KeepLuna works differently from our other apps. KeepCycle and KeepAlcove keep everything encrypted on your own phone and never send it anywhere. KeepLuna can't work that way, because it introduces you to other people, so your profile has to reach a server for anyone else to see it. We're saying that plainly rather than borrowing privacy language that wouldn't be true here.
What we collect
Your account
An email address or phone number, and a password if you choose to set one. We use it to sign you in and to send verification codes. Passwords are stored only as a scrypt hash, so we can't read yours.
Your profile
Your name, photo, date of birth, bio, and the three interests you pick. This is shown to other members, which is the point of the app.
About sensitive information. KeepLuna is an app for queer women. Using it, and what you write in your bio or choose as interests, can reveal your sexual orientation or gender identity. Under the GDPR this is "special category" data, and we handle it on the basis of your explicit consent, which you give by creating a profile and which you can withdraw at any time by deleting your account.
We do not sell this information. We do not use it for advertising targeting. We do not share it with data brokers. Not now, and not later. If that ever changed we would have to ask you again, not bury it in an update.
Your location
If you allow it, we store your approximate coordinates so we can show how far away other members are. Two things about this:
- Distances shown to other people are deliberately coarse: "under 1 mile", "4 miles", "100+ miles". We never show anyone your precise position, and we never show your coordinates to another member.
- Location is optional. Decline it and you'll still be matched on shared interests; other people simply won't see a distance.
Identity verification
Verification is handled by Didit, an identity verification provider. You take a selfie in their flow; they tell us only whether the check passed or failed. We never receive or store your selfie or identity document. Their handling of that image is covered by their own privacy policy.
A failed check does not remove your account. You simply don't get a verified badge, and you can try again.
How you use the app
Who you save, who you skip, who you block, reports you file, and when you were last active. Saves and skips are never shown to the person on the other end.
Advertising
The free tier will show ads through Google AdMob. AdMob receives standard advertising identifiers from your device and is subject to Google's privacy policy. It does not receive your profile, your interests, your orientation, your location, or anything you've written. Premium members see no ads.
Who we share it with
| Who | What they get | Why |
|---|---|---|
| Other members | Your name, photo, age, bio, interests, coarse distance, and verified badge | It's an app for meeting people |
| Didit | Your selfie, during verification only | Confirming you're a real person |
| Our hosting provider | Stores the database | The app has to run somewhere |
| Google AdMob | Ad identifiers (free tier only) | Ads pay for the free tier |
That's the complete list. We don't sell your data, and we have no advertising or analytics partners beyond the above.
Moderation and reports
If you report someone, we store the report, who filed it, and anything you wrote in it. Reports are read by a person, not an automated system. Our full moderation policy covers what gets someone removed and how appeals work.
The person you report is not told who reported them.
Law enforcement
We respond to valid legal process only: a real subpoena, court order, or warrant. We do not hand over member data on an informal request.
Separately, and without waiting for a legal request, we may proactively report a credible, imminent threat to someone's physical safety. That is the only exception, and it is deliberately narrow.
We do not monitor your content or activity generally. There is no automated scanning of what you write.
How long we keep things
- Your account and profile: until you delete them.
- Data attached to an active report: kept through the review, plus a 90-day window for appeals, then deleted.
- Removed or banned accounts: the account is held through the same 90-day appeal window (an appeal can't be judged against a record we've already destroyed) and then reduced to a hashed identifier. That's enough to stop the same person signing up again, and not enough to reconstruct a profile. Everything else is deleted: name, photo, bio, interests, location, saves and skips.
Deleting your account
You can delete your account from within the app at any time. Deletion removes your profile, photo, interests, location, saves and skips. What survives is narrow and listed above: the hashed identifier if the account was removed for a safety reason, and report records still inside the 90-day appeal window.
You can also ask us for a copy of your data at any time, at the address below.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your data, to withdraw consent, and to object to certain processing. If you're in the EU or UK, that includes rights under the GDPR; in California, under the CCPA/CPRA. Email us and we'll act on it. We don't require you to prove residency to be treated well.
Security
Passwords are stored as scrypt hashes. Session tokens are stored only as hashes, so a copy of our database wouldn't hand anyone a working login. Traffic is encrypted in transit. No system is perfect, and we won't claim otherwise.
Age
KeepLuna is strictly for adults 18 and over. We don't knowingly collect anything from anyone under 18, and accounts reported as under-18 are removed.
Changes
If we change this policy in a way that affects how your information is used, we'll tell you in the app before it takes effect, not quietly and not only in a changelog.
Contact
Keep Apps LLC, gokeepapps@gmail.com