1. Who controls your data
This Policy describes how Luna handles the personal data you entrust to us when using the app. The data controller is GLD Solutions, CNPJ 55.040.070/0001-65, based in Recife, Pernambuco, Brazil. To talk to us about privacy, write to suporte.gldsolutions@gmail.com.
2. What data we collect
We collect only the information strictly necessary to provide the service: • From your account: name, email, Apple or Google identifier (in case of social login), language, and device time zone. • About your baby: name (which you choose to record), date of birth, and sleep profile (night wakings, main challenge, age). • About the routine: sleep records and, on the Pro Plan, records of feedings, diapers, medications, solids, weight, and other activities you choose to track. • About the subscription: transaction data processed by Apple or Google, without ever accessing credit card data (that stays only with the store). • Technical: anonymous device identifier, app version, operating system, and error logs to keep the service running.
3. What we use the data for
We use the data to (a) provide and personalize the service (calculate sleep windows, generate alerts and reports for your baby), (b) process payments and keep your subscription active, (c) provide support when you need it, (d) improve the app based on aggregated and anonymous usage, and (e) comply with legal obligations.
4. Legal basis (LGPD)
We process your data based on the performance of the contract between you and GLD Solutions when you accept our terms, on your consent (when applicable), on our legitimate interest in maintaining and improving the service, and on compliance with legal and regulatory obligations. LGPD is Brazil's General Data Protection Law (Federal Law 13.709/2018).
5. Who we share with
For Luna to work, some data passes through partners who provide us with infrastructure services. They process data only as instructed by us and follow security standards equivalent to those described here: • Apple and Google: for social login, notifications, and subscription processing. • Supabase: storage of your account data and your baby's records on cloud servers. • RevenueCat: subscription and entitlement management (knowing who has active Pro). We do not sell your data or share it with third parties for external marketing purposes.
6. Where data is stored
Part of the infrastructure we use may be located outside Brazil. When that happens, we ensure that the international transfer complies with the requirements of the LGPD (Brazilian General Data Protection Law), including contractual clauses with our partners to preserve the level of protection of your data.
7. How long we keep it
We keep your data while your account is active. If you delete your account or request erasure, we remove personal data within 30 days, except when a legal obligation requires us to retain a minimum record (for example, transaction data for tax purposes for up to 5 years).
8. Your rights as a data subject
The LGPD guarantees that you may, at any time: confirm whether we process your data, access a copy, correct incomplete or outdated information, request anonymization or deletion of unnecessary data, transfer the data to another provider, revoke consent, and object to processing you disagree with. To exercise any of these rights, just write to suporte.gldsolutions@gmail.com.
9. Children
Luna is intended for parents, grandparents, caregivers, and nannies. Whoever uses the app is the adult responsible for the baby, and the records you make relate to that baby's routine. We do not collect personal data directly from children and we do not target advertising at them. If you are a minor, do not use Luna without the consent and supervision of a responsible adult.
10. Security
We adopt technical and administrative measures to protect your data, such as encryption in transit (HTTPS), account-based access control, and storage on servers with recognized security practices. Even so, no system is fully immune to failures. If we identify an incident that significantly affects your data, we will notify Brazil's National Data Protection Authority (ANPD) and you within the time frames required by law.
11. Identifiers and analytics
We may use anonymous device identifiers to understand how the app is used and to detect issues. This data does not allow us to identify you directly. We do not use advertising tracking cookies.
12. Changes to this policy
This policy may be updated as Luna evolves or as required by law. If the change is significant, we'll notify you by email or inside the app before it takes effect.
13. How to contact us
For privacy questions, requests related to your data, or complaints, write to suporte.gldsolutions@gmail.com. You may also reach out to Brazil's National Data Protection Authority (ANPD) at gov.br/anpd if you find it necessary.