Privacy Policy

Effective date: April 4, 2026  |  Last updated: April 6, 2026

Luna Wishlist LLC ("Luna Wishlist", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, website at lunawishlist.com, and any other products or services we operate (collectively, the "Services").

Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account registration: When you create an account via Firebase Authentication, we collect your email address and display name (if provided).
• User content: Content you create or upload within our apps, such as goals, notes, study settings, and other app-specific content.
• Study activity: For educational apps such as VocabHack, we collect information about your decks, review sessions, quizzes, streaks, daily goals, mastery, and progress history.
• Rewards activity: If an app offers a rewards program, we collect your points balance, reward eligibility status, redemption history, and information you provide or confirm to receive rewards.
• Communications: When you contact us by email or through our website, we collect your name, email address, and message content.
• Support requests: Information you provide when reporting a problem or requesting help.

1.2 Information We Collect Automatically

• Device information: Device type, operating system version, unique device identifiers, mobile network information, and app version.
• Usage data: Features used, pages viewed, time spent in the app, tap/click interactions, session duration, and crash reports.
• Log data: IP address, browser type, referring URLs, and timestamps when you access our website.
• Advertising identifiers: Google Advertising ID (Android) or Identifier for Advertisers / IDFA (iOS), used by Google AdMob to serve and measure ads.
• Analytics data: Aggregate and anonymized usage statistics collected through Firebase Analytics.
• Performance data: Crash logs and performance traces collected through Firebase Crashlytics and Firebase Performance.

1.3 Information from Third Parties

• Google Sign-In: If you authenticate using Google, we receive your name, email address, and profile picture from Google.
• Apple Sign-In: If you authenticate using Apple, we receive a unique identifier and, optionally, your email address from Apple.
• Reward fulfillment providers: If you redeem a reward through an app such as VocabHack, we may receive fulfillment status, delivery status, and related transaction metadata from Tremendous or another reward provider.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide core app functionality.
• Store and sync your content across your devices via Firebase Firestore.
• Provide app-specific features such as educational progress tracking, study recommendations, streaks, and rewards balances.
• Send transactional emails such as password reset or account activity notices.
• Respond to your support requests and communications.
• Analyze usage patterns to improve features, fix bugs, and enhance performance.
• Serve relevant advertisements through Google AdMob, which is our primary revenue source.
• Administer app reward programs, verify redemption eligibility, review requests, detect abuse, and fulfill approved rewards.
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Comply with applicable legal obligations and enforce our Terms of Service.
• Protect the rights, property, and safety of Luna Wishlist, our users, and the public.

3. App-Specific Rewards and Activity Data

3.1 VocabHack

VocabHack is an educational app for Digital SAT vocabulary study. If you use VocabHack, we may process your study activity, including review sessions, quizzes, streaks, mastery progress, and other learning signals, in order to provide the app's educational features.

VocabHack also offers a rewards feature for eligible users. In connection with that feature, we may process your points balance, redemption history, region eligibility, account age, verified email status, and anti-fraud signals needed to review reward requests. Reward redemption is currently available only to eligible users in the United States.

Points are earned through eligible in-app educational activity only. Points are not sold. Reward requests may be reviewed, delayed, denied, reversed, or cancelled where we detect abuse, fraud, ineligibility, policy violations, or other program integrity concerns.

3.2 HealthyFuture

HealthyFuture is a healthy life habit promotion app. If you use HealthyFuture, we may process your habit tracking activity, including daily check-ins, habit streaks, completion history, wellness goals, and other activity signals, in order to provide the app's habit-tracking features.

HealthyFuture also offers a rewards feature for eligible users. In connection with that feature, we may process your points balance, redemption history, region eligibility, account age, verified contact information, and anti-fraud signals needed to review reward requests. Reward redemption is currently available only to eligible users in the United States.

Points are earned through eligible in-app habit activity only. Points are not sold. Reward requests may be reviewed, delayed, denied, reversed, or cancelled where we detect abuse, fraud, ineligibility, policy violations, or other program integrity concerns.

3.3 RichHabits

RichHabits is a wealthy life habit promotion app. If you use RichHabits, we may process your habit tracking activity, including daily check-ins, habit streaks, completion history, financial wellness goals, and other activity signals, in order to provide the app's habit-tracking features.

RichHabits also offers a rewards feature for eligible users. In connection with that feature, we may process your points balance, redemption history, region eligibility, account age, verified contact information, and anti-fraud signals needed to review reward requests. Reward redemption is currently available only to eligible users in the United States.

Points are earned through eligible in-app habit activity only. Points are not sold. Reward requests may be reviewed, delayed, denied, reversed, or cancelled where we detect abuse, fraud, ineligibility, policy violations, or other program integrity concerns.

4. Advertising

Our apps display advertisements served by Google AdMob. AdMob may collect and use data including advertising identifiers, IP addresses, and usage signals to serve personalized or contextual ads. By using our apps, you consent to receiving advertisements.

Google's use of advertising data is governed by the Google Privacy Policy and Google AdMob Terms of Service.

You can opt out of personalized advertising on Android via Settings → Google → Ads → Opt out of Ads Personalization, and on iOS via Settings → Privacy & Security → Tracking and by limiting ad tracking.

5. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: Third-party vendors such as Google (Firebase, AdMob) that process data on our behalf under data processing agreements.
• Reward fulfillment: When you redeem a reward, we may share the information reasonably necessary to review, process, and fulfill the reward with Tremendous or another reward fulfillment provider.
• Legal compliance: When required by law, court order, or government request, or to protect our legal rights.
• Safety: To prevent imminent harm to you, others, or the public.
• Business transfers: If Luna Wishlist is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
• With your consent: Any other sharing will be disclosed to you and only done with your explicit consent.

6. Third-Party Services

Our Services rely on the following third-party platforms, each governed by their own privacy policies:

• Google Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics, Performance) — Firebase Privacy
• Google AdMob — Google Privacy Policy
• Tremendous (reward fulfillment for eligible reward redemptions) — Tremendous Privacy Policy
• Apple App Store / Google Play Store — Subject to their respective privacy policies.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required or permitted to retain it for legal, tax, accounting, compliance, security, or fraud prevention purposes.

For apps with rewards features, we may retain limited records relating to redemptions, fraud prevention, compliance, disputes, or financial reconciliation for as long as reasonably necessary under applicable law or business recordkeeping obligations. Crash logs and anonymous analytics data may be retained in aggregate form beyond account deletion.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. Our data is stored in Google Firebase infrastructure, which uses encryption at rest and in transit. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable minimum digital age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at contactus@lunawishlist.com.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at contactus@lunawishlist.com. We will respond within 30 days.

If you have an account in one of our apps, you may also be able to delete your account directly inside the app. For example, VocabHack includes in-app account deletion through the Account screen.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a verifiable consumer request, email contactus@lunawishlist.com.

12. International Users

Our Services are operated in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our Services, you consent to such transfer.

If you are in the European Economic Area (EEA), UK, or Switzerland, our legal bases for processing your data include contract performance, legitimate interests, legal obligation, and where applicable, your consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, via in-app notification or email. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contactus@lunawishlist.com
• Company: Luna Wishlist LLC
• Location: Spring, Texas, United States