Lunara

Lunara

⚠️ Unfinished — this is a work in progress. Lunara is not on the App Store or Google Play, and there is no installer to double-click. You build it from this repository and run it on your own phone. Features are landing continuously and things will break. Do not rely on it as your only record of your health data.

An open-source, local-first cycle, fertility, pregnancy, and perimenopause companion.

Lunara ships through native iOS and Android shells powered by Capacitor. Core tracking works without an account or Lunara-hosted user database. Optional backup and AI features transmit data only after you enable them; their scope and security boundaries are documented in the repository.

Lunara is an open-source alternative to Flo®. It is not affiliated with, endorsed by, or connected to Flo Health Inc.

Why

• No subscription gate. Tracking, pattern insights, reports, pregnancy guidance, and perimenopause tools are part of the open-source app.
• Local first by architecture. Core logs live in the app's local storage. Optional backup stores a client-encrypted blob; optional AI shares only the categories you select for that request.
• No 54-screen onboarding funnel. No paywall gauntlet. No nagging.

---

Structure

• app/ — React/Vite product layer plus Capacitor iOS and Android projects
• workers/backup/ — stateless zero-knowledge backup relay (Cloudflare Worker + R2)
• workers/reminders/ — opt-in generic email reminders (no health terms, ever)
• docs/NATIVE_ARCHITECTURE.md — current runtime and platform design
• docs/FEATURE_PARITY.md — honest implementation and release-readiness map

Develop

pnpm install
pnpm dev      # run the app in a browser
pnpm test     # engine unit tests
pnpm --filter @lunara/app native:sync

The cycle engine is covered by a seeded fuzz audit (app/src/engine/estimateAudit.test.ts) that exercises every user-facing estimate across 360 generated histories. It must stay at zero violations — run pnpm test before touching any prediction math.

The AI companion is optional, adults-only, and publik API by default

Lunara works fully without AI, and the companion is never offered under 18. When it is on, answers come from one of three places:

• publik API (default) — no key needed. The app mints its own per-phone key from publik on first launch, after you accept the disclosure, and keeps it in the iOS Keychain / Android Keystore. A new phone starts at $0.00: link it at the claim link and your publik account gives $0.05 of free use, once; then pick a plan or add a pack, and usage is priced per use from your publik balance. Until the phone is linked (or you add your own key), the assistant says there is no balance and shows the link. Disconnect at any time from Settings.
• Anthropic — your own API key, or a token from claude setup-token to bill answers to a Claude subscription.
• OpenAI — your own project API key.

Choosing publik never touches a key you pasted, and choosing your own key never revokes the publik one. Credentials are stored in the Keychain / Keystore, never in the cycle database and never in a backup. Nothing from your tracker is sent unless you tick the specific categories for that message.

For maintainers — the app token. app/src/lib/publikBuild.ts carries the build's public app token. In git it is the placeholder pat_lunara_REPLACE_ME, which compiles and tests but hides the publik option; the publik-side mint script (scripts/mint-app-token.mts in the publik repo) mints pat_lunara_<32 base36> and writes it into that file in the same commit the publik install guide then pins. The token is public by design: it can only mint rate-limited anonymous installs; it holds no balance and reads nothing.

Disclaimer

Lunara is not a medical device and does not diagnose, treat, cure, or prevent any condition. Predictions are estimates for informational purposes only and must not be used to prevent pregnancy.

License

AGPL-3.0 — see LICENSE.