1. About this Policy
This Privacy Policy explains how Natus, made available by Lumina Digital, processes personal data. Natus is designed to record, organize, display, synchronize, and enable authorized sharing of observations entered by its users.
2. Purpose of Natus
Natus is a recording and organization tool. It does not observe the body on behalf of the user, automatically interpret fertility signs, predict ovulation or a fertile window, determine fertile or infertile days, diagnose health conditions, or recommend intercourse, abstinence, conception, contraception, or medical treatment.
3. Minimum age
Natus is intended only for people aged 18 or older. Before accessing features that depend on sensitive-data processing, the user must confirm that they are at least 18.
4. Data we process
For account operation, Natus may process display name, email address, internal account identifiers, authentication information, and technical service records. Users may also choose to record health, fertility, and intimate-life information, including cycle data, bleeding, sensation, observed appearance, manual chart markers, manually entered rules, intercourse, symptoms, medication, notes, basal temperature, saliva crystallization, and other information voluntarily entered through enabled features.
5. Sensitive-data consent
Health and sexual-life information is sensitive personal data. Natus requests specific and separate consent before features that depend on this processing become available. The service keeps technical evidence of the acceptance, including the applicable version and acceptance time.
6. Consent withdrawal
Users may withdraw sensitive-data consent in the Privacy and Data area. Withdrawal does not automatically delete the user account. If the tracking owner withdraws consent, her tracking, cycles, associated records, and dependent sharing relationships are deleted. If an authorized husband withdraws consent, his access relationship is removed while the owner’s tracking remains. A later consent does not restore deleted tracking or a previous relationship.
7. Authorized sharing between wife and husband
The tracking owner may invite her husband to participate. Before the invitation is created and accepted, both users receive clear information that the tracking may contain sensitive fertility, health, and intimate-life data. The owner may revoke the husband’s access later.
8. Authorship
Natus may maintain technical authorship information for transparency, synchronization, and conflict resolution. Authorship does not mean that Natus has independently verified or validated the underlying observation.
9. Offline-first operation
Tracking information may be stored locally on the device so recording and access can continue without continuous internet connectivity. When connectivity becomes available, eligible data may be synchronized with cloud infrastructure.
10. Cloud infrastructure
Natus uses Supabase for services such as authentication, database, authorization, and synchronization. The project’s primary database region is South America — São Paulo, Brazil. Infrastructure providers may use subprocessors or operational structures required to provide, secure, administer, or support their services. International transfers, when applicable, are handled under safeguards required by applicable law.
11. Voice recognition
Optional voice recognition is processed on-device when the operating system provides compatible local recognition. If local recognition is unavailable, the feature is unavailable. Natus does not send this recognition audio to its own servers. Users should review the transcription.
12. Notifications
Users may enable local reminders. Notifications are auxiliary and are not medical alerts. Natus uses neutral notification language and does not use reminders to interpret fertility or recommend conduct.
13. Reports and exports
Reports may contain sensitive personal data selected by the user. Users should review the content and intended recipient before sharing. Once a report is voluntarily shared, Natus no longer controls the recipient’s independent processing.
14. Purposes and commercial use
Data may be processed to create and authenticate accounts, maintain tracking, store and synchronize records, support offline operation, enable authorized sharing, maintain security and authorship records, generate charts and reports, recover access, provide support, and comply with legal obligations. Natus does not sell personal data or use sensitive fertility, health, or intimate-life data for behavioral advertising.
15. Security and retention
Natus applies technical and organizational safeguards intended to reduce unauthorized access, loss, alteration, or improper disclosure. Data is kept while necessary to provide the service and fulfill disclosed purposes. Limited information may be retained where required by law or for the exercise of legal rights.
16. Account deletion
When the tracking owner deletes her account, her owned tracking, cycles, associated records, memberships, and dependent data are deleted. The husband’s separate authentication account remains. When the husband deletes his account, his account and access relationship are removed while the owner’s tracking and canonical records remain; identifying authorship references may be removed where applicable.
17. Your rights
Data subjects may exercise rights available under applicable data-protection law, including confirmation of processing, access, correction, information about sharing, withdrawal of consent, deletion where applicable, objection, and other statutory rights. Requests may be sent to suporte@luminadigital.app. We may request information reasonably necessary to verify identity.
18. Controller and contact
Lumina Digital — 61.406.285 GUILHERME MAGALHAES DA SILVA — CNPJ 61.406.285/0001-50 — Brasília/DF — Brasil — suporte@luminadigital.app