🔒 Privacy policy

Who the controller is

The data controller is VANA Digital SRL, a limited liability company registered in Romania (Company / VAT number 48905080, Trade register number J12/4220/2023). For any request about your data, write to hello@lunarkiri.com.

Full identification details are in the "Legal notice" document.

This policy covers everything we operate at lunarkiri.com: the public website and its blog, the app at /app/, and the usage statistics counted for both. Where a rule applies to only one of them, it says so.

What data is collected

• Your account: your email address and a password (stored only as a hash, never in plain text).
• Your birds: name, sex, mutation, date of birth, description and up to ten photos.
• Care: the daily routine you tick off, tricks learned, weights recorded and your pet-sitter sheet configuration.
• Emergency: the vets you add (name, address, phone) and an owner contact (name and phone) — the latter is personal data.
• Learning: chapters read, quiz scores, known cards and badges. These are private to your account.
• Preferences: language, theme and your Home layout.

The app does NOT collect location data, does not access your contacts, and contains no advertising and no third-party trackers. It uses no cookies.

We do count how the app is used, on our own server, so we know which parts are worth improving. What is recorded is the name of the screen you opened — "care", "emergency" — and a short list of actions such as starting a quiz or printing the vet report. Alongside those we keep three technical details: the language the app is set to, the size of your screen, and which site sent you here if you arrived from one — the site, never the page or anything after it. It is not tied to your account and cannot be traced back to you: no cookie is set, no identifier is stored, and nothing you have typed or saved is ever sent — not your email, your birds, your notes, your vets or your family. Your browser contacts nobody but us for this.

The public website and the blog are counted the same way and by the same server. There what is recorded is the address of the page you read — "/", "/blog/", "/legal/privacy/" — together with the same three technical details, and nothing further: no cookie, no identifier, no account, and no way to connect a page you read before signing up with the account you create afterwards. You do not need an account to read those pages and we do not create one for you.

Where it is stored

Your data is stored with Supabase — in a PostgreSQL database and, for bird photos, in private file storage — in a European Union region. The app itself is served from our own server.

On your own device we keep only: your session tokens (so you are not asked to sign in every time), your language and theme, and — temporarily — your first bird's details if you close the app midway through signing up.

Isolation between users is enforced by the database itself (Row Level Security), not only by the app. The app contains no secret key.

Who can see your data

If you are part of a family, every member of it sees the birds, the full care history, the vets and the owner contact. Only invite someone if you are comfortable with that — including sharing the name and phone number in the owner contact.

The other members also see the name you choose for yourself on the Account screen. It is optional; if you leave it empty they see a plain label such as "Member 2" instead. Your email address is never shown to them.

Your learning progress, language, theme and Home layout are never shared, not even inside your family.

Your data is not sold, rented or passed to third parties for marketing. There is no advertising in the app.

Services used

• Supabase — database hosting, private file storage and authentication (EU region).
• Resend — email delivery, in a European Union region. It carries the messages the app sends you: confirming your address when you sign up, and resetting your password. It sees the address it delivers to and what the message says. No other service: the app's typefaces are hosted by us, so your browser does not contact Google, or any other company, when you open Kiri.
• The usage statistics described above run on our own server too, in the European Union. They are not a third-party product hosted elsewhere, and they receive no personal data.

Legal basis

We process your account and bird data in order to provide the service you asked for (performance of a contract, GDPR art. 6(1)(b)). Accepting the Terms and this policy when you create your account constitutes your consent (art. 6(1)(a)).

How long it is kept

Care data belongs to the family, not to the person — it is about the bird, like a shared document. If you leave a family you lose access to it, but the data remains for the other members.

If you delete your account, the following are permanently deleted: your account, your learning progress, your preferences, and any family of which you were the only member, together with all its birds and their history. Families that still have other members remain — even one you created yourself. If you were its only owner, that role passes automatically to the longest-standing remaining member, so the family is never left without an administrator.

The retention criterion is simple: data exists for as long as the account or the family it belongs to exists. We do not automatically delete inactive accounts and we set no expiry date — a care history years old is exactly what is useful to a veterinarian. The control is yours: account deletion is available at any time, and it is immediate and irreversible.

Invitations are the exception. An invitation holds the invited person's email address, and once it has been accepted or has expired (14 days) it serves no purpose, so it is deleted automatically.

Your rights

• Access and portability: the Backup button on Home exports all your data in a format you can save.
• Rectification: you can edit any profile, note or contact directly in the app.
• Erasure: the Account screen has "Delete my account", which is immediate and irreversible.
• Objection and restriction: write to hello@lunarkiri.com.

If you are unhappy with how your data is handled, you can lodge a complaint with the Romanian supervisory authority (ANSPDCP), or with the supervisory authority in your own EU country.

If there is a security breach

No security measure is perfect. If your data is exposed, destroyed, or accessed by someone who should not have it, here is exactly what we do.

