This policy explains what personal data Moncha Memory handles, why, who else is involved, how long it is kept, and what you can do about it. It covers the Moncha Memory app, the account and developer site at connect.getmoncha.app, and this website.
The controller of your personal data is Eduardo Salguero (NIF 32703143H), Rua Meidelo 1, 15320 As Pontes (A Coruña), Spain. For anything about your data, write to hello@getmoncha.app.
Everything you save stays on your device. Two things still leave it: the usage records and the crash reports described below, both tied to an identifier the app creates on your device, not to your name or email.
If you ask for a copy of your data (Settings → Export my data), we build it in the background from what you wrote: your Memories, the spaces they are in, your photos, and the comments you wrote. It does not include what other people wrote in a space you share, including their comments. It is kept in a private store, not the one that serves photos, and nothing public points to it.
A Memory you share is visible to the people you share it with, together with your name. If you invite someone, we receive the email address you type and use it only to send them that invitation.
You can comment on a Memory that is shared with other people. Whoever can see the Memory can read its comments, and nobody else: the people who are in its space and can see that Memory, no more and no fewer. A Memory in your Personal space, or one you keep just for you, cannot receive comments. If you later make a shared Memory private, the others stop seeing it and its comments, nobody can add new ones, and the comments already written stay stored with the Memory until you share it again or delete it. Only you can delete your own comments. When you do, the words are erased from our server straight away, and we keep only an empty marker so the other devices learn it is gone. If you leave a space, or someone removes you, the comments you wrote stay there under your name. Comments are never shown to the apps and AI agents you connect to your account. The app also keeps the comments of your Memories on your phone, so you can read and search them without a connection; the search happens only on your phone.
Any Memory you mark as “just for you” is visible only to you, even if it lives inside a space you share with other people. No one else — not even other members of that space — can see it.
Whoever pays for a Family plan invites people to it by email, and sees the email address of each person on the plan. The people on the plan see who pays for it. Nobody on a Family plan sees anyone else's Memories because of the plan — only what is shared with them in a space.
By default, speech recognition happens on your device. If you turn off “On-device recognition only” in Settings, the audio of what you dictate may be sent to Apple or Google, depending on your phone, to turn it into text, and they handle it under their own privacy policies. It never reaches us: we only receive the text, which becomes an ordinary note.
On iPhone, if you choose to import your Apple Reminders, the app reads them on your device — title, notes, due date and list name — and turns them into Memories. Nothing is read unless you ask, and after that they are ordinary Memories.
When you save a link and it reaches our server, the server visits that address to fetch its title and preview image. The site you linked to sees a visit from our server, around the time you saved it; it doesn't see who you are or anything else about your Memory.
From connect.getmoncha.app you can give other software access to your account: an API key, which can do anything you can, or an app or AI agent you connect and approve (through OAuth or MCP), which gets only what the approval screen showed you. From then on, that app or agent handles the data it reads under its own privacy policy, not this one — so connect only what you trust. You can revoke any key or connection at any time from your account page, and it stops working immediately.
The app keeps a record of what you did, never of what you wrote: that you opened the app, saved something, marked something done, sent or accepted an invitation, wrote a comment or opened the comments of a Memory — along with whether it was a photo, a note or a link, whether it had a date, whether you kept it private or shared it, and whether a Memory was already done when you commented on it. Never the words of a comment. Also which platform you're on, which version of the app, and your time zone, so we can tell a bad day from a broken build. Never the text of your notes, your photos, or where you were.
These records are grouped by an identifier the app creates and keeps on your device, separate from the one used for notifications. If you later create an account, those records are linked to it — including the ones from before you signed up, which is what that identifier is for. They are sent only to our own server, never to an analytics company.
When something breaks, the app and the server send an error report to Sentry: what failed, the app version, the device model and operating system, the screen you were on, and your account's identifier if you are signed in. Never the content of your Memories, your email, or where you were.
| What for | Legal basis |
|---|---|
| Running the service you ask for: your account, signing in, storing and syncing your Memories, sharing them, commenting on them, notifications, link previews, invitations, the Family plan, and the apps you connect. | Performing our contract with you (Art. 6(1)(b) GDPR). |
| Photo location, notifications, the microphone and Apple Reminders. | Your consent, given through your phone's permission prompt (Art. 6(1)(a) GDPR). You can withdraw it anytime in your device settings; that doesn't affect what was done before. |
| Sending an invitation to someone who isn't on Moncha yet. | Our legitimate interest, and yours, in letting you invite who you choose (Art. 6(1)(f) GDPR). The address is used for that invitation only. |
| Keeping the service secure and working: crash reports, and preventing abuse. | Our legitimate interest in a service that works and is safe (Art. 6(1)(f) GDPR). |
| Usage records, to understand whether Moncha is useful and what to improve. | Our legitimate interest in knowing whether the product works, limited to records that hold no content (Art. 6(1)(f) GDPR). You can object at any time (see “Your rights”). |
| Complying with the law, if an authority lawfully requires it. | Legal obligation (Art. 6(1)(c) GDPR). |
We don't use your content to train models, we don't show ads, and we don't sell your data to anyone. We don't make decisions about you by automated means that have legal or similarly significant effects.
