Privacy Policy

Effective date: April 4, 2026  |  Last updated: September 12, 2026

Luna Wishlist LLC ("Luna Wishlist", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, website at lunawishlist.com, and any other products or services we operate (collectively, the "Services").

Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account registration: When you create an account via Firebase Authentication, we collect your email address and display name (if provided).
• User content: Content you create or upload within our apps, such as goals, notes, study settings, and other app-specific content.
• Study activity: For educational apps such as VocabHack, we collect information about your decks, review sessions, quizzes, streaks, daily goals, mastery, and progress history.
• Subscription and purchase information: If you purchase a premium subscription, we receive confirmation of your purchase status from Apple App Store or Google Play. We do not receive or store your payment card details — all billing is handled by the relevant app store.
• Communications: When you contact us by email or through our website, we collect your name, email address, and message content.
• Support requests: Information you provide when reporting a problem or requesting help.

1.2 Information We Collect Automatically

• Device information: Device type, operating system version, unique device identifiers, mobile network information, and app version.
• Usage data: Features used, pages viewed, time spent in the app, tap/click interactions, session duration, and crash reports.
• Log data: IP address, browser type, referring URLs, and timestamps when you access our website.
• Advertising identifiers: Google Advertising ID (Android) or Identifier for Advertisers / IDFA (iOS), used by Google AdMob to serve and measure ads.
• Analytics data: Aggregate and anonymized usage statistics collected through Firebase Analytics.
• Performance data: Crash logs and performance traces collected through Firebase Crashlytics and Firebase Performance.

1.3 Information from Third Parties

• Google Sign-In: If you authenticate using Google, we receive your name, email address, and profile picture from Google.
• Apple Sign-In: If you authenticate using Apple, we receive a unique identifier and, optionally, your email address from Apple.
• App store subscription status: Apple App Store and Google Play provide us with your subscription status (active, expired, cancelled) so we can unlock or revoke premium features accordingly.

1.4 Health Data (HealthyFuture App)

The HealthyFuture app allows you to enter health and wellness information that may be considered health data. Depending on what you choose to provide, this can include age range, sex, height, weight, lifestyle habits, activity level, sleep patterns, stress indicators, smoking or alcohol habits, and other wellness factors used to generate life expectancy and risk insights.

We collect this health data only to provide the app's core features, such as life expectancy calculation, health risk analysis, progress tracking, and personalized recommendations. We do not sell health data, and we do not use health data for third-party advertising.

Health data you enter is stored in your account within our Firebase infrastructure so it can sync across your devices and be available when you sign in. You can update or delete this data in the app and request account deletion by contacting us at contactus@lunawishlist.com.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide core app functionality.
• Store and sync your content across your devices via Firebase Firestore.
• Provide app-specific features such as educational progress tracking, study recommendations, streaks, and habit tracking.
• Verify and manage your premium subscription status to unlock or restrict premium features.
• For HealthyFuture, process health and wellness inputs to provide life expectancy estimates, risk analysis, and personalized guidance.
• Send transactional emails such as password reset or account activity notices.
• Respond to your support requests and communications.
• Analyze usage patterns to improve features, fix bugs, and enhance performance.
• Serve relevant advertisements through Google AdMob for users on the free tier.
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Comply with applicable legal obligations and enforce our Terms of Service.
• Protect the rights, property, and safety of Luna Wishlist, our users, and the public.

3. Subscriptions and In-App Purchases

Some apps offer an optional premium subscription (monthly or annual) that removes advertisements and unlocks additional features. Subscriptions are processed entirely through Apple App Store or Google Play — we do not collect or store payment card information.

When you purchase, renew, or cancel a subscription, the relevant app store notifies us of your subscription status so we can activate or deactivate premium features on your account. We store only the subscription status and expiry date in Firebase Firestore, not any payment details.

Refunds are subject to the refund policy of the applicable app store. To request a refund, contact Apple App Store or Google Play directly.

4. Advertising

Our apps display advertisements served by Google AdMob. AdMob may collect and use data including advertising identifiers, IP addresses, and usage signals to serve personalized or contextual ads. By using our apps, you consent to receiving advertisements.

For HealthyFuture specifically, health data entered in the app is not provided to AdMob and is not used for ad personalization.

Google's use of advertising data is governed by the Google Privacy Policy and Google AdMob Terms of Service.

You can opt out of personalized advertising on Android via Settings → Google → Ads → Opt out of Ads Personalization, and on iOS via Settings → Privacy & Security → Tracking and by limiting ad tracking.

5. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

Health data entered in HealthyFuture is shared only with service providers that help us operate the app (for example, cloud hosting and database infrastructure) and only for the purposes described in this policy.

• Service providers: Third-party vendors such as Google (Firebase, AdMob) that process data on our behalf under data processing agreements.
• App store platforms: Apple App Store and Google Play receive subscription purchase and status data as part of the in-app purchase flow they operate.
• Legal compliance: When required by law, court order, or government request, or to protect our legal rights.
• Safety: To prevent imminent harm to you, others, or the public.
• Business transfers: If Luna Wishlist is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
• With your consent: Any other sharing will be disclosed to you and only done with your explicit consent.

6. Third-Party Services

Our Services rely on the following third-party platforms, each governed by their own privacy policies:

• Google Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics, Performance) — Firebase Privacy
• Google AdMob — Google Privacy Policy
• Apple App Store / Google Play Store (app distribution and subscription billing) — Subject to their respective privacy policies.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required or permitted to retain it for legal, tax, accounting, compliance, security, or fraud prevention purposes. Crash logs and anonymous analytics data may be retained in aggregate form beyond account deletion.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. Our data is stored in Google Firebase infrastructure, which uses encryption at rest and in transit. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable minimum digital age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at contactus@lunawishlist.com.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at contactus@lunawishlist.com. We will respond within 30 days.

If you have an account in one of our apps, you may also be able to delete your account directly inside the app. For example, VocabHack includes in-app account deletion through the Account screen.

For account and data deletion requests across all Luna Wishlist apps, use: lunawishlist.com/account-deletion/

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a verifiable consumer request, email contactus@lunawishlist.com.

12. International Users

Our Services are operated in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our Services, you consent to such transfer.

If you are in the European Economic Area (EEA), UK, or Switzerland, our legal bases for processing your data include contract performance, legitimate interests, legal obligation, and where applicable, your consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, via in-app notification or email. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contactus@lunawishlist.com
• Company: Luna Wishlist LLC
• Location: Spring, Texas, United States