Your data, your rules.
What you log here is the most private data there is. Here is exactly who sees what, in plain English. Updated 2026-10-22.
You
Everything you log and say. Download it or delete it any time in Account.
Luna's brain: Claude, by Anthropic
What you type to Luna, plus a short summary of your sessions, leak and pain log, check-in scores and safety answers when she answers you.
Never your period dates, pregnancy answers or after-sex log. Under Anthropic's business terms it isn't used to train their AI, and it's never shown to anyone else.
Luna's voice: ElevenLabs
Luna's own words, to turn them into her voice.
Never your words, your log or anything about you.
Stripe (payments, once you pay)
Your email and your card, to take payment.
Never a word of your health data. We never see your card.
Supabase and Vercel (where the app runs, in the US)
They store and serve your account data, locked to your login and encrypted in transit and on disk.
They don't use it for anything else, and they never hold what stays on your phone.
Ad companies, data brokers, analytics trackers
Nothing. There are no ad pixels or trackers in Ignimani.
We never sell or share your data for ads. Ever.
What a subpoena could reach
Since 2025 there is no federal rule protecting reproductive health data in apps like this one, and some states allow lawsuits or investigations over it. So here is the honest version. A court can order us to hand over what is on our servers. It can't make us hand over what we never had.
Only on your phone: we can't hand it over
- Period dates, cycle length and predictions. Optional. Saved in this phone's app storage only. Never sent to us, to Luna or to anyone.
- Pregnancy and “had a baby in the last 6 weeks” answers. They only switch safety holds on and off on this phone. Never sent anywhere.
- Your private log after sex or solo time. Its dates could hint at pregnancy timing, so it never leaves this phone. Luna doesn't see it unless you tell her.
- Your chats with Luna. The conversation is kept on this phone. Each message you send goes to Anthropic once to get her answer; we don't store it.
On our servers: a court could order it
- Email, login and the date you agreed to these terms. Needed to run your account.
- Other safety answers (pelvic pain, bleeding after menopause, a breast lump, a past blood clot) and whether a doctor cleared you. So your holds follow you to a new phone.
- Pelvic floor sessions you finished, your leak and pain log. So your progress follows you. Delete it any time.
- Your desire check-in scores and midlife symptom check-ins (no dates of sex). So you can see your progress over months and Luna can coach you on it.
Two honest limits. Anything on your phone can be read by someone who has your unlocked phone, so use a passcode. And if you type a period date or a pregnancy to Luna in a chat, that message goes to Anthropic to get her answer (we still don't store it). Delete everything in Account wipes your account on our servers and clears this phone's copy too.
Keeping it and deleting it
We keep your data until you delete it. Account → Your data has two buttons: Download everything (every row and file, as one file) and Delete everything (your plan stops, your files and every row of your data are removed right away; the backup copies expire within 7 days). Payment records Stripe must keep by law stay with Stripe.
Your rights
You can see, download, correct or delete your data at any time, wherever you live. We ask your permission before collecting health data, and you can withdraw it by deleting your account.
If the law asks
We hand data over only when a court order or the law forces us to, only what it requires, and we tell you first unless the law forbids it.
If something goes wrong
If your data is ever exposed, we tell you without delay and within 60 days, as the FTC's health-app rule requires, and we say what happened and what we did about it.
Who we are
Ignimani is made by Fifty31 Holdings in the US, for adults 18 and over.