Privacy Policy
Last updated: June 2026
Avelune is an anonymous peer support community for mental health. We take your privacy seriously — this policy explains what information we collect, why we collect it, and how you can control it.
By using Avelune, you agree to the practices described here. If you do not agree, please do not use the service.
1. Who we are
Avelune ("we," "us," or "our") is an independent project operated at avelune.app. We are not a healthcare provider, therapist, or medical service. Avelune is a peer support community only — not a substitute for professional mental health care.
2. What information we collect
Account information
When you create an account we collect your email address (for authentication and account recovery) and a username you choose. Your username is displayed to other users. Your email address is never shown publicly.
Content you post
Posts, comments, community threads, replies, and direct messages you create are stored in our database. You choose what you share. Posts and comments are visible to other signed-in users. Direct messages are visible only to the participants of that conversation.
Mood check-ins and wellness data
If you use the mood check-in feature, your mood scores and journal entries are stored privately and associated with your account. This data is only visible to you — no other user, including administrators, can read your personal wellness entries.
Feedback submissions
When you submit feedback, we store your message, the category you selected, and — if you were signed in — your user ID. Anonymous submissions store a one-way hash of your IP address (irreversible; we cannot reconstruct your IP from it) solely to prevent spam.
Usage data
Our hosting infrastructure (Cloudflare Workers) may log standard access metadata such as IP addresses, request timestamps, and response codes for security and reliability monitoring. We do not use this data for advertising or sell it to third parties.
3. How we use your information
- To provide and operate the Avelune service
- To authenticate your account and keep it secure
- To send you transactional emails (e.g. email confirmation, password reset)
- To investigate reports of harmful content or policy violations
- To send in-app wellness reminders if you opt in
- To improve the service based on anonymised usage patterns
We do not sell your data, use it for advertising, or share it with third parties except as described in section 4.
4. Third-party services
Avelune relies on the following infrastructure providers:
- Supabase (database, authentication, realtime) — data is stored in a Supabase project hosted in an EU or US region. Supabase's privacy policy applies to their processing.
- Cloudflare (CDN, edge compute, DDoS protection) — requests pass through Cloudflare's network. Cloudflare's privacy policy applies.
We do not integrate advertising networks, analytics SDKs, or social-media tracking pixels.
5. Data retention
Your data is retained for as long as your account exists. When you delete your account (Settings → Delete account), we permanently delete your profile, all posts, comments, community threads, direct messages, mood check-ins, and journal entries. Backups may retain deleted data for up to 30 days before being purged.
Content you reported to us for safety review may be retained for a reasonable period to complete that review even after account deletion.
6. Your rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — update your username or email in Settings
- Deletion — delete your account and all associated data via Settings → Delete account
- Portability — request an export of your content by contacting us
- Objection — contact us if you believe your data is being processed unlawfully
To exercise any of these rights, contact us at henry.ge.29@gmail.com.
7. Cookies and local storage
Avelune does not use advertising cookies. We use browser local storage to persist your authentication session (managed by our auth provider) and to save drafts, preferences, and conversation ordering — all locally on your device.
8. Children
Avelune is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the "last updated" date at the top. Continued use of Avelune after a change constitutes acceptance. For significant changes we will post an in-app notice.
10. Contact
Questions about this policy? Email us at henry.ge.29@gmail.com.