DRAFT: needs legal review. Placeholders in square brackets are not final.
Privacy policy
Last updated: [DATE]
This is how Unmonkey (the app and unmonkeyvibes.com) handles your personal data. We collect as little as we can and we do not sell it.
1. Who is responsible
The controller of your data is:
- Entity: [ENTITY NAME] (TO DECIDE: Concreto Studio or the founder's sole-trader entity)
- Address: [ADDRESS]
- Tax ID (NIF): [TAX ID]
- Privacy contact: [PRIVACY EMAIL]
The controller is established in Portugal, so the EU General Data Protection Regulation (GDPR) applies to everyone who uses Unmonkey, wherever they live.
2. Who can use Unmonkey
You must be 16 or older. When you create an account you confirm that you are 16+. We do not knowingly collect data from anyone under 16. If you think a child has an account, write to us and we will delete it.
3. What we collect
We collect the minimum the app needs to work:
- Account: your email address, or your Apple or Google ID when you sign in with them, and the username you choose.
- Time zone: so the daily drop, streaks and daily limits turn over at your local midnight.
- Activity in the app: your votes, favourites, tournament brackets, comments, the quotes you submit, your vibe balance and the ledger of every vibe gained or spent, your rank, boosts and cosmetics.
- Push notification tokens: only if you turn notifications on.
- Purchases: what you bought and when. Payments are handled by Apple, Google and RevenueCat; we never see your card details.
- Roast my stack: the stack and habits you pick from our closed lists, the spice level and the roast we generate. Roasts are private until you share them.
- Confessions: the text you send. We keep a link to the author only on our servers so we can moderate; it is never shown to other users or to our moderators.
- Crash reports and analytics: crash data (Sentry) and usage events such as app opens, votes and funnels (PostHog, EU region).
We do not collect your location, your contacts or private messages. Unmonkey has no private chat.
4. Why we use your data
For each purpose below we rely on a legal basis. [CONFIRM WITH LEGAL]
| Purpose | Legal basis (draft) |
|---|---|
| Run your account, the feed, votes, vibe and the tournament | Contract |
| Process purchases and the Pro subscription | Contract |
| Moderate content, prevent abuse and cheating, security | Legitimate interest |
| Personalised ads, analytics, push notifications | Consent (each one separately) |
| Keep accounting records | Legal obligation |
5. Moderation and AI
Everything users write is checked automatically before it is public. Confessions are also reviewed by a person. The automatic check and Roast my stack use an AI model from Anthropic. To find duplicate quotes and to recommend quotes we compute embeddings of quote text with Voyage AI and store them in our database.
6. Transfers of data to the United States
Our database runs on Supabase in the United States (us-east-1, Virginia), and our cache and rate limiting run on Upstash in the same region. This means your personal data is transferred outside the European Economic Area.
The mechanism that covers this transfer is the Supabase Data Processing Agreement (DPA), which we will sign before launch. [CONFIRM WITH LEGAL: which transfer instrument the DPA relies on (Standard Contractual Clauses and/or the EU-US Data Privacy Framework)]
For the other providers listed below that process data outside the EEA, the transfer mechanism has not been decided yet: [TO DECIDE].
7. Who processes data for us
| Provider | What for | Region |
|---|---|---|
| Supabase | Database, sign-in, server functions | United States (us-east-1) |
| Upstash | Rate limiting and cache | United States (us-east-1) |
| PostHog | Product analytics | European Union |
| Sentry | Crash and error reports | [CONFIRM WITH LEGAL] |
| Anthropic | AI moderation and Roast my stack | [CONFIRM WITH LEGAL] |
| Voyage AI | Embeddings of quote text | [CONFIRM WITH LEGAL] |
| RevenueCat | Purchases and subscriptions | [CONFIRM WITH LEGAL] |
| Google (AdMob, UMP) | Rewarded ads and the consent form | [CONFIRM WITH LEGAL] |
| Expo | Push notification delivery | [CONFIRM WITH LEGAL] |
| Netlify | Hosting of this website | [CONFIRM WITH LEGAL] |
| Apple, Google | Sign-in and the app stores | Their own policies apply |
8. How long we keep it
| Data | Retention | When you delete your account |
|---|---|---|
| Profile, email, push tokens | While the account exists | Deleted within 30 days |
| Public quotes and comments | While the account exists | Stay, shown as "deleted monkey", so conversations and tournaments do not break |
| Confessions | While the account exists | The link to the author is deleted |
| Votes, favourites, brackets | While the account exists | Deleted (aggregate counters stay) |
| Vibe ledger | While the account exists | Deleted; the Hall of Vibe shows "deleted monkey" |
| Purchases | 10 years (accounting period, [CONFIRM WITH ACCOUNTANT]) | Pseudonymised, with no link to your profile |
| Roasts | 90 days, except the ones you shared | Deleted |
| Reports and moderation decisions | 12 months | Pseudonymised |
| Analytics events | 12 months in PostHog | Deletion requested through the PostHog API |
| Anonymous accounts with no activity | 90 days | Deleted by a scheduled job |
9. Your rights
Under the GDPR you can ask us to access, correct, delete, restrict or export your data, to object to processing, and to withdraw a consent at any time.
- Delete your account inside the app. We record the request and finish within 30 days.
- Export your data: request it in your profile and we email you a JSON file.
- Anything else: write to [PRIVACY EMAIL].
You can also complain to your data protection authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).
10. Your choices
Personalised ads (Google consent form), analytics and notifications are three separate choices and none of them blocks you from using the app. Without ad consent, rewarded ads run in non-personalised mode. On iOS the App Tracking Transparency prompt controls tracking across other apps. Without analytics consent we only send anonymous, aggregated events.
11. Changes
If we change this policy in a way that matters, we will tell you in the app before it applies. The date at the top shows the latest version.