Privacy Policy

Last updated: 20 August 2026

The short version

  • Lua has no account and no Lua server for your health logs. What you track stays on your phone.
  • We do not use advertising, crash reporters, or health-data analytics.
  • We never sell, share, or rent your health information. We do not have it.
  • If you buy Lua+, Apple processes the payment. RevenueCat sees purchase receipts so the app can unlock Lua+, not your cycle logs.
  • You can permanently delete everything from inside the app at any time.
  • This website is hosted by GitHub Pages. It uses cookieless page-view analytics and does not run advertising.

This summary is here to help you. The sections below are the full policy and are what legally applies.

1. Who we are

Lua is made by Meet Lua LLC, a limited liability company registered in Delaware, United States ("Lua", "we", "us").

For anything about privacy, write to hello@meetlua.com. A human reads it.

Meet Lua LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713
United States

2. The most important thing to understand

Lua is an offline health tracker. It has no Lua backend, no Lua database, and no cloud sync of what you log. Everything you type into Lua is written to private storage on your own device and stays there.

This means we never receive your health information. We cannot read it, back it up, restore it, subpoena-proof it, sell it, or hand it to anyone, because it never reaches us. That is a deliberate design decision, not a policy promise we could quietly change.

Purchases are the exception to "nothing ever leaves the phone." If you buy Lua+, Apple and a purchase-validation service need enough information to charge you and to unlock the paid features. That is described in section 11. It does not include your period, sex, contraception, or pregnancy logs.

3. What Lua stores on your device

Depending on what you choose to use, Lua may store the following on your phone:

  • About you: the first name you enter, your goals, whether you are avoiding or trying for pregnancy, and your due date if you are pregnant.
  • Bleeding: dates, flow and intensity, spotting, clots, cramps, unexpected bleeding, and your notes.
  • Cycle: period start and end dates and cycle history.
  • Symptoms and wellbeing: symptoms such as cramps, bloating, headaches, or nausea, plus mood, energy, and free-text notes.
  • Sex: dates, whether it was with your partner or someone else, a name if you enter one, duration, a rating, and your notes.
  • Contraception: your method (pill, patch, ring, injection, IUD, or implant), its schedule and dates, and whether you took, missed, or were late with a dose or change.
  • Pregnancy: pregnancy mode dates, due date, and pregnancy-related symptoms.
  • App settings: your reminder preferences and whether the Face ID lock is on.

Lua does not ask for your email address, phone number, home address, date of birth, or location, and it has no access to your camera, photos, microphone, or contacts.

4. How that data is protected

Your Lua data is stored in the app's private storage area, which other apps cannot read. It is protected by your device's own encryption, which is active when you have a device passcode set. We want to be precise here: Lua does not add its own layer of encryption on top. It relies on the operating system's device encryption.

Two consequences worth knowing:

  • If you back up your phone, your Lua data is included in that backup, and how it is protected then is governed by Apple's or Google's backup settings, not by us.
  • Someone with your unlocked phone may be able to open Lua. The optional Face ID lock, described below, exists for exactly this reason.

5. What we do not do

To be unambiguous, Lua's health tracking contains:

  • no Lua accounts, logins, or email sign-ups;
  • no advertising and no advertising identifiers;
  • no third-party marketing, data brokers, or data sales;
  • no cloud sync or remote backup of your health data;
  • no crash or error reporting services;
  • no health-usage analytics or telemetry of what you log.

Lua+ purchases are handled separately, as described in section 11. They do not change where your health logs are stored.

6. Apple Health

If you choose to connect Apple Health, Lua exchanges one type of data only: menstrual flow. Nothing else. Your symptoms, notes, sex logs, contraception, and pregnancy data are never written to Apple Health.

  • Reading: Lua can import up to the last 12 months of period entries so you do not have to retype your history. It only fills in days you have not already logged in Lua.
  • Writing: Lua can save the periods you log in Lua back to Apple Health.

This is off by default and entirely optional. You have to turn it on, grant permission in the iOS system prompt, and you can switch importing and exporting on or off independently in Lua's settings.

Apple Health is Apple's storage, not ours. If you have iCloud Health sync enabled, Apple may sync it under your own iCloud settings, which are outside our control. To revoke Lua's access completely, go to iOS Settings → Health → Data Access & Devices → Lua.

7. On-device Apple Intelligence

On recent iPhones that support Apple Intelligence, Lua uses Apple's on-device language model to phrase one insight sentence more naturally. This runs entirely on your phone. Nothing is sent to Apple's servers, to us, or to any AI provider over the internet.

