Privacy
-
This policy describes how Denis Gomes, an individual operating as "monah" from Florida, USA ("monah", "we", "us") handles information when you use the monah desktop app or visit monahapp.com.
We aim to collect as little as possible. Your Notion content stays in Notion. We never sell or share your data with anyone other than the limited service providers listed below.
-
The app sends a small, fixed set of events to our server tied to a randomly generated per-install identifier. The identifier is not connected to your name, email, or Notion account. We use this to understand which flows work and which don't.
The full list of events the app sends:
- app.opened — every time you launch monah
- onboarding.connectClicked, onboarding.oauthCompleted, onboarding.oauthFailed — steps of connecting Notion. The failure event carries a short reason code (for example that you closed the browser window), never the error text
- onboarding.databasesListed — how many databases you shared with the integration, as a number only. Never their names
- onboarding.fieldsMapped — whether the database you picked already had a status, a done status and a time field, as four yes/no answers. Never the property names
- onboarding.fieldCreated — when monah adds a time field or the h:m conversion column for you, and whether it succeeded
- onboarding.completed — first-time Notion setup finished, fired once
- timer.started — when a focus session begins, with the interval duration in milliseconds
- timer.completed — when a focus session ends, with how many minutes were tracked
- pro.bannerClicked, pro.checkoutOpened — when you click the upgrade banner or open the Stripe checkout
- license.activated — when a Pro license is activated on this install, with no further details
Each event also carries the app version, the OS platform string (e.g.
darwin-arm64) and the language the app's interface is set to (e.g.en) — so we know which translations are actually used.What the app doesn't send: task names, Notion content, your email address, your hostname, error stack traces, browser fingerprints, or any kind of session recording. You can verify this with the Network tab in any browser-based debugger pointed at the app — every outbound request is in the open.
-
When you purchase monah Pro, we store the email address you used at checkout, your license key, and a record of which devices you activated on (an opaque hardware fingerprint plus a label like the machine name). This is what makes activation, deactivation, and support email recovery possible.
-
Messages sent to support@monahapp.com are stored on our server so we can answer them. Outbound license emails we send to you are also stored alongside them.
-
When you connect Notion, the app reads tasks from the database you explicitly grant access to and writes back the time you tracked. Notion content is held in the app's memory while it's open and is not stored on our servers.
-
On monahapp.com we use Google Analytics 4 to understand which pages convert to downloads, and Google Ads tags for measurement and remarketing of paid campaigns. Both run only on the marketing site, not in the app.
We use Google's Consent Mode v2 with region-aware defaults:
- EEA, UK, and Switzerland — every consent category (analytics storage, ad storage, ad user data, ad personalization) starts as denied. Nothing is set until you click Accept on the cookie banner. Decline keeps everything denied.
- Everywhere else — defaults start as granted, matching the opt-out convention of US and most non-EU jurisdictions. Click Decline on the banner to opt out; we'll record your decision and turn tracking off on every subsequent visit from the same browser.
You can also block both tags with any standard browser-level privacy tool.
Some partner links, including the Notion Gallery install link, go through a short
monahapp.comredirect first. We use the server request log for that redirect to count how many visits came from that listing. The log contains the requested path, timestamp, IP address, user agent, and referrer, and is used only in aggregate. It is not connected to your app install, license, or Notion account. -
- On your Mac, in the standard application support directory.
-
On our server (
monahapp.com) — license records, the anonymous events log, and the email log. - With third-party processors listed below. They're contractually bound to use the data only to provide their service.
-
- Stripe — processes payments. Stripe sees your card details; we don't.
- Resend — sends transactional email (license keys, recovery).
- CloudMailin — receives email sent to
support@monahapp.comand forwards it to our server. - Notion — reads the workspace and databases you explicitly authorize via OAuth. You can revoke access anytime in Notion's connection settings.
- Google Analytics — measures website traffic only.
- Google Ads — measurement and remarketing for paid campaigns on the marketing site. Subject to the same consent rules as Google Analytics above.
- Cloudflare — DNS and email routing for the
monahapp.comdomain.
-
You can ask us at support@monahapp.com to:
- see the data we hold about you;
- delete your license records and any stored email correspondence;
- opt your install out of anonymous analytics (we'll exclude your install identifier on the server side);
- correct anything wrong.
California residents have specific rights under the CCPA, including the right to know what personal information is collected and to request deletion. We honor those requests for everyone, regardless of state, by the same email above.
-
monah is not intended for children under 13. We don't knowingly collect data from anyone under 13.
-
If we change this policy, we'll update this page and refresh the effective date at the top. For material changes, we'll surface a notice in the app or by email when we have your address.
-
Questions, requests, anything at all: support@monahapp.com.