Legal
Privacy Policy: Lunaro website
Effective 11 October 2026
This policy explains how the Lunaro website at mylunaro.com.au handles information you give us through its contact and beta request forms. The Lunaro app has a separate Privacy Policy that covers app accounts, family data and children's accounts. This policy does not cover the app.
Who we are
The Lunaro website is currently operated by its individual project owner in Australia. We intend to transfer the operation to a company, Pilot Canareez Pty Ltd, once it has been incorporated. That company does not exist yet, and we will update this policy when the change happens.
Privacy contact: support@mylunaro.com.au
What we collect
- General enquiries: your name, email address and message.
- Beta tester applications: your name, email address, how you expect to use Lunaro (individual, household or family with children) and any comments you add. Please do not include information about children in your comments.
- Security and spam protection: when you send a form, Cloudflare Turnstile checks that you are not an automated program. Turnstile is provided by Cloudflare and receives information from your browser, including your IP address, and may use browser storage. We also keep short-lived anti-abuse records. They are identified by a keyed one-way hash of your IP address or of your email address, not the raw values, and hold only a count and an expiry time.
- Web server logs: our web hosting provider may keep standard technical logs of requests to the website, such as IP address, time and page requested. We do not control these logs and have not confirmed how long the provider keeps them.
Our form-handling function records only short outcome codes (for example "stored" or "rate limited"), not names, email addresses or message text. The website does not use advertising or analytics cookies.
Why we use it
- To reply to your enquiry.
- To consider your beta application and, if you are accepted, to contact you about the beta.
- To protect the forms from spam and abuse.
We do not sell your information and we do not share it with others except as described below or where the law requires. Using these forms does not subscribe you to a newsletter or marketing list. Submitting a beta application does not create a Lunaro account and does not give you access to the app.
Where it is stored and who handles it
- Form submissions are received by a Google Cloud Function and stored in Google Firebase (Cloud Firestore). Both are configured for Google's Sydney, Australia region (australia-southeast1). Google may process or access data outside Australia for the operation, support and security of its services.
- Cloudflare, Inc. performs the Turnstile check. Cloudflare operates a global network, so information used for that check may be processed outside Australia.
- The website files are served by a commercial web hosting provider. We have not confirmed where its servers are located.
- Only the project owner and specifically authorised administrators can access stored submissions.
How long we keep it
- General enquiries: 12 months after the enquiry is resolved.
- Declined beta applications: 12 months after the decision.
- Approved beta applications: reviewed and deleted within 12 months after your beta participation ends, unless we still have a genuine need to keep them.
- Unresolved enquiries and undecided beta applications: reviewed quarterly and normally deleted 12 months after submission, unless still genuinely needed.
- Anti-abuse records: each has an expiry time of at most about 24 hours. Google Firestore deletes expired records automatically, but not instantly, so they may remain for a further day or so.
Enquiry and beta application records are deleted by hand during these reviews. There is no automatic deletion of them.
Access, correction and deletion
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, by emailing support@mylunaro.com.au from the address you used. We may need to confirm you are the person who sent the submission. We will delete or correct the record unless we are required or permitted by law to keep it. Anti-abuse records contain only hashes, so we cannot look them up from your email address; they expire on their own.
Complaints
If you have a privacy concern, email support@mylunaro.com.au. We will acknowledge your complaint within 7 days and aim to respond within 30 days. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner (oaic.gov.au). The Privacy Act 1988 does not apply to every small operator, so the OAIC can tell you whether it can deal with your complaint.
Children
The forms on this website are for adults. We do not ask for children's names or other identifying information. Children who use the Lunaro app do so through accounts that a parent sets up, and that is covered by the app's own Privacy Policy.
Changes to this policy
We will update this page when our practices change, including when Pilot Canareez Pty Ltd takes over, and show the effective date above.