Privacy Policy

Last updated: October 9, 2026

This Privacy Policy describes how Lutara ("Lutara", "we", "us") handles information when you use the Lutara iOS application (the "App"). Lutara is published by mkAppLab.

1. Summary

Lutara is a local-first app. Your health data (symptom logs, notes, HRT records, weekly summaries and anything read from Apple Health) stays on your iPhone and only leaves it when you share it yourself, for example the PDF for your doctor, or as part of your own iPhone backup. We do not operate any servers of our own, and we have no user accounts. We do not sell your data.

The App uses two third-party services, neither of which ever receives your health data: RevenueCat, to check your subscription status (section 2.4), and TelemetryDeck, to count how often a few features are used (section 2.5). You can turn TelemetryDeck usage statistics off at any time in the App under Settings > Privacy > Share anonymous usage statistics.

2. Information We Process

2.1 Health and symptom data you enter

You may log symptoms (such as hot flashes, night sweats, sleep quality, mood, bleeding patterns), HRT (hormone replacement therapy) records, journal entries, and similar information. This data is stored locally on your device using Apple's SwiftData framework. It is never sent to us or to any third party by the App.

2.2 Apple Health (HealthKit) data

With your permission, Lutara reads selected categories from Apple Health (such as menstrual flow, basal body temperature, wrist temperature, sleep analysis, heart rate variability, and reproductive health categories). This data is read on-device and is never transmitted to us or to any third party. Lutara does not write data to Apple Health. Apple's HealthKit terms apply; we do not use HealthKit data for advertising, marketing, or other use-based data mining.

2.3 Backups and sharing

Lutara does not offer iCloud sync. If you back up your iPhone (to iCloud or to a computer), that backup may include Lutara's data, under Apple's terms; we have no access to it. When you export a doctor report, the PDF goes wherever you choose to send it from the share sheet.

2.4 Subscription information

If you purchase a subscription, the transaction is processed by Apple via the App Store. We use RevenueCat (United States) to receive your App Store purchase information and subscription status (active / inactive / expiration date) so the App can unlock paid features. RevenueCat assigns a random anonymous identifier to your installation; we do not associate this identifier with your name, email, or Apple ID.

2.5 Usage statistics (TelemetryDeck)

To learn which features are used, the App sends anonymous usage statistics to TelemetryDeck, an analytics service hosted in the EU. This is on by default, and you can turn it off at any time under Settings > Privacy > Share anonymous usage statistics. While it is off, the App does not start TelemetryDeck and sends nothing to it.

When it is on, the App sends a signal when one of a fixed list of actions happens: the upgrade (Lutara Pro) screen is shown or closed, a free trial starts, a trial converts to a paid subscription, purchases are restored, or a doctor report is created (including whether it covers 4 weeks or 3 months). The list is fixed in the App's code; there is no free-text field. Each signal also carries:

• an anonymous device code: a salted SHA-256 hash of your device's identifier for this app's vendor, computed on your iPhone, which TelemetryDeck salts and hashes again when it arrives. The identifier itself never leaves the device, and the code is not linked to your name, email or Apple ID. It lets us count distinct devices;
• a random session code, renewed when the App starts and when you return to it after a few minutes away;
• basic device and app information added by the TelemetryDeck SDK, such as device model, iOS version, app version and build, language and region settings, time zone, the day and hour the signal was sent, screen size and orientation, light or dark mode, some accessibility settings (for example text size or reduced motion), and whether the app is a TestFlight build.

Usage statistics never include your symptoms, notes, HRT details, weekly summaries, Apple Health data, or any other health data. TelemetryDeck's automatic session and new-install signals are switched off. According to TelemetryDeck, it does not use cookies, does not store IP addresses, and does not use device fingerprinting to identify individuals.

2.6 Crash reports

The App does not include a crash-reporting service. If you have chosen in iOS Settings to share analytics with app developers, Apple may provide us with anonymized crash reports under Apple's terms.

3. On-Device AI

Lutara's "weekly verdict" feature uses Apple's on-device Foundation Models framework to summarize your week on supported iPhones; on other iPhones a simpler summary is built, also on the device. This processing happens entirely on your iPhone. Your symptom data, journal entries, and HRT history are never sent to OpenAI, Anthropic, Google, or any other cloud LLM provider.

4. What We Do Not Collect

• We do not collect your name, email address, phone number, or Apple ID.
• We do not require you to create an account.
• We do not use the advertising identifier, and we do not track you across other apps or websites.
• We do not sell, rent, or trade your data.
• We do not use your data for advertising.

5. Children

Lutara is not intended for use by individuals under the age of 17. We do not knowingly collect information from children.

6. Medical Disclaimer

Lutara is a wellness and tracking tool. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional healthcare. Always consult a qualified healthcare provider regarding any medical condition or treatment decisions.

7. Your Rights

Because your health data is stored on your device, you have direct control over it at all times. You can delete all Lutara data with Settings > Privacy > Erase all data on this device, or by deleting the App. You can stop usage statistics at any time with Settings > Privacy > Share anonymous usage statistics. Because usage statistics carry only an anonymous device code, we cannot look up the statistics of a particular person.

8. International Users

Lutara is offered worldwide. Your health data stays on your device. Usage statistics are processed by TelemetryDeck in the EU, and subscription information by RevenueCat in the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Material changes will be highlighted within the App.

10. Contact

If you have any questions about this Privacy Policy, please contact us at maotunko@gmail.com.