MonkeyMe

Privacy Policy

Version 2.0

Effective Date: 24 July 2026

Last Updated: 24 July 2026

This policy is written in plain English so you can understand exactly what data we collect, why we collect it, and what you can do about it. If anything is unclear, please get in touch — our contact details are at the end of this document.

1. Who We Are

MonkeyMe is a daily stretching and mobility app for iPhone. It helps desk workers build a consistent movement habit through personalised routines and a gamified virtual monkey companion.

MonkeyMe is operated by Dan Smith, trading as MonkeyMe (Sole Trader).

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we comply with the APPs regardless of business size or turnover. This policy explains how we handle your personal information in line with those obligations.

2. What Data We Collect

We only collect data that is necessary for the app to work and to give you a good experience. The categories below cover everything the app collects.

2.1 Profile Information

When you set up MonkeyMe, the app stores the following on your device:

• Your monkey's name (chosen during onboarding)
• Your selected body area hotspots (e.g., lower back, shoulders)
• Your onboarding answers: the activities you do, your goal/motivation, how often you currently stretch, your preferred session time, and (optionally) your gender
• Your routine preferences (difficulty, duration, work context)

Your profile is stored locally on your iPhone. Some profile fields (goal, stretch frequency, preferred time, activity types, and gender if you provided it) are also attached to the pseudonymous analytics described in Section 2.5, so we can understand how the app performs for different kinds of users.

2.2 Sign in with Apple (Optional Account)

You can optionally sign in with Apple to save your progress. If you do:

• We receive your Apple user identifier — an opaque code Apple generates for MonkeyMe specifically. It is not your Apple ID email or password.
• If you choose to share it, we receive your name, which is stored only on your device.
• We do not request or collect your email address.

To support account deletion, a single token (issued by Apple when you sign in) is stored on our hosting provider's infrastructure (Netlify, a US company), keyed to your Apple user identifier. This token exists solely so that, when you delete your account, we can tell Apple to sever the connection between your Apple ID and MonkeyMe. It is not used for anything else, and no other personal data is stored on any server.

Sign-in is optional — the app works fully without it.

2.3 Health Conditions (Sensitive Information — Collected Only With Your Consent)

To keep routines safe, you can optionally tell MonkeyMe about health conditions or injuries — for example pregnancy, disc issues, osteoporosis, high blood pressure, glaucoma, or a joint replacement.

• This information is collected only if you choose to enter it, during onboarding or in Settings. Entering it is entirely voluntary and constitutes your consent for the use described here.
• It is used for exactly one purpose: filtering out stretches that are unsuitable for your conditions.
• It is stored only on your device and is never transmitted anywhere — not to our analytics, not to any server, not to any third party.
• You can change or remove your conditions at any time in Settings → Health Considerations, and deleting your account or the app erases them.

2.4 Health and Fitness Data (Apple Health)

If you choose to connect Apple Health, the app reads the following from Apple HealthKit:

• Workouts (type, duration, and date)
• Step count
• Active energy burned

Important: Your Apple Health data is processed entirely on your device. It is never sent to any server or third-party service, including our analytics provider. We use it only to personalise your stretching routines — for example, if you ran yesterday, your routine will focus more on hip flexors and calves.

MonkeyMe also writes completed stretching sessions to Apple Health as Mindful Minutes, so they appear in your Apple Health summary.

2.5 Usage Data (Analytics — Pseudonymous)

We use Mixpanel to collect pseudonymous information about how the app is used. This helps us understand which features work well and where to improve. "Pseudonymous" means the data is keyed to a randomly generated identifier created on your device — it is not linked to your name, your Apple ID, or your Sign in with Apple identifier — but it is not fully anonymous, because events from the same device are connected to each other.

Analytics data includes:

• Sessions completed (type, duration, movements skipped or swapped)
• Streak length and milestone events, and points earned
• Onboarding selections and profile fields (hotspots, difficulty, activities, goal, stretch frequency, preferred time, and gender if provided)
• Feature interactions (screens viewed, buttons tapped) and subscription status (e.g. trial, active — never payment details)
• Feeling check-in responses after sessions — the self-reported wellbeing rating you can optionally give when a session ends
• Whether a session was triggered after a workout (a yes/no flag only — never the workout's type, duration, or any other Apple Health value)

You can turn analytics off at any time in Settings → Privacy → Share Usage Analytics. The app works identically with it off.

Mixpanel is a US company; our analytics are sent to Mixpanel's EU ingestion endpoint (api-eu.mixpanel.com). See Section 6 for overseas disclosure details.

2.6 Crash and Diagnostic Data

We use Sentry (a US company) for crash reporting, so we can find and fix bugs. If the app crashes or hits an error, Sentry receives technical diagnostics: the error details, device model, iOS version, app version, and a short trail of recent in-app events to help reproduce the problem. If you have signed in with Apple, crash reports are tagged with your opaque Apple user identifier (never your name or email) so we can count how many users an issue affects. Sentry never receives your Apple Health data or your health conditions.

2.7 Device Information

Basic device information accompanies analytics and crash reports: device model (e.g., iPhone 15), iOS version, and app version. This does not identify you personally.

2.8 Subscription and Payment Data

All payments and subscriptions are handled entirely by Apple through the App Store via StoreKit 2. We do not collect, process, or store your credit card number, bank details, or any other payment information.

