Privacy Policy

1.Who we are

MoNomo is a small independent project based in Utah, USA. In this policy, "MoNomo," "we," "us," and "our" mean the people who