LUMA · A PRIVATE CYCLE DIARY

Your diary belongs to you.

Privacy policy · Effective 8 October 2026 · App: com.nktools.luma

Luma keeps your period and symptom diary on your device. There is no Luma account or diary server. The diary works offline. Google AdMob ads use internet access and process advertising-related data as described below. Diary entries are not sent to Google or advertisers.

Information you record

You may enter period starts, bleeding or spotting, pain, mood, symptoms, daily impact and notes. Luma processes these records locally to show your calendar, observed history and reports. It does not predict fertility or diagnose health conditions. We do not receive or sell your diary.

Storage and protection

Your diary is encrypted using a key held by Android Keystore. Preferences such as reminder time and favorite symptoms are stored locally. Android cloud backup and device-transfer backup are disabled. The optional diary lock uses device credentials; Luma does not receive your PIN, password or biometrics. Encryption cannot protect an unlocked, compromised device or exported files.

Files you export or import

PDF and CSV reports contain records you select and are readable by recipients. Personal notes are excluded by default. Generated PDFs remain in private cache until replaced or cleared. Android's file picker and share menu let you choose a location or recipient. A selected cloud provider handles files under its own policy.

Encrypted backups use a password you choose, which Luma does not save and cannot recover. Imports read selected files locally and preview conflicts before merging.

Advertising and consent

Luma uses Google Mobile Ads SDK and Google's User Messaging Platform for a banner in Settings and occasional interstitial ads after leaving a report. We request non-personalized ads. We do not give the ad SDK diary entries, symptoms, dates, notes, reports, backups or health-based audience information.

Google's SDK can collect and share IP addresses (including approximate location inferred from them), device and advertising identifiers, ad and app interactions, and diagnostic information for advertising, measurement and fraud prevention. Transfers use TLS encryption. Non-personalized ads still involve data processing. Luma has no separate analytics SDK.

Where required, consent is requested before ads. Settings → Ad privacy choices lets you revisit available choices. If consent or ads are unavailable, diary features remain usable. Android privacy settings let you reset or delete your advertising ID. See Google's privacy policy and Google's ad privacy controls. Google controls retention of advertising data under its policies. Deleting your diary does not delete Google's advertising records. Contact us for privacy requests and use Google's controls for data held by Google.

Permissions

Optional notifications use discreet text without health details. Boot and clock events reschedule enabled reminders. Device authentication protects the optional lock. File access is limited to documents you select and reports you explicitly share. Luma does not request broad storage, location, contacts, camera, microphone or Health Connect access. Internet, network-state and advertising-related SDK permissions support ads and consent, not diary uploads.

Retention and deletion

Records remain until edited, deleted, app storage is cleared or the app is uninstalled. Settings provides Delete all diary entries with confirmation. Clearing storage or uninstalling also removes preferences and cached reports. Exports and backups saved elsewhere must be deleted separately. Without a separate backup, clearing storage, uninstalling or losing a device can permanently lose your diary.

Adults and health information

For adults aged 18 and over. Luma is not a medical device and does not diagnose, treat, cure or prevent any condition. It is not a contraceptive method. Consult a qualified healthcare professional about concerning symptoms.

This website

Cloudflare hosts this static website. Browser visits send ordinary connection information, such as IP address and browser details, to the hosting provider. This website uses no analytics scripts, ads or forms. See Cloudflare's privacy policy. Opening this page does not send diary data.

Support and privacy contact

Published by NK Tools. Contact anithabheesetty@gmail.com for support or privacy requests. Do not include diary entries or backup passwords.

Changes

Material changes update this policy and, where needed, the app. These practices apply to version 1.0.1.

About Luma