Privacy Policy
Last updated: October 14, 2026
1. Introduction
MonkAndMonkey ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Password (encrypted)
- Profile preferences
2.2 Usage Data
We collect information about how you use MonkAndMonkey:
- Tasks, sessions, and time tracking data
- Habits and streak information
- Goals and life area settings
- Journal entries
2.3 Technical Data
- Browser type and version
- Device information
- IP address (for security)
- Cookies and similar technologies
2.4 Mobile App Data
- Local app settings needed for authentication and app preferences
- Daily aggregates from Apple Health or Android Health Connect that you explicitly choose to connect to a habit, such as steps, sleep duration, or average or resting heart rate
2.5 Chrome Extension Data
- The distraction sites and focus rules you configure
- The active tab URL needed to decide, on your device, whether a configured distraction should be blocked
- Authentication and productivity data cached locally so the extension can show tasks and enforce focus sessions
3. How We Use Your Information
We use your data to:
- Provide and improve our service
- Authenticate your account
- Store and sync your productivity data
- Send important service updates
- Sync health metrics to a habit only after you grant Apple Health or Android Health Connect permission and enable a mapping
- Evaluate visited pages against your configured distraction rules; we do not sell browsing activity or use it for advertising
- Ensure security and prevent fraud
4. Data Storage and Security
Your data is stored securely using Supabase (PostgreSQL) and hosted on Google Cloud Platform. We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/SSL)
- Encrypted password storage
- Access controls and authentication
5. Data Sharing
We do not sell your personal data. We may share data only with:
- Service Providers: Supabase (database), Google Cloud (hosting)
- Legal Requirements: When required by law or to protect our rights
6. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Withdraw consent
To request account deletion, use the in-app account deletion flow or visit Delete Your Account. For other rights requests, contact us at: support@monkandmonkey.org
7. Data Retention and Deletion
We retain account data while your account is active. When you request account deletion, we delete or de-identify account data associated with your MonkAndMonkey account, including tasks, sessions, habits, goals, journal entries, and profile preferences.
We may retain limited records when necessary for security, fraud prevention, legal compliance, accounting, dispute resolution, or enforcing our terms.
8. Cookies
We use essential cookies for authentication and session management. See our Cookie Policy for details.
9. Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
10. Children's Privacy
MonkAndMonkey is intended for adults aged 18 and over. We do not knowingly collect data from children or teenagers using their own accounts.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification.
12. Contact Us
If you have questions about this privacy policy, please contact us at:
Email: support@monkandmonkey.org