The app receives confirmation from Apple about your subscription status (active, expired, trial period) so it can unlock the correct features. This status is stored locally on your device.

3. How We Use Your Data

We use your data for the following purposes and no others:

We do not use your data for targeted advertising. We do not build advertising profiles. We do not sell your data to anyone. The app contains no advertising or tracking SDKs and does not use Apple's advertising identifier.

4. How We Store and Protect Your Data

4.1 Where Your Data Is Stored

MonkeyMe is designed to keep your data on your device. Your profile, session history, streak data, points, preferences, and health conditions are stored locally on your iPhone using the app's built-in database.

Exactly three kinds of data leave your device:

1. Pseudonymous usage analytics, sent to Mixpanel (Section 2.5) — unless you turn analytics off
2. Crash and diagnostic reports, sent to Sentry (Section 2.6)
3. The Sign in with Apple deletion token, stored with Netlify (Section 2.2) — only if you sign in

Apple Health data and your health conditions stay on your device at all times.

4.2 Security Measures

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access:

• All data stored locally benefits from iOS device encryption and the Secure Enclave
• All data transmitted off the device travels over encrypted connections (TLS 1.2 or higher)
• Analytics use a device-generated identifier; your name and Apple identifier are never sent to Mixpanel
• The server-side token store holds the minimum possible data (one token per signed-in user, keyed to the opaque Apple identifier) and is purged when you delete your account

4.3 No Data Sales

We do not sell, rent, or trade your personal information to any third party. We never have and we never will.

5. Data Retention and Deletion

6. Third-Party Services and Overseas Disclosure

MonkeyMe uses the following third-party services. Each receives only the minimum data necessary for its function.

Overseas disclosure (APP 8). Mixpanel, Sentry, and Netlify are companies based in the United States (Mixpanel ingests our data via EU infrastructure, but remains a US recipient). By using the app you should be aware that the limited data described above is disclosed to these US recipients. We take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles — including data-minimisation (they receive only what's listed above), encrypted transmission, and the opt-out and deletion controls described in this policy — and we remain accountable for their handling of it under APP 8.1.

We do not share your personal information with any third party for their own marketing or advertising purposes.

7. Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the following rights:

7.1 Right to Access

You can request a copy of the personal information we hold about you. Since almost all data is stored on your device, you already have direct access. For the token record or analytics data, we will respond to your request within 30 days.

7.2 Right to Correction

You can update your information directly in the app's Settings screen (profile, hotspots, preferences, health conditions, monkey name).

7.3 Right to Deletion

You can delete all your data at any time in the app: Settings → Account → Delete Account. This works as described in Section 5 — immediately, and without needing to contact us. You can also email support@monkeyme.app for any data-related request.

7.4 How to Make a Request

• Use the in-app settings (for data changes, analytics opt-out, and deletion)
• Email us at support@monkeyme.app

We will verify your identity before processing any request. We will not charge you a fee for accessing your data.

7.5 Data Breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

7.6 Complaints

If you believe we have breached the Australian Privacy Principles or are unhappy with how we have handled your personal information, you can:

1. Contact us first — we will try to resolve your complaint within 30 days.
2. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

8. Apple HealthKit — Specific Disclosures

Apple requires us to be transparent about how we handle HealthKit data. In addition to the commitments made elsewhere in this policy:

• We do not use HealthKit data for advertising or marketing purposes.
• We do not sell HealthKit data to third parties, including data brokers.
• We do not use HealthKit data to build user profiles for purposes unrelated to health or fitness.
• HealthKit data is processed on your device. It is not stored on any server.
• HealthKit data is never sent to Mixpanel, Sentry, or any other third-party service. (Our analytics may record that a session followed a workout, as a yes/no flag — never what the workout was, how long it lasted, or any other Apple Health value.)
• Connecting Apple Health is entirely optional. The app works without it, using your manually selected hotspots and activity preferences instead.

9. Children's Privacy

MonkeyMe is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@monkeyme.app.

10. International Users

MonkeyMe is operated from Australia and this policy is governed by Australian law. If you use the app outside Australia, you may have additional rights under your local privacy laws; you can exercise the access, correction, and deletion rights described in Section 7 through the same in-app and email channels wherever you are.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make changes:

• Material changes: We will notify you via an in-app notification. We will give you at least 14 days' notice before material changes take effect.
• Minor changes: We will update the "Last Updated" date and version number at the top of this policy. We encourage you to review this policy periodically.

Your continued use of the app after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this privacy policy or how we handle your data, please get in touch.

We aim to respond to all enquiries within 7 business days.

App Store Privacy Summary

Use this text in the App Store description, App Privacy section, or as a short-form privacy summary wherever a concise version is needed.

MonkeyMe keeps your stretching data, preferences, progress, and any health conditions you enter on your iPhone. If you connect Apple Health, your workout and step data is processed entirely on your device and never shared with anyone. Signing in with Apple is optional and shares only an anonymous identifier — never your email. We use pseudonymous analytics (with an off switch in Settings) and crash reporting to improve the app. We do not sell your data and there are no ads. Payments are handled by Apple — we never see your payment details. You can delete all your data, including anything server-side, from the app's Settings at any time. Full policy: https://monkeyme.app/privacy.

--- End of Document ---