Privacy Policy

Last updated: 11 October 2026

In short

• Monkr works without an account and without a server. Your quiz answers, streak, relapses and progress stay on your phone.
• The publisher never has access to that data: it can't read it, sell it or expose it in a leak.
• For your subscription, Apple or Google process your payment, and our provider RevenueCat receives an anonymous purchase identifier to check that your subscription is active. It receives nothing about your habits.
• The Panic mode camera records nothing: the image is shown on your screen and is neither stored nor sent.
• No ads, no trackers, no analytics tools.

1. Who we are

The Monkr app ("the app") is published by [À COMPLÉTER: company name], [À COMPLÉTER: legal form and share capital], registered office [À COMPLÉTER: registered address], registration number [À COMPLÉTER: company registration number] ("the publisher", "we").

For any question about your data: contact@monkr.app.

This policy explains what data the app uses, where it is kept and what your rights are, under the EU General Data Protection Regulation (GDPR) and French data protection law.

2. Our principle: your data stays on your phone

The app doesn't ask for your name, email address or phone number, and doesn't create an account. It doesn't send your usage data to any server, whether ours or a third party's.

The following information is stored only in the app's private storage, on your device:

• the age range you select;
• your quiz answers (frequency, age you started, triggers, effects you notice, goals) and the addiction index calculated from them;
• the start date of your program, your current streak and your best streak;
• your relapses (date, length of the streak, trigger if you note one);
• the program steps you completed and your daily pledges;
• your language setting and your subscription status (local copy).

The index, level and badges are calculated on the device. None of this is sent to us.

Sensitive data, never sent to the publisher

Some of this information, such as your pornography habits or the effects you notice, concerns your sex life. The GDPR lists it among the special categories of personal data (Article 9), which receive stronger protection.

That is exactly why the app is built so this data never leaves your phone. It is not sent to the publisher, to RevenueCat or to any other third party. The publisher has no access to it, doesn't collect it and doesn't process it: you alone keep control of it. This data is recorded at your initiative, for your own use, in an environment the publisher can't act on.

Device backups

If you turned on your phone's backup (iCloud Backup on iPhone, Google backup on Android), your operating system may include the app's data in that backup. Apple or Google then keep it in your personal account, under their own privacy policies. The publisher has no access to these backups. You can turn backup off in your phone's settings.

Erasing your data

You can erase everything at any time from Settings › Erase all my data in the app, or by uninstalling it. Since we hold no copy, we can't restore data that was erased or lost along with your phone.

3. The Panic mode camera

Panic mode can show the front camera image to help you regain awareness of the moment. The app only asks for camera access when you turn this feature on.

The image is shown live on your screen. It is not recorded, captured, analysed or transmitted. The app doesn't use the microphone. You can withdraw the permission at any time in your phone's settings, and Panic mode still works without the camera.

4. The only data that leaves your phone: your subscription

Apple and Google

Purchases and subscriptions are processed by Apple (App Store) or Google (Google Play), using the account on your phone. They act as independent controllers, under their own privacy policies. As with any app, they know that you downloaded the app and subscribed. The publisher never receives your payment details, your name or your email address.

Apple and Google send us aggregated sales reports. If you agreed in your phone's settings to share diagnostics with app developers, they also send us anonymised statistics and crash reports, which contain none of your app usage data.

RevenueCat, our subscription provider

To check that your subscription is active and let you restore your purchases, the app uses the service of RevenueCat, Inc. (United States), which acts as the publisher's processor.

When the app starts, or when you buy or restore a subscription, it sends RevenueCat:

• a random identifier created by the app when first opened, which is not linked to your name, your email or your phone's advertising identifier;
• the purchase information provided by Apple or Google: chosen subscription, purchase and expiry dates, price and currency, store country, transaction identifiers, trial period and renewal status;
• technical information the service needs to work: device model and operating system, app version, language, store country and, on iPhone, the technical identifier iOS assigns to apps from the same publisher (IDFV, separate from the advertising identifier);
• the IP address of the connection, which RevenueCat uses to work out the country and doesn't keep.

RevenueCat receives none of your quiz answers and no information about your streak, your relapses or how you use the program.

• Purposes: checking your access rights, managing the free trial, renewals and restored purchases, preventing fraud, and producing overall subscription statistics (number of subscribers, revenue).
• Legal bases: performance of the subscription contract (GDPR Article 6(1)(b)); our legitimate interest in preventing fraud and following activity in aggregate (Article 6(1)(f)); our accounting obligations (Article 6(1)(c)).
• Retention: for as long as your subscription lasts, then 3 years after it expires, unless the law requires us to keep it longer.
• Transfers outside the European Union: RevenueCat hosts data in the United States (Amazon Web Services). These transfers are covered by the standard contractual clauses adopted by the European Commission, included in RevenueCat's data processing agreement.

RevenueCat's privacy policy is available at https://www.revenuecat.com/privacy.

If you write to us

If you contact support, we use your email address and the content of your message to reply, based on our legitimate interest. We keep these conversations for no more than 3 years after the last contact. Please don't include details about your private life: we don't need them to help you.

Viewing this page on the web

When you view this page in a browser, our web host (Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, États-Unis (vercel.com)) may record technical logs (IP address, browser type, date) to keep the service secure. These pages use no cookies and no trackers.

5. What we don't do

• No account, no profile, no database of your habits.
• No ads and no advertising identifier: the app doesn't track you across apps and websites.
• No analytics or behavioural tracking tools.
• No selling, renting or transferring of data.
• No automated decisions with legal effects: the addiction index is calculated on your phone, for information only.

If we ever add a service that changes these commitments, we will update this policy before it goes live and let you know in the app.

6. Recipients

• RevenueCat, Inc. (United States), processor for subscription management, and its own technical sub-processors (hosting and infrastructure, including Amazon Web Services), listed in its data processing agreement.
• Apple and Google, independent controllers for sales through their stores.
• Public authorities, only where the law requires it.

The data that stays on your phone has no recipients.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and, under French law, to set instructions for what happens to it after your death.

• Data on your phone: you view it directly in the app and erase it from the settings or by uninstalling the app. We can't do it for you, since we have no access to it.
• Subscription data held by RevenueCat: email us at contact@monkr.app with your Apple or Google purchase receipt (order number). We need it to find the transaction, since we don't know who you are. We reply within one month.
• Data held by Apple or Google: contact them directly.

To cancel your subscription, see our Terms of Use: you cancel in your Apple or Google account settings.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL, https://www.cnil.fr) or with the supervisory authority of the country where you live.

8. Adults only

The app is only for people aged 18 and over, which is checked by a question on the first screen. It is not intended for minors.

9. Security

Data stored on your phone is protected by your system's security features (device encryption, passcode). We recommend turning on a passcode or biometric authentication. Communication with RevenueCat is encrypted (HTTPS).

Because data about your habits isn't stored on any server, it can't be exposed by a breach on our side.

10. Changes

We may update this policy, especially as the app evolves. The date of the last update is shown at the top of the page. If we make a significant change, we will let you know in the app.

11. Contact

[À COMPLÉTER: company name] · [À COMPLÉTER: registered address] · contact@monkr.app