Privacy Policy

Last updated: August 1, 2026

Lunga is made by Aura Crafts LLC. This policy describes exactly what data the Lunga iOS app handles and where it goes. The short version: your health data stays on your device, there is no account, and we do not sell or share your data with advertisers.

Health data

With your permission, Lunga reads these metrics from Apple Health: resting heart rate, heart rate variability, walking heart rate average, and VO2 max (cardio fitness). Lunga is read only. It never writes to Apple Health.

• Raw health samples are processed and stored on your device only. They are never uploaded to our servers.
• To generate your weekly recovery report, the app sends only derived aggregates to our server: weekly averages and changes versus your baseline (for example, "resting heart rate is 4 bpm below baseline"), craving counts by trigger and time of day, and your slip count. These aggregates are used to generate the report and are not stored on our servers.
• You can decline Apple Health access entirely and the app works without the Recovery Graph.

What the app stores on your device

Your quit profile (substance, usage, cost, quit date), craving logs, slip logs, cached daily health aggregates, and generated weekly reports are stored locally on your iPhone. Deleting the app deletes this data.

Accounts and identifiers

Lunga has no sign up and no accounts. The app uses Firebase anonymous authentication, which assigns a random identifier so our server can rate limit report generation. This identifier is not connected to your name, email, or any personal information. Purchases are managed through Apple and RevenueCat using a similar anonymous identifier.

Purchases

Subscriptions are processed by Apple. We use RevenueCat to validate subscription status. We never see your payment details. See RevenueCat's privacy policy for their handling of purchase receipts.

Analytics and crash reporting

We use Firebase Analytics to understand which features are used (for example, that a craving was logged, without its content) and Firebase Crashlytics to receive crash reports. These are tied to the anonymous identifier, not to your identity. We do not use advertising networks and do not track you across other apps or websites.

Weekly report generation

The derived aggregates described above are processed by our server and by Anthropic's Claude API to write your three bullet weekly report. The aggregates contain no identifiers beyond the anonymous rate limiting described above and no raw health samples.

Data retention and deletion

Because your data lives on your device, deleting the app removes it. Our servers retain only anonymous usage counters (how many reports an anonymous identifier generated). To request deletion of those counters, email us with the request; note that we cannot connect them to you without information you provide.

Children

Lunga is intended for adults quitting nicotine and is not directed at children.

Changes

If this policy changes, the updated version will be posted here with a new date.

Contact

Aura Crafts LLC · [email protected]