunaplum.com from the device in question and this will be handled manually.
Your rights
If you are in the United Kingdom or the European Economic Area, you have the right to access, correct, erase, restrict and object to the processing of your personal data, and the right to data portability. In practice, most of these are already in your hands, because your data lives on your own device and the app can erase all of it on demand.
The legal bases used are: performance of a contract, for running the app and its subscription; legitimate interests, for anonymous usage statistics, abuse protection and keeping the app working; and consent, where consent is required, which you can withdraw by turning the relevant feature off.
You have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office.
If you are in California, note that Lunaplum does not sell or share personal information as those terms are defined by the CCPA, and does not use it for cross context behavioural advertising.
To exercise any right, email hello@lunaplum.com.
Children
Aurava is not directed at children. It is not intended for anyone under 13, or under the minimum age of digital consent where you live if that age is higher. Lunaplum does not knowingly collect personal data from children. If you believe a child has used the app and something needs removing, email hello@lunaplum.com.
Where data is processed
Aurava's own data stays on your device, wherever you are. The third parties named above, Google, Apple, RevenueCat and PostHog, process data on servers including in the United States. Where personal data is transferred out of the UK or the EEA, those providers rely on the safeguards set out in their own privacy documentation, including Standard Contractual Clauses.
This website
lunaplum.com is a set of static pages. It sets no cookies, runs no analytics and runs no JavaScript. Its fonts are served from this domain rather than from a font provider, so loading a page here contacts nobody else.
The site is hosted on GitHub Pages, and GitHub records visitor IP addresses in its server logs to deliver the pages and protect against abuse. See the GitHub Privacy Statement.
Changes to this policy
If what Aurava does with data changes, this page changes with it and the date at the top is updated. For a change that materially affects you, notice will be given in the app before it takes effect.