Privacy notice

Who is responsible

Monara is run by [controller name to be completed], contact [contact email to be completed], who is the data controller.

What we collect

Your sign-in details (name, email and sign-in method, held by our sign-in provider), the trips, activities and notes you create, the trips you join and your role on them, your travel preferences, and in-app notifications. We use your location only if you turn it on for arrival status (below), and we never store it. We don't use analytics or advertising trackers.

If you join the waitlist: your email address, copied from your sign-in account only because you asked us to email you when there's a spot, and your optional answers (where you're going next, roughly when, how you heard about Monara). They're deleted when you leave the waitlist or delete your account.

If you connect Gmail or a Microsoft account in the app, or open a calendar file in it: the booking details described under “Gmail import”, “Microsoft import” and “Calendar files” below.

Why

To provide Monara to you and the people you plan trips with (performance of our agreement with you), and to keep it secure.

Where it's stored and who processes it

Your data is stored by Amazon Web Services in Ireland (EU). Sign-in is provided by Clerk (United States, under the EU-US Data Privacy Framework and standard contractual clauses). Apple and Google distribute the beta apps. If you turn on location for arrival status, Google (United States) works out travel times from your rounded position. Maps are drawn by Google Maps (United States, under the EU-US Data Privacy Framework). During the beta, no AI system processes your personal data.

Gmail import

If you have VIP access, you can connect Gmail in the Monara iPhone or Android app so that Monara finds the bookings already in your inbox. It's optional and separate from signing in to Monara, and you can connect a different Google account from the one you sign in with.

What is read. Monara asks Google for read-only access, so it can never send, delete or change your email. The app on your phone looks only for booking emails (hotels, flights, trains, buses, car rentals, restaurants, events and tickets, and appointments): first from the last 6 months, then new ones each time you open the app or tap Sync now.

Your emails stay on your phone. The app reads each booking email on your phone and sends us only the reservation details it finds: the kind of booking, its title, times, place, confirmation code and provider. So that you can recognise where each one came from, it also sends the sender's domain, the subject (up to 200 characters), when the email arrived and Gmail's reference for it. The rest of the email and its attachments never leave your phone, and we never receive your Google sign-in. Nothing is added to a trip until you review and confirm it.

What we keep, and for how long. A reservation you add to a trip becomes part of that trip and is kept like the rest of it. Reservations you haven't reviewed, with the sender and subject shown alongside them, are deleted within 30 days. When you add or dismiss a reservation, we keep a small record of that decision for 180 days so the same booking isn't offered to you again: a scrambled code (a salted hash) made from the booking reference, whether you added or dismissed it, and when. It holds nothing else from the email. Your data download includes the reservations and how many of these records we hold. On your phone, the app keeps only what it needs to sync again: a note of the last email it checked and, on iPhone, your Google sign-in, in the iPhone's Keychain.

How to disconnect. Disconnect Gmail at any time from Account settings in the app. Disconnecting removes Monara's access in your Google account, clears the sync state on your phone and deletes the reservations you haven't reviewed and the records of your decisions; bookings you already added to trips stay. You can also remove Monara's access from your Google account's security settings.

Google. You give Monara access to your Gmail directly with Google, so Google isn't one of our processors for this. Monara's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft import

If you have VIP access, you can also connect a Microsoft account (Outlook.com, Hotmail, or a work or school Microsoft 365 account) in the Monara iPhone or Android app. It works like Gmail import above: it's optional, separate from signing in to Monara, and the app asks Microsoft for read-only access to your email, so it can never send, delete or change it.

Your emails stay on your phone. The app reads booking emails on your phone and sends us only the reservation details it finds, with the sender's domain, the subject (up to 200 characters), when the email arrived and Microsoft's reference for it. The rest of the email and its attachments never leave your phone, and we never receive your Microsoft sign-in, which stays on your phone. We keep these details exactly as for Gmail import, and disconnecting from Account settings deletes the ones you haven't reviewed.

Microsoft. You give Monara access directly with Microsoft, so Microsoft isn't one of our processors for this. A work or school account may not allow it; that is your organisation's choice. You can remove Monara's access from your Microsoft account's privacy settings, or your organisation can.

Calendar files

You can open a calendar file (.ics) in the app to find your trips. The app reads it on your phone and sends us each upcoming event's title, times and location, with the file's name so you can recognise it. Events that have already ended are dropped and never kept. Events you haven't reviewed are deleted within 30 days.

Arrival status

During a trip, the owner and co-owner of a paid trip can see whether they'll reach their next stop on time. It's optional, and it needs your device's location.

When we ask. Only when you tap Turn on location, and only while the app or the page is open on today's map or Next Up card. We never use your location in the background, and nobody else on the trip sees it.

What is sent. Your device rounds your position to about 100 metres before sending it. We send it, with your next stop's location, the travel mode and the time you'd leave, to the Google Routes API (United States, under the EU-US Data Privacy Framework), which works out the travel time. Google gets nothing else about you or your trip.

What we keep. Nothing. Your position is used for that one answer and is never stored, logged or kept in a history of where you've been.

How to turn it off. Turn off location for Monara in your phone's or browser's settings. Your plan and map keep working, with times from your plan.

Maps

Monara's maps (your day, the trip plan and Explore) are drawn by Google Maps. To draw a map, your browser or phone asks Google for the area you're looking at, which also gives Google your device's IP address and some technical data about the app.

Routes between your stops. To draw the way from one stop of your plan to the next, Monara's servers send Google the two places' map coordinates, the travel mode and the planned time. Google calculates the route; we keep it with your trip until the plan changes.

What Google never gets from Monara. Your trip and activity names, notes, name, email or account. Google's own location feature is switched off in Monara's maps, and routes between your stops never include your position. Only arrival status, if you turn it on, sends Google your rounded position (see Arrival status).

Directions. When you tap Directions, Monara opens Google Maps with only the destination. What you do there is covered by Google's own privacy policy.

Who can see what

People you invite to a trip see that trip, its activities and notes, and your display name and role. They never see your email or sign-in details.

How long we keep it

Until you delete it or your account. Backups expire within 35 days of deletion. When you delete your account, trips you own are deleted; notes you wrote on other people's trips stay, shown as “Former member”.

Your rights

You can download your data and delete your account at any time from your account page or the app settings (see how to delete your account). You can also ask us to correct your data or object to its use. You can complain to the Spanish data protection authority (AEPD) or the authority where you live.

Age

Monara is for people aged 16 or older.

Changes

This beta notice will be replaced by a full privacy policy before Monara opens to the public. We'll tell you in the app when that happens.