Privacy Policy

Introduction

Muna is committed to protecting your privacy and safeguarding your personal and health-related information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or app. We design our practices with consideration for privacy and security standards, including health-related regulations, to protect your sensitive data. By using our services, you consent to the terms of this Privacy Policy.

Information We Collect

We may collect:

• Period dates, ovulation predictions, symptoms, notes, and activity logs
• Account information including name, email, username, password, and profile details
• Payment information processed securely through third-party providers
• Messages, inquiries, or support requests you send to us
• AI Journal entries — free-text journal entries and chat messages you enter into the AI Journal feature, including any symptoms, mood, or energy levels you describe in your own words
• Optional condition information — if you choose to tell us you have PMDD, PCOS, or another condition affecting your cycle

We only collect information necessary to provide and improve our services.

How We Use Your Information

We use your information to:

• Provide and improve app functionality including cycle tracking and insights
• Communicate with you about updates, support, and optional marketing emails
• Process payments and subscriptions
• Maintain security and comply with applicable legal obligations
• Power the AI Journal feature — your journal and chat entries are used to log symptoms, compare your reported mood and energy against research-informed expectations for your current cycle phase, and generate personalized, non-diagnostic suggestions such as food, movement, or task-planning ideas

If you've told us about a condition (PMDD, PCOS, etc.), AI Journal recommendations are scoped to that condition. If you haven't, Muna defaults to assuming typical PMS patterns. The AI Journal never diagnoses you — if your logged symptoms show a pattern that doesn't match what you've told us, Muna may suggest you talk to a healthcare provider, but it will not tell you that you have a specific condition. The AI Journal is optional; you can log symptoms and tasks manually at any time without using it.

Important: Muna provides informational insights only and does not offer medical advice. Users should consult a licensed healthcare professional for medical concerns.

Data Sharing and Third-Party Services

Muna does not sell your personal data. We do not share your health information with advertisers. We do not use your cycle data for targeted advertising.

Analytics Services

We use Google Analytics 4 (Google LLC) and Mixpanel (Mixpanel, Inc.) to understand how people use Muna so we can improve the product.

Google Analytics receives only page paths (e.g. /dashboard) — never your name, email, or health data.

Mixpanel receives anonymised health patterns — such as which symptoms were logged, their severity, your energy level, and your current cycle phase — linked to a random internal user ID. This helps us understand, for example, which symptoms are most common in each phase and where to focus product improvements. Your name, email address, cycle dates, and any directly identifying information are never sent to Mixpanel. This data cannot be used to identify you as an individual.

Page URLs sent to either service contain only the path and never include query parameters or authentication tokens. You can opt out of Mixpanel data collection at any time by contacting us at privacy@usemuna.com. Google Analytics data can be blocked using the Google Analytics Opt-out Browser Add-on.

Calendar Integrations

If you choose to connect Google Calendar, Outlook, or Apple Calendar, Muna writes cycle phase labels and optionally reminder events to your chosen calendar. This data transfer occurs on your behalf, under your calendar account's own privacy settings. We do not read the contents of your calendar beyond confirming that sync events were written. You can disconnect any calendar integration at any time from Profile > Calendar Connections.

Cloud Infrastructure and Data Storage

Your data is stored with Base44, our application platform provider, which encrypts data in transit and at rest. We take reasonable steps to ensure all third-party providers handle your data responsibly.

AI Journal Processing

Journal and chat entries you submit to the AI Journal feature are processed by Claude, an AI model from Anthropic, accessed through Base44's LLM integration layer. Interactions with this feature are also logged for quality and reliability purposes through Langfuse, a logging service. Your data is never used to train any AI model — this is contractually prohibited under Base44's data processing agreements with its sub-processors, which permit use of personal data only to provide the service or in anonymised/aggregated form.

If something you share in the AI Journal suggests you may be in crisis or having thoughts of self-harm, the feature is designed to recognize this and respond with crisis-resource information rather than a general wellness suggestion.

Data Security

Muna is a direct-to-consumer app, not a healthcare provider, health insurer, or healthcare clearinghouse. This means HIPAA does not legally apply to us — the same is true of most consumer wellness and period-tracking apps.

Rather than relying on a legal obligation we do not have, we have chosen to implement protections that exceed what most consumer apps offer because we believe your reproductive health data deserves better than the legal minimum:

• Optional client-side encryption — your period dates and symptoms can be encrypted on your device before being stored, so not even Muna can read them without your passphrase
• Encryption of data in transit and at rest
• No health data sent to advertising platforms or data brokers
• Anonymised-only health patterns sent to analytics, linked to a random ID not your identity
• Full data deletion available instantly from within the app
• Consent timestamped and recorded at sign-up
• Global Privacy Control (GPC) signals honoured

To ask about your data or request deletion, contact: privacy@usemuna.com

Marketing & Communications

We may send newsletters, updates, or promotional emails. You can unsubscribe at any time. Opting out of marketing does not affect core service functionality.

Your Privacy Rights

California residents have the right to request access to personal information, request deletion, opt out of data sales (Muna does not sell personal data), and receive equal service.

International users in the EEA have the right to access, correct, delete, restrict, and port their data.

Contact: privacy@usemuna.com

Texas Residents — Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (effective July 1, 2024):

• Access — Request a copy of the personal data we hold about you
• Correction — Request that we correct inaccurate personal data
• Deletion — Request that we delete your personal data
• Portability — Receive your data in a portable format (use “Download My Data” in Profile > Privacy & Data, or submit a request below)
• Opt-out — Opt out of the sale of your personal data, targeted advertising, and automated profiling that produces legal or similarly significant effects

Because Muna collects health information (menstrual cycle data, symptoms, and related health details), this constitutes sensitive personal data under the TDPSA. By creating an account and entering health data, you consent to our processing of that sensitive data for the purpose of providing cycle tracking and productivity features as described in this policy. You may withdraw this consent at any time by deleting your data via Profile > Privacy & Data > Delete All My Data, or by contacting us directly.

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC opt-out signal, we will suppress any analytics scripts used for targeted advertising or cross-site profiling.

To exercise any of these rights, contact us at privacy@usemuna.com. We will respond within 45 days as required by law.

International Data Transfers

Your information may be processed in countries outside your own. We take reasonable steps to ensure your data remains protected in accordance with applicable laws.

Payments

Payments are processed securely through third-party providers. We do not store full payment details.

Limitation of Liability

Muna does not guarantee specific results. We are not responsible for medical decisions made based on app insights. We are not liable for indirect losses including data loss or service interruptions.

The AI Journal provides informational, non-diagnostic suggestions only. It is not a substitute for professional medical, psychiatric, or psychological care. If you are experiencing a medical or mental health emergency, including thoughts of self-harm, contact 911 or the 988 Suicide & Crisis Lifeline (call or text 988) immediately. Do not rely on the app in an emergency.

Policy Updates

We may update this Privacy Policy from time to time. The updated version will be reflected by the revised effective date.

Contact

Founder: Diamond Simpson
Email: privacy@usemuna.com