An email address is the only thing you must give us to have an account. Everything else is up to you.
These providers process data on our behalf, only on our instructions and only for what's listed:
| Provider | What for | Where |
|---|---|---|
| Render | Runs our server. | Frankfurt, Germany |
| Neon | Our database. | Frankfurt, Germany |
| Cloudflare | Stores the photos you upload and serves them; keeps, for three days, the copy of your data you ask for; hosts this website. | Photos and copies stored in Western Europe; photos served through Cloudflare's worldwide network |
| Brevo | Sends our emails: sign-in codes, invitations, account notices. | European Union |
| Expo | Delivers push notifications, through Apple's and Google's notification services. | United States |
| Sentry | Receives crash reports. | European Union |
| RevenueCat | Keeps track of Pro and Family subscriptions bought through the App Store or Google Play. | United States |
Others receive data from you directly and handle it under their own privacy policies, not as our providers:
Our server, database and crash reports are in the European Union, and your photos are stored in Western Europe. Some providers are based in the United States, or can reach data from there to support their service: Render, Neon, Cloudflare, Sentry, Expo and RevenueCat. When personal data goes to the United States, it is protected either by the provider's certification under the EU–U.S. Data Privacy Framework or by the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.
If we ever stop running Moncha, we'll tell you in advance so you can take what you need, and then delete the data.
You can delete your account yourself, whenever you want: in the app, from Settings → Delete account, or on the web at connect.getmoncha.app/account/delete, where you sign in with your email. Before anything happens, both show you exactly what deleting will do. You can also write to hello@getmoncha.app and we'll do it for you.
Part of it happens straight away and can't be undone, because it affects other people:
What is only yours — your Personal space, and any space nobody else is in — is kept for 30 days, in case you change your mind or it wasn't you who asked. We email you when the deletion is requested, and signing in again before the 30 days are up cancels it. After that it is deleted, photos included, together with your Google or Apple sign-in. We keep only a random identifier for the account, with no email or name attached, so that other people's devices can still learn your Memories are gone. The comments you wrote on other people's Memories stay until then, and after those 30 days their text is erased too, leaving only an empty marker. Your email address is free again: signing up with it creates a new, empty account.
Deleting your account doesn't cancel a subscription you pay through the App Store or Google Play — cancel it in your phone's subscription settings.
Deletion is real — we don't keep a copy “just in case.”
One exception, stated plainly rather than buried: we keep the usage records described above. Once your account is deleted they are tied only to that random identifier, with no email or name — but with so little other context that is not the same as anonymous, and we won't call it that. They hold no text you wrote and no photo you took, only counts of actions, but they are how we tell whether Moncha is useful, and removing one person's would change the answer. If you'd rather we deleted those too, tell us before the 30 days are up and we will, no questions asked — after that, nothing links those records to you any more, so there is no way for us to find them.
You can, at any time and free of charge:
Write to hello@getmoncha.app from the address on your account, so we know it's you. We'll answer within one month.
If you think we haven't handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority where you live. We'd appreciate the chance to fix it first, but you don't need to ask us before complaining.
You must be at least 14 to create an account — the age at which Spanish law (Organic Law 3/2018, Art. 7) lets you agree to the processing of your own data. If your country sets a higher age, that one applies. If we learn that an account belongs to someone younger, we'll delete it.
This website (getmoncha.app) sets no cookies and loads nothing from third parties.
connect.getmoncha.app, where you manage your account, API keys, connected apps and Family plan, uses only the cookies it needs to work, which don't require consent:
If you sign in with Google there, the button is loaded from Google, and Google may set its own cookies under its own policy.
The app itself doesn't use cookies. It keeps on your device what it needs to work, including the identifier used for the usage records described above.
Everything travels encrypted over HTTPS. Access to our systems is limited to what running Moncha requires, and our logs and crash reports are built to hold identifiers only — never the content of your Memories, your email, or where you were.
If anything important changes about how we handle your data, we'll tell you in the app or by email before that change applies. The date at the top shows when this policy last changed.
Any questions about this policy or your data: hello@getmoncha.app, or by post to Eduardo Salguero, Rua Meidelo 1, 15320 As Pontes (A Coruña), Spain.