Effective date: 2026-10-30
App: Luno (Mongolian streaming aggregator, invite-only)
Operator: [Your legal entity name here] — contact: [support@luno.app or your actual support email]
Luno is a private, invite-only streaming application that aggregates publicly available Mongolian video content from third-party sources (Animax, Wemax, Drama, DramaMn, VOO, LookTV, iKino). This policy explains what personal data Luno collects, how it is used, who it is shared with, and how long it is kept.
| Category | Items | Why | |---|---|---| | Account | Email address, password hash (never your plaintext password) | Account creation and sign-in. Processed by Supabase (our backend provider). | | Invite status | Whether your email is on the allowlist, timestamp of invite, timestamp of redemption | To enforce the invite-only access control. | | Session | Short-lived authentication tokens (JWT), issued by Supabase | To keep you signed in between app launches. | | Preferences (device-local only) | My List, Watch History, Continue Watching, chosen catalog source | Stored only in your device's app storage. Never sent to our servers. |
We do not collect:
- Your name, phone number, physical address, or payment information
- Precise or approximate location
- Your contacts or other apps installed
- Analytics or usage telemetry
- Advertising identifiers (IDFA, GAID)
- Crash reports (opt-in only; off by default)
- Email + password are used solely to authenticate you.
- Invite status is checked at sign-up to enforce the private-access policy.
- On-device preferences personalize your experience; they never leave your device.
We do not profile you, do not run targeted advertising, and do not sell or rent any data to third parties.
| Provider | Role | Jurisdiction | Data sent | |---|---|---|---| | Supabase (supabase.com) | Authentication + database host | US (ap-southeast-1 region) | Email, password hash, invite status | | Streaming source sites (Animax, Wemax, Drama, DramaMn, VOO, LookTV, iKino) | Video stream and metadata providers | Mongolia | HTTP referer header only. No account info ever sent to them. |
Supabase is a GDPR-aligned processor. Their privacy policy: https://supabase.com/privacy
Luno is a viewer for public Mongolian catalogs. Video streams play directly from each source's own CDN under its own terms of service. Luno does not host, store, or transcode the video content. We send only the referer header required by each CDN. We do not log which titles or episodes you watch.
- Your account persists until you request deletion.
- To delete your account and all associated server data, email [support@luno.app] from the account's registered address. We will complete the deletion within 30 days and send written confirmation. The Supabase `auth.users`, `profiles`, and `invites` rows will be permanently removed.
- Device-local preferences (My List, Watch History) are cleared when you uninstall the app.
- Passwords are hashed with bcrypt by Supabase; the plaintext is never stored.
- All network traffic uses HTTPS/TLS 1.2 or higher.
- Our backend tables use Row-Level Security policies that forbid cross-user reads.
- Sign-up requires both a valid invite and a password; brute-force sign-in attempts are rate-limited by Supabase.
Luno is not directed to children under 13. The catalog contains content rated for 13+ and above. If we learn we have inadvertently collected data from a child under 13, we will delete it.
Supabase stores your data in the Singapore region (ap-southeast-1). By creating an account, you consent to this cross-border processing.
Subject to the laws of your jurisdiction (Mongolia personal-data law, GDPR for EU users), you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion
- Withdraw consent and close your account
- Lodge a complaint with your data-protection authority
Exercise any of these by emailing [support@luno.app].
We will post any material change to this page and update the effective date at the top. Continued use after a change means acceptance of the revised policy.
Questions, access requests, deletion requests, or complaints:
[support@luno.app] — [your mailing address, if required by local law]