01Who we are
LunAir is operated by Noe Marty, an individual sole proprietor (Einzelperson) based in Meilen, Zürich, Switzerland. References in this policy to “LunAir,” “we,” “us,” or “our” refer to Noe Marty.
This Privacy Policy describes how we collect, use, and protect your personal information when you use LunAir at lunairapp.com and app.lunairapp.com.
02Information we collect
Account information
- Your email address (provided when you sign up via Clerk)
- Your name, if you choose to provide it
- Authentication tokens managed by Clerk on our behalf
Service data
- Geographic coordinates (latitude, longitude, altitude) you save as monitoring locations
- Push notification subscription tokens, if you enable push notifications
- Your current subscription tier (Free or Pro) and related status
Payment information
- We do not directly collect or store payment card information
- All payments are processed by Lemon Squeezy, which acts as the merchant of record
- Lemon Squeezy may share limited information with us such as your subscription status, email, and billing country
Technical and usage data
- IP address (in server logs)
- Browser type, operating system, and device information
- Pages visited, features used, and timestamps
- Anonymized analytics on the landing page via Vercel Analytics
03How we use your information
- To provide the LunAir service — monitoring aircraft transits at your saved locations
- To send push notifications and alerts about predicted transits
- To process payments and manage your subscription
- To respond to your support requests and other communications
- To detect and prevent fraud, abuse, or violations of our Terms of Service
- To improve the service based on aggregated usage patterns
We do not use your personal information for advertising, do not sell it to third parties, and do not share it with data brokers or marketers.
04Who we share information with
LunAir uses the following third-party services to operate. Each receives only the minimum information needed to perform its function:
We share information with these providers solely to operate the service. We do not share information for any other purpose without your consent, except where required by law.
05International data transfers
Some of our service providers (Clerk, Lemon Squeezy, Cloudflare, Vercel) are based in the United States. By using LunAir, you consent to your information being transferred to and processed in countries that may have different data protection laws than your home country.
Where required, we rely on standard contractual clauses, adequacy decisions, and other approved mechanisms to ensure your data receives an adequate level of protection.
06Your rights
Under Swiss data protection law (FADP) and, if you’re in the EU, EEA, or UK, the GDPR, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your information (the “right to be forgotten”)
- Restrict or object to certain types of processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with a data protection authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC)
To exercise any of these rights, email hello@lunairapp.com. We’ll respond within 30 days.
07Cookies and tracking
LunAir uses essential cookies for authentication and session management. These are technically required for the service to function. We do not use advertising cookies, marketing trackers, or behavioral profiling.
The landing page at lunairapp.com uses Vercel Analytics, which collects anonymized page-view data (page paths, referrers, browser and country). It does not use cookies or persistent identifiers and does not track individuals across sites.
08Data retention
- Account data: retained while your account is active. Deleted within 30 days of account deletion.
- Subscription and payment records: retained for up to 10 years after the subscription ends, as required by Swiss accounting and tax law (Obligationenrecht Art. 958f).
- Server logs: retained for 30 days, then automatically deleted.
- Push notification tokens: deleted when you disable notifications or delete your account.
You can request deletion of your data at any time by emailing hello@lunairapp.com. Some records may be retained where legally required.
09Security
We protect your data using standard industry measures:
- All connections encrypted with TLS (HTTPS)
- Passwords managed by Clerk — we never see or store them
- Payment data handled exclusively by Lemon Squeezy and Stripe, which are PCI-DSS compliant
- Regular security updates on our servers
- Webhook signatures verified using HMAC-SHA256
No system is perfectly secure. If we discover a breach affecting your personal data, we’ll notify you within 72 hours where required by law.
10Children
LunAir is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us and we’ll delete it promptly.
11Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via email (to active accounts) and a notice on this page. The “Last updated” date at the top of this page indicates when it was last revised. Continued use of LunAir after changes take effect constitutes acceptance.