monkmode

Privacy Policy

Last updated: June 10, 2026

1. What we collect

  • Account info — first name, username, email, phone number, date of birth, age. Collected at sign-up.
  • Payment info — handled and stored by Stripe. We retain only a customer ID, payment method ID, card brand, and last 4 digits.
  • Wearable data — only what you authorize from the device you connect (Whoop, Oura, or Fitbit): day strain, sleep performance, recovery score, and workout duration. The exact metrics depend on the device (Fitbit, accessed via the Google Health API, provides sleep and workout data only). Read-only — we never write back. Stored to compute daily challenge verdicts and audit charges.
  • Usage data — IP, user-agent, basic analytics.

2. How we use it

  • To verify whether you met daily challenge goals.
  • To charge your card when you miss a goal.
  • To send notifications about your challenges.
  • To investigate disputes and prevent fraud.

3. Sharing

We share data with:

  • Stripe — to process payments.
  • Google — when you sign in with Google (your name, email, and avatar) and, if you connect Fitbit, the Google Health API (read-only access to your sleep and activity data).
  • Whoop / Oura / Fitbit — OAuth tokens for whichever wearable you connect; we read data, never write. Fitbit is accessed through the Google Health API.
  • Email providers (Resend) — to send transactional messages.

We do not sell your data. Ever.

4. Google user data & Limited Use

MonkMode's access, use, storage, and transfer of information received from Google APIs — including health data from the Google Health API and your Google sign-in profile — adheres to the Google API Services User Data Policy, including its Limited Use requirements. We only use this data to verify your daily challenge goals and audit charges. We do not use it for advertising, do not allow humans to read it (except with your consent, for security, or as required by law), and do not sell it or transfer it to third parties for unrelated purposes.

5. Retention

We retain challenge results and charge records for as long as needed to support disputes and tax/audit requirements (typically 7 years). Wearable raw data older than 1 year is purged.

6. Your rights

You can access, export, or delete your data anytime from settings. If you delete your account, all personal data is removed within 30 days except records required for legal/tax purposes.

7. Security

Data is encrypted in transit (TLS) and at rest (provider-level). We do not store raw card numbers — Stripe handles all PCI scope.

8. International

Data is processed in the United States. If you are in the EU/UK, you consent to this transfer when using the service. Contact us to exercise GDPR rights.

9. Children

MonkMode is 18+ only. We do not knowingly collect data from minors. If we learn we have, we delete it.

10. Contact

Privacy questions? Email privacy@monkmode.jexhq.com.