The model is also given very little. It receives only a short list of general, already-summarised values, such as whether your cycles look regular, roughly when your next period is expected, and your recent mood trend. It is never given your name, your notes, your sex logs, your contraception details, or your raw entries.

8. Reminders and notifications

Lua's reminders are scheduled locally by your phone. There are no push servers, no push tokens, and no message ever travels over the internet to reach you. If your phone is in airplane mode, your reminders still work.

Reminder text is intentionally discreet so it does not reveal sensitive details on a lock screen.

9. The Face ID lock

You can turn on a Face ID or Touch ID lock so Lua asks for your face or fingerprint each time you open it. If biometrics fail, iOS offers your device passcode as its own fallback. That check is performed by the operating system: Lua never sees, receives, or stores your face data, fingerprint, or passcode.

This lock is a gate on the screen. It is not additional encryption of the stored data, and we would rather tell you that than imply more protection than exists.

10. Deleting your data

You are in control, directly. In Settings → Delete All Data, Lua permanently erases everything it has stored: your profile, all logs and history, your settings, and all scheduled reminders. There is also a discreet shortcut that works from any screen, including the lock screen, if you ever need to erase quickly: tap the top-left corner of the screen seven times within three seconds.

Deletion is immediate and cannot be undone. Because we hold no copy, we cannot recover anything for you afterwards.

One exception to flag: period entries that Lua previously wrote to Apple Health are left in Apple Health, because only you can remove data from your own Health app. Do that from iOS Settings → Health → Data Access & Devices → Lua.

Deleting the app from your phone also removes its stored data.

11. Purchases, Apple, and RevenueCat

Lua is distributed through the App Store. When you download the app or buy Lua+, Apple processes that as its own business, under Apple's Privacy Policy. This can include your Apple Account details, download and purchase records, and, if you have agreed to share them with developers, aggregate usage statistics and crash logs.

To confirm whether Lua+ is active (monthly or yearly), Lua uses RevenueCat, a purchase-validation service. RevenueCat acts as our processor. It can receive:

  • an anonymous app user identifier created on the device (Lua does not send your name or email to RevenueCat);
  • Apple receipt / transaction information needed to know whether you paid, restored, or cancelled;
  • technical details such as device type, operating system, and roughly when the app last checked your entitlement.

RevenueCat does not receive your period, symptom, sex, contraception, or pregnancy logs, or anything you type in Lua. Its own description of end-user data is in RevenueCat's Privacy Policy.

Anything Apple or RevenueCat shows us about the app is about downloads, purchases, and technical performance. It never includes what you logged in Lua.

If you email us, we of course have the contents of your email. Please do not include health details you would rather keep private.

12. This website

meetlua.com is a static site hosted on GitHub Pages. Opening a page necessarily sends ordinary request data (such as IP address and browser type) to GitHub as the host, under GitHub's Privacy Statement.

In production the site loads Pirsch, a cookieless page-view analytics tool. Pirsch is used to understand which pages are visited, not to identify you or to advertise. It does not run in the Lua app.

Our community page is powered by UserJot. If you post there, UserJot processes that content and whatever you choose to give them under their own terms.

The site does not run advertising, and it does not use advertising cookies or tracking pixels.

13. Age

Lua is intended for people aged 16 and over. We do not knowingly direct the app at children under 16, and Lua does not ask for your age. If you are under 16, please do not use Lua.

14. Your privacy rights

Privacy laws such as the EU and UK GDPR, the California Consumer Privacy Act, and US state health-data laws give you rights to access, correct, export, and delete personal information a company holds about you, and to object to it being sold or shared.

For health logs in Lua, the simple answer stays the same: we hold no health information about you to give you, correct, or delete. You hold it directly, on your device, and you can read all of it in the app and erase all of it in one action. We have never sold health information, and we do not use it for targeted advertising or profiling.

If you email us, we process that email in order to reply, and you can ask us to delete the correspondence at any time. If you buy Lua+, Apple holds the payment record, and RevenueCat holds the purchase-validation record described in section 11. You can ask us to pass on a deletion or access request that we are able to make to RevenueCat. Apple purchases are managed in your Apple Account.

If you are in the EU or UK and you believe we have handled your data improperly, you can complain to your national data protection authority, though we would appreciate the chance to fix it first.

15. Changes to this policy

If we change how Lua handles data, we will update this page and the date at the top. If a change is significant, such as introducing a Lua account or syncing health logs off the device, we will say so clearly in the app before it affects you.

16. Contact

Questions, requests, or concerns about privacy are welcome at hello@meetlua.com, or by post at the address below.

Meet Lua LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713
United States