Your saved private journal is encrypted with your password in your browser. If you enable AI replies, the messages and selected context needed for a reply are processed by Cloudflare. Public Community posts are a separate, public feature.
Your private journal
Your preferred name, cycle records, daily check-ins, saved AI conversations and memory notes are stored in a password-encrypted journal on Cloudflare. Your browser decrypts the journal while your account is unlocked. The raw password and journal encryption key are not sent to the account API. A separate password-derived authentication credential is used for sign-in.
The encryption key stays in the unlocked tab. Your encrypted journal can also have a backup in browser storage. A downloaded account export is readable and may include your private messaging key. Lunelle cannot recover a forgotten encryption password.
Accounts and sign-in
Account identifiers, your username, password-verification material, encryption salts, session-token hashes, record versions and timestamps are stored separately from the encrypted journal. Email and phone sign-in identifiers are stored as hashes for lookup. Hashing an identifier does not make it anonymous.
- Email: your email currently acts as a sign-in identifier. Email verification and password recovery are not available. Accounts are never automatically merged because their email addresses match.
- Google, when connected: selecting Google loads Google Identity Services and lets Google verify your account. The app uses the verified Google account identifier to locate or explicitly link your Lunelle account. Google may supply basic identity claims such as email, name and profile information; Lunelle does not persist the full Google token or copy those claims into your journal automatically. Cycle records and AI conversations are not sent to Google by this integration.
- Phone, when connected: Twilio receives your phone number to send and verify a text-message code. Cloudflare processes the request and the Turnstile security check. Lunelle's database stores a lookup hash and short-lived verification challenges, rather than the raw phone number or code. Twilio may retain verification and delivery records under its own policies.
Google and text-message verification identify your account. Your Lunelle password is still required to decrypt your journal. An existing user can explicitly connect another sign-in method from the unlocked Account page.
AI replies and memory
AI replies are optional. With your permission, Lunelle sends your current message, the current conversation, preferred name and selected relevant context to Cloudflare Workers AI. With memory enabled, this context may include your own earlier conversations, notes and cycle logs. This content is readable during processing. The saved journal remains encrypted.
Context is selected from your own unlocked account. The app does not use another person's private journal as your context or train a shared model through its memory feature. Cloudflare's handling of inference requests is described in its Workers AI data usage policy. You can disable AI processing or memory from Account.
Community and direct messages
If you join Community, your username, public posts, replies and vote totals can be seen by visitors. Your private cycle journal and AI conversations are not automatically published there. Moderation reports and block relationships are stored to operate the service.
Direct-message contents are encrypted in participants' browsers. The service stores ciphertext and conversation metadata, including participants and timestamps. Recipients can read and copy messages they receive. This messaging implementation has not been independently audited and does not provide forward secrecy.
Service providers and device information
Cloudflare hosts the site, account database, AI processing and security services. It receives network information such as your IP address and request metadata when you use Lunelle. The app stores hashed request-limit keys and counts to reduce abuse. Google or Twilio can learn that you used Lunelle when you choose their sign-in method. Their services may process network and device information under their own policies.
The app code does not include advertising pixels or send cycle records to Google or Twilio. External links open third-party sites governed by their own policies. Relevant provider information: Cloudflare, Google, and Twilio.
Cookies and browser storage
An essential secure session cookie is used for account requests and expires after one day. Your decrypted journal is not stored in this cookie. Theme preferences, encrypted backups and any older records from previous browser-only versions may remain on your device. Old browser records are imported into an account only when you choose the import action.
Export, deletion and retention
From Account, you can export your journal, delete saved AI chats and memory notes, sign out, or delete your account. Account deletion removes active account and journal records, sessions, linked sign-in identities, public contributions and hosted DM conversations involving the account. Deleting a hosted DM conversation also removes the other participant's hosted copy.
Downloaded exports, copies saved by other people, backups on other devices, old browser-only records and Cloudflare's backup retention are separate. Deletion from the live database does not guarantee immediate removal from every backup. Temporary verification challenges, expired sessions and request counters are periodically removed.
Contact
For support or questions about your information, contact Lunelle at belzilebob6@gmail.com.