Privacy Policy

Effective date: June 2026

Last updated: June 2026

Monk Space ("we," "us," or "our") operates the Monk Space iOS application and getmonk.space (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Contact: hello@getmonk.space

1. Who we are

Monk Space is a mental clarity operating system for iOS. We are committed to privacy-first design. We collect only what is needed to operate the Service, improve product quality, and honor your account and subscription choices.

2. Information we collect

2.1 Account information

When you sign in with Apple, we receive:

• A stable Apple user identifier
• Your email address (if you choose to share it on first sign-in)
• Your name (if you choose to share it on first sign-in)

Apple may only provide name and email once. We store what you share at first sign-in in Firebase Authentication.

We do not offer email/password sign-in at launch.

2.2 App activity and wellness data

Depending on how you use Monk Space, we may process:

• Session completions, durations, and soundscape choices
• Mood check-in selections and timestamps
• Streak and Clarity Score data derived from your activity
• Journal metadata (timestamps, entry type)

2.3 Journal content

Free-text and voice journal entries are sensitive. Journal content is encrypted on your device before it is stored or synced. We design the Service so journal content is not readable by us in ordinary operation.

2.4 Subscription and purchase data

Subscriptions are processed by Apple and managed through RevenueCat. We receive entitlement status, product identifiers, and subscription lifecycle events. We do not receive or store your full payment card details.

2.5 Analytics data

Product analytics (PostHog). We use PostHog to understand how the app is used and where to improve it. Events are tied to an anonymous identifier, not your name or email. We do not send journal text, voice recordings, or other sensitive wellness content to PostHog.

Marketing measurement (Meta and TikTok SDKs). The Monk Space iOS app includes the Meta (Facebook) SDK and TikTok Business SDK. When you allow App Tracking Transparency (ATT), these SDKs may receive limited app activity and device or advertising identifiers to measure which campaigns bring people who actually use Monk Space. Event categories may include:

• Sign-up and onboarding completion
• Paywall views
• Trial starts and subscription purchases
• Completed sessions (duration and soundscape, not journal content)

We never send journal entries, voice memos, mood notes, or other sensitive wellness content to Meta or TikTok.

When enabled via environment configuration, the marketing website may also use Google Analytics 4 and Meta Pixel. Those tools respect Do Not Track and a minimal consent gate where applicable.

2.6 Device and technical data

We may collect device model, operating system version, app version, locale, crash logs, and performance diagnostics needed to keep the Service reliable.

2.7 Website data

When you visit getmonk.space, standard web server logs and optional analytics cookies or pixels may record pages viewed, referral source, and approximate location derived from IP address.

2.8 Marketing and attribution (server-side)

In addition to the in-app SDKs described above, subscription lifecycle events processed through RevenueCat may be sent server-side to the Meta Conversions API and TikTok Events API. This helps us measure trial starts, subscriptions, cancellations, and billing issues without sending journal or wellness content. The purpose is campaign measurement and attribution, not the sale of your personal information.

3. How we use information

We use information to:

• Authenticate you and maintain your account
• Sync your sessions, moods, and progress across devices you use
• Operate subscriptions and entitlements
• Improve reliability, performance, and product design
• Measure which marketing brings people who benefit from Monk Space
• Respond to support requests and legal obligations
• Communicate important Service changes

We do not sell your personal information.

4. Legal bases (EEA/UK users)

Where GDPR or UK GDPR applies, we rely on:

• Contract: to provide the Service you request
• Legitimate interests: to secure, improve, and measure the Service in ways that respect your rights
• Consent: where required for optional analytics, App Tracking Transparency (ATT), or marketing cookies on the website

You may withdraw consent where applicable without affecting lawfully processed data before withdrawal.

5. Third-party services

We use service providers that process data on our behalf:

| Provider | Purpose |

| --- | --- |

| Apple Sign In / App Store | Authentication, billing, pre-orders |

| Firebase (Google) | Authentication and cloud sync |

| RevenueCat | Subscription entitlement management |

| PostHog | Anonymous product analytics |

| Meta (Facebook SDK) | In-app campaign measurement and attribution |

| TikTok Business SDK | In-app campaign measurement and attribution |

| Meta Conversions API | Server-side subscription event measurement |

| TikTok Events API | Server-side subscription event measurement |

| Google Analytics 4 (optional) | Website analytics |

| Meta Pixel (optional) | Website conversion measurement |

Each provider has its own privacy policy. See Meta's Privacy Policy and TikTok's Privacy Policy for how those platforms handle data they receive. We configure integrations to minimize data shared and prohibit sale of personal data to third parties for their own advertising where contractually available.

6. App Tracking Transparency and advertising identifiers

On iOS, we request App Tracking Transparency permission only after you have experienced value in the app, not at first launch.

• If you allow tracking: Meta and TikTok SDKs may receive device and advertising identifiers along with the app events described in Section 2.5 to measure campaign performance and help us reach more people who need Monk Space.
• If you deny tracking: Monk Space continues to function fully. Cross-app identifier sharing to Meta and TikTok is limited or disabled. PostHog anonymous product analytics may still run without using the IDFA for cross-app tracking.

You can change your ATT choice at any time in iOS Settings under Privacy and Security, then Tracking.

7. Data retention

We retain account and activity data while your account is active and for a limited period afterward to resolve disputes, enforce terms, and meet legal obligations. You may request deletion at any time.

Support correspondence is retained as needed to resolve your request.

8. Security

We use encryption in transit (TLS), Firebase security rules scoped per user, and on-device encryption for journal content. No method of transmission or storage is perfectly secure; we work to apply reasonable safeguards appropriate to the sensitivity of the data.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of your personal information
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Opt out of sale or sharing (we do not sell personal information)

In the app: delete your account from Settings. You may also opt out of cross-app tracking through Apple's App Tracking Transparency prompt or in iOS Settings.

By email: contact hello@getmonk.space for access, export, correction, or deletion requests.

California residents may exercise CCPA/CPRA rights using the same contact channel. We do not discriminate against users for exercising privacy rights.

10. Children

Monk Space is intended for users 17 and older. We do not knowingly collect personal information from children under 17. If you believe a child has provided us information, contact hello@getmonk.space and we will delete it.

11. International transfers

If you access the Service from outside the United States, your information may be processed in the United States and other countries where our providers operate. We take steps designed to ensure appropriate safeguards where required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on getmonk.space/privacy and update the effective date. Material changes will be communicated in-app or by email where appropriate.

13. Contact

Monk Space

Email: hello@getmonk.space

Website: https://getmonk.space