Lune is a personal financial tracking and budgeting application designed to help you aggregate, monitor, and manage your financial records (including accounts, transactions, budgets, and debt schedules).

User-centric data architecture: your data is not stored on centralized, proprietary corporate servers owned by us. Instead, it is written to and stored on Supabase, a secure cloud Postgres database platform.

No financial advice: Lune provides automated tracking, organization, and informational tools only. We do not provide investment, tax, legal, or financial advice. All financial decisions, entries, and strategies are made solely at your own discretion and risk.

To use Lune, you must register for an account.

Authentication security: your account authentication and credentials are handled securely by Supabase Auth. Your password is encrypted and stored strictly as a cryptographic hash. Lune never sees, accesses, or stores your plain-text password.

Account responsibility: you are entirely responsible for maintaining the confidentiality of your login credentials. You agree to notify us immediately of any unauthorized use of your account or any other security breach.

Your data, your property: you retain 100% ownership of any data you input into the Service.

Isolation and security: every database table in Lune is protected by Row Level Security (RLS), a database-level barrier ensuring that any query can only return rows belonging to your authenticated account. No other user of the Service can read your data. Sensitive fields are additionally stored encrypted; the Privacy Policy below sets out exactly which fields those are, and what the operator of the Service can and cannot see.

You agree to use Lune only for lawful personal financial tracking purposes. You agree not to:

• Decompile, reverse engineer, or attempt to extract the source code of the application, except as permitted by applicable law or specific open-source licensing terms.
• Interfere with, disrupt, or bypass any security or authentication measures implemented by the Service or Supabase.
• Introduce malicious software, viruses, or code designed to disrupt the application.

"As-is" provision: the Service is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied.

Third-party infrastructure: because your data relies on Supabase for cloud database hosting, we cannot guarantee uninterrupted access in the event of upstream hosting outages, internet disruptions, or provider failures.

Limitation of liability: to the maximum extent permitted by applicable law, Lune and its creators shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including but not limited to loss of profits, data, financial loss, or inaccuracies in tracking — arising from your use of or inability to use the Service.

You have the right to stop using the Service at any time. You may permanently delete your account directly through the application's Settings panel. Upon triggering account deletion, all associated data is wiped from the database immediately and cannot be recovered.

These Terms are governed by and construed in accordance with the laws of Vietnam, without regard to its conflict of law principles.

Lune operates under a strict data-privacy directive: your financial data belongs to you alone. We do not monetize, aggregate, package, or analyze your financial choices for corporate gain.

Financial data (accounts, transactions, budgets, debt schedules): stored on Supabase, a managed Postgres platform, encrypted in transit via HTTPS/TLS and encrypted on disk by Supabase. Row Level Security (RLS) isolates your rows from every other user of the Service.

Field-level encryption: on top of that, the most sensitive fields are stored as ciphertext in the database itself — transaction amounts, dates, descriptions and notes, and account balances, credit limits and notes. The key is held in Supabase Vault and is not reachable through the application's API, so a leaked API key, a database backup or a stolen disk yields ciphertext rather than figures. Not yet covered: transaction type and category, account names, budget amounts, savings goals, net-worth snapshots and debt-schedule figures.

What the operator can see: we would rather be precise here than reassuring. Lune is encrypted at rest, not end-to-end. The decryption key is held by the database, which means whoever administers that database — that is, us — holds credentials capable of reading your financial figures. No automated process does so, and we do not do so as a matter of routine, but we are technically able to, and you should decide what you record with that in mind. End-to-end encryption, where the key is derived on your own device and never reaches our servers, is planned; this policy will be updated when it ships.

Feedback you send us: messages submitted through "Send feedback", along with any screenshot you choose to attach, are stored unencrypted and are read by us — that is their purpose. A screenshot of a finance app usually shows balances, so please crop anything you would rather not share.

Authentication data: your account creation and login flow are managed entirely by Supabase Auth. Passwords are transformed into secure cryptographic hashes. Your plain-text password is never transmitted to or processed by Lune.

Performance & analytics data: Lune uses Vercel Analytics exclusively to monitor structural app health (e.g. anonymous page visits, to optimize speed and fix UI layouts). This tracking is completely anonymous and is never tied to your real identity, email address, or financial figures.

Zero monetization: we do not sell, rent, trade, or share your personal or financial data with any third-party marketing companies, brokers, or external entities.

No cross-site tracking: your activity inside Lune is not tracked across the web for targeted advertising.

Export rights: you can export your entire financial history at any point via Transactions → Import/Export, as CSV or Excel.

Right to deletion: you can permanently delete your account from Settings. This immediately purges all your data from our tables. This action is instantaneous and irreversible.

We may periodically update this Privacy Policy to reflect app optimizations or security enhancements. Updates will be noted by changing the "Last Updated" date at the top of this document.