• We notify the Romanian supervisory authority (ANSPDCP) within 72 hours of becoming aware of it, where the law requires it (GDPR art. 33).
• If the breach is likely to put you at high risk, we also tell you directly, without undue delay, at your account email address (GDPR art. 34).
• We tell you what happened, which categories of data are affected, the likely consequences, what we have already done, and what we advise you to do — for example, change your password.

We never store your password: authentication is handled by Supabase, which keeps only a hash. We process no payments and hold no card details.

If you notice anything that looks like a security problem, write to hello@lunarkiri.com. We treat such reports as a priority.

Children

The app is not directed at children under 16 and does not knowingly collect their data.

Changes

If this policy changes materially, the updated date below changes and you will be asked to agree again at your next sign-in.

The contact form

The contact form on our website asks for your name, your email address, and the message you write. You also choose what the message is about, which decides who reads it.

It is sent as an email and nowhere else: we do not store it in a database, and no record of it exists outside the mailbox it arrives in. It goes to one of our three published addresses depending on the topic you picked, and your address is set as the reply address so we can answer you.

We keep it for as long as the conversation is useful, in the mailbox, and delete it when it is not. Nothing here is used for marketing, and you do not need an account to write to us.

The legal basis is your consent, given by choosing to write to us (GDPR art. 6(1)(a)), and our legitimate interest in answering questions about the app (art. 6(1)(f)). Writing to us is entirely voluntary — the email addresses are published on the same page, and using your own mail program instead reaches exactly the same people.

The form uses no CAPTCHA and loads nothing from anyone else. It carries one hidden field that only automated senders fill in; if it is filled, the message is discarded and never sent on.

Reminders (notifications)

You can ask the app to remind you about the daily routine, the weekly weigh-in, and the start of a hormonal season. Reminders are off until you turn them on, they are turned on separately on each device, and you can turn them off again at any time from the same screen.

Turning them on registers that browser with the push service its maker operates — Google for Chrome and most Android browsers, Apple for Safari, Mozilla for Firefox. That registration is an address for your device, issued by them, and it is the only way a website can reach you when it is closed. It is the one place where using this app means something of yours reaches another company.

We store that address together with the language, the time zone and the hour you chose, and which of the three reminders you want. That is the whole record, and it is deleted the moment you turn reminders off, sign out, or delete your account.

A reminder contains your bird’s name and one short line. It never contains a health judgement, a weight, a date, or anything you have written. It is encrypted with keys that only your device holds before it leaves us, so the service that delivers it carries it without being able to read it.

The legal basis is your consent, given by turning reminders on (GDPR art. 6(1)(a)). Reminders are entirely optional: every part of the app works without them, and the app already shows the same prompts on its own Home screen when you open it.

Paying for extra photo storage

If you take the paid photo plan, the payment itself is handled by Paddle, which acts as the merchant of record. Your card details go to Paddle and never to us — we do not see them, receive them or store them, and there is no card field anywhere in this app.

Paddle is a separate company with its own privacy policy, which governs what it does with the information you give it at checkout — your payment details, your billing country, and the address it needs to issue an invoice. We receive none of that.

What we store is the minimum needed to know that your plan is live: an identifier for the subscription, an identifier for you as a Paddle customer, whether it is active, and the date the paid period ends. No card number, no billing address, no invoice.

When you delete your account, the customer identifier is erased with everything else. The subscription record itself is kept, with nothing left on it that identifies you, for one reason: it is how we find a payment that is still running against an account that no longer exists, so that we can stop it. Without that record such a payment would be invisible and would simply continue.

The legal basis is the contract between us (GDPR art. 6(1)(b)) for as long as the plan runs, and our legal obligation to keep accounting records afterwards (art. 6(1)(c)).

Your name on the supporters wall

If you switch it on in the app, the name you type there is published on a public page at lunarkiri.com, where anyone can read it — including search engines. It is the only thing about you that this project ever publishes. Nothing goes with it: no amount, no date, no country, no email address, and no link to your account.

It is a separate decision from supporting the project, and giving something never switches it on. It is also separate from the display name your family sees — the name on the wall is only the one you type into that box. The legal basis is your consent (GDPR art. 6(1)(a)).

You can withdraw it at any moment with the same switch. The record is deleted immediately when you do. The published page is rebuilt by hand rather than live, so your name leaves it the next time that happens; write to us and we will do it sooner.

What you tell us to build next

Supporters can pick one item from a short list of things the app could do next, and write a message in their own words. Both are stored with your account. We read them, nobody else can, and neither appears on any public page.

The counts shown on that screen are totals — how many people picked each item — and carry nothing that identifies anybody. Nothing you write there is used for anything except deciding what to build.

You can change either at any time on the same screen, and deleting the message removes it. The legal basis is your consent (GDPR art. 6(1)(a)).