Privacy Policy
Last updated: 2026-08-03
Lunar Log is a dream journal. Dreams are among the most personal things a person can write down — they can touch on your health, your relationships, your fears, and your inner life. We built Lunar Log around that fact, and this policy is written to be read, not skimmed past.
Lunar Log is operated by MB Grikis ir Pušis ("we", "us"), the data controller for the personal data described here. You can reach us at hello@lunarlog.me.
Lunar Log is being prepared for launch. Before public launch, its operation and this data may transfer to a successor company set up for it; if that happens, this policy carries over unchanged and we will update the controller's name here.
The short version
- Local mode keeps everything on your phone. Without an account, your journal never leaves your device and we hold no data about you. - With an account, your journal syncs through our servers so you can restore it and use AI features. It is never sold, never used for advertising, and never used to train AI models. - AI features send the relevant dream content to Google's Gemini API for processing when — and only when — you use them. - You can export everything for free, at any time, and deleting your account permanently deletes all of your data from our servers. - We currently run no analytics and no ad trackers. If we ever add crash reporting or basic usage analytics, we will update this policy first, and your journal content will never be part of it.
Local mode
You can use Lunar Log without creating an account. In local mode your dreams, recordings, and settings are stored only on your device, and we do not receive your journal or any personal data. Cloud sync and AI features are unavailable in local mode because they require a server. You can move from local mode to an account (or back out via export) whenever you like.
What we collect — with an account
Account details. Your email address and, depending on how you sign in, your name as provided by Apple or Google. If you sign up with email and password, the password is stored as a salted hash by our authentication provider — we never see it in plain text.
Profile details you choose to share. Your name, and optional answers about your dreaming habits and goals (for example how often you recall dreams, whether you experience nightmares, what you want from the app, and your preferred interpretation style). These exist to personalize the app and are always optional.
Your journal. Dreams you write or dictate, their dates, titles, emotions, and tags; the people and places you record and their relationships to you; interpretations; your conversations with Luna; and dream images (generated or uploaded). This is the heart of the app and the most sensitive data we hold — see "How we treat sensitive data" below.
Voice recordings. When you use voice capture with transcription, the audio is uploaded, transcribed, and the transcript is returned to your device. We do not keep the audio on our servers after transcription.
Subscription status. Whether you have an active Pro subscription or trial. Payment itself is handled entirely by Apple (or Google on Android) — we never see your payment card details.
Support correspondence. If you email us, we keep the correspondence so we can help you.
What we do not do
- We do not sell or rent your data to anyone. - We do not show ads and do not share data with advertisers or data brokers. - We do not use your journal to train AI models, and our AI provider is contractually restricted from doing so (see below). - We do not currently use analytics or tracking SDKs.
How we treat sensitive data
A dream journal can reveal information about your health, emotional state, relationships, and beliefs. We treat your entire journal — dreams, interpretations, Luna conversations, and profile answers — as sensitive:
- It is processed only to provide the features you use, on the legal basis of performing our contract with you and, for optional profile answers, your consent (which you give by choosing to answer, and withdraw by clearing the answer or deleting your account). - It is never used for advertising, profiling beyond the app's own features, analytics, or model training. - It is included in full in your data export, and deleted in full when you delete your account.
AI features and Google
Pro AI features — transcription, dream enrichment, titles, interpretations, dream images, and Luna — are powered by Google's Gemini API. When you use one of these features, the content needed for it (for example the dream text being interpreted, or the audio being transcribed) is sent to Google for processing and the result is returned to you.
Google processes this content as our processor to provide the service. Under the paid Gemini API terms, Google does not use this content to train its models. Nothing is sent to Google unless you use an AI feature.
Service providers
We use a small number of providers to run Lunar Log. Each processes data only on our instructions and only to provide their service:
- Supabase — database, authentication, and image storage (your synced journal lives here). - Railway — hosts our API server. - Google — Gemini API for AI features, and Google Sign-In if you use it. - Apple — Sign in with Apple if you use it, and all payment processing through the App Store (under Apple's own privacy policy). - RevenueCat — manages subscription status. RevenueCat receives your purchase receipts and an anonymous app user ID, not your journal.
Some of these providers store or process data outside the European Economic Area, including in the United States. Where they do, transfers are covered by recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified).
Retention and deletion
- Your data is kept for as long as your account exists. - Deleting a dream deletes it, its interpretations, and its images. - Deleting your account (Settings → Account) permanently deletes your entire journal, images, profile, chats, and the account itself from our servers. This is immediate and irreversible; residual copies in encrypted backups of our providers expire on their standard schedule. - Voice recordings are not retained after transcription.
Export
You can export your complete journal from Settings at any time — every dream, entity, and image, in open formats (JSON and Markdown). Export is free, works in local mode, requires no subscription, and always will.
Security
Data is encrypted in transit (TLS) and encrypted at rest by our storage providers. Access to production data is restricted to what is needed to operate the service. The app's App Lock (Face ID / passcode) protects the app on your device; biometric data never leaves your device and is handled entirely by the operating system.
No system is perfectly secure. If we ever learn of a breach affecting your personal data, we will notify you and the relevant authority as required by law.
Your rights
If you are in the EEA or UK, the GDPR gives you the right to access, correct, export, delete, and restrict or object to the processing of your personal data, and to withdraw consent at any time. Most of these are built into the app: export and account deletion are self-serve, and profile answers can be edited or cleared in Settings. For anything else, email hello@lunarlog.me and we will respond within a month.
You also have the right to lodge a complaint with your supervisory authority. Ours is the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
Children
Lunar Log is not directed at children. You must be at least 13 years old (or 16 where local law sets a higher age for consenting to data processing) to create an account. We do not knowingly collect data from children below that age; if you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy in a way that matters — new data collected, a new provider, a new purpose — we will update the date above and tell you in the app before the change applies to you. We will never retroactively reduce your rights over data you have already entrusted to us.
Contact
MB Grikis ir Pušis hello@lunarlog.me