Privacy Policy
Last updated: March 12, 2026
Overview
Monkeio is a focus and deep work tracker. We collect only the minimum data needed to run your account and save your work. We do not sell your data or use it for advertising.
How you sign in
Google OAuth
- You sign in on Google's own pages — we never see your Google password.
- We only request your email address and basic profile info to create your account.
- We do not request access to Gmail, Drive, Calendar, or your contacts.
Email magic link
- We send a one-time sign-in link to the email you provide. No password needed.
- Each link expires after a short window and can only be used once.
- Your email is used only to identify your account and deliver the link.
What we store
- Your email address and display name (if provided via Google).
- Your focus sessions — tasks, timers, and notes you create while signed in.
- Timestamps for sessions (start time, duration) so you can review your history.
We do not collect device identifiers, location data, or any information beyond what you explicitly create in the app.
Third-party services
- Supabase — our database and auth provider. Your data is stored in a Supabase-managed Postgres database. See supabase.com/privacy.
- Google — used only for OAuth sign-in. See Google's privacy policy.
- Vercel — web hosting. Standard server logs (IP, request path, timestamp) may be retained briefly. See vercel.com/legal/privacy-policy.
Data retention & deletion
Your data is kept for as long as your account is active. If you want your account and all associated data deleted, email us and we'll remove it within 30 days.
Your rights
You can request a copy of your data, correct inaccuracies, or ask for deletion at any time. Reach us at buildfrombed@gmail.com.
Changes to this policy
We may update this policy as the product evolves. If changes are material, we'll notify you via email. Continuing to use Monkeio after an update means you accept the revised policy.