Lunaya
Privacy Policy
Last updated: 5 October 2026
Lunaya is a Vietnamese lunar calendar app. This page states what the app collects, what it does not, and how you control your data.
Personal data stays on your device when signed out
The daily sheet, day details, events, reminders, reference tools and family tree are processed on your device. When signed out, the events, notes and family tree you enter are not sent to our server. Signing in is optional, to back up and sync this data across devices. Other network requests are described below.
What is collected when you sign in
If you choose to sign in with Google or Apple, the following is stored on our server:
| Data | Why |
|---|---|
| Email address, display name, profile picture URL | To recognise your account across devices |
| Firebase account identifier | Authentication and access control for synced data |
| Events you create — title, notes, location, time, repeat rule | Backup and sync |
| Notes you write on individual days | Backup and sync |
| Custom event categories — name and colour | Backup and sync |
| Family tree entries — names, birth dates, death dates, notes and family relationships | Backup and sync |
Firebase Authentication manages account information; synced content is held in Google Cloud Firestore and transmitted over an encrypted connection (HTTPS). Synced content is readable only by your own account — the server's security rules are bound to your user ID.
Your profile picture is never copied to our server: the app keeps only the link Google provides and fetches the image straight from there to show it on the Account screen. Signing in with Apple gives no picture at all — Apple does not provide one — so the app shows the first letter of your name instead.
Location — only when you tap the button
The event editor has a "Use current location" button that fills in the Location field for you. Tapping it asks for your location once, then immediately turns it into a place name (for example "District 1, Ho Chi Minh City") which you can edit. The app stores no coordinates, does no tracking, and never reads location in the background.
To turn coordinates into an address, the app uses the operating system's geocoding service. This service may send coordinates over the network to find a place name, even when you are not signed in to Lunaya.
That text is part of the event, so it leaves your device only if you signed in and enabled sync. If you never tap the button, the app never asks for location.
The travel and geomancy compasses use the magnetometer, not location — both work even if you deny the permission.
In-app purchases
The Support the developer section in Settings lets you make a one-time purchase. The transaction is handled entirely by the App Store or Google Play; Lunaya never sees or stores payment details, and no server of ours records your purchase history.
Supporting unlocks nothing — every feature is free for everyone.
Network connections without signing in
On launch the app fetches a static configuration file at https://vanvolabs.com/lunaya/config
to learn whether the running build is too old. The call only downloads - it sends none
of your information, no identifier and no cookie. As with any web request the host
(Cloudflare) sees an IP address and a user agent at the infrastructure level; we do not
read, store or analyse those logs.
If the network is down or the server does not answer, the app carries on normally - no waiting screen and no error.
Another connection happens only when you tap for it: choosing Open in app on a theme on our website makes the app ask for confirmation and then download that theme file. It only downloads too, and sends none of your information. No tap, no call.
Calendars from URLs you choose
When you add or refresh a calendar URL source, the app connects directly to that address to download the calendar. The source provider sees your IP address and the requested URL, including any access token contained in it. Use trusted sources and do not share private calendar URLs.
The source address and downloaded calendar are stored on your device, not synced to Firestore. Imported reminders are processed locally. Removing a source in the app does not delete the calendar at its provider or events you created yourself.
What Lunaya does NOT collect
- Device contacts: the app does not read your device's contacts. Family tree information and relationships are entered by you and synced when signed in, as described above.
- Photos, files, messages, browsing history.
- Advertising ID. The app has no advertising and does not declare the
AD_IDpermission. - Health or financial information.
- Your personal calendar. The app never transmits any event from your calendars, and stores nothing outside your device. Two switches, both off by default, are yours to turn on: "Sync to system calendar" writes into a separate calendar the app creates; "Calendars on this device" reads the calendars you pick so their events appear on the lunar calendar page - view only, not editable, and never leaves the device.
The app uses no behavioural analytics and does not sell personal data. Google provides sign-in and storage services, Apple provides sign-in, and calendar URL providers receive download requests as described above.
Permissions, and what each is for
| Permission | Used for |
|---|---|
| Notifications | Delivering reminders you set |
| Exact alarms | Firing reminders on time; without it reminders still work, a few minutes off |
| Read/write calendar | When you enable "Sync to system calendar" or "Calendars on this device" |
| Run at startup | Restoring your reminders after you restart the phone |
| Location (approximate) | Only when you tap "Use current location" in the event editor |
Some technical permissions (network, biometrics) are brought in by Google's sign-in libraries. Lunaya itself does not use biometrics.
Deleting your data
- In the app: Settings → Account → Delete account. This removes your server-side data and your account. Data on your device is untouched — it is your data, on your device.
- If you have uninstalled the app: follow the instructions at vanvolabs.com/lunaya/account-deletion-en.html.
Requests are handled within 30 days.
Children
Lunaya is not directed at children under 13 and does not knowingly collect children's data.
Changes
If this policy changes, the date at the top changes with it. Significant changes will be announced in the app.
Contact
Email: [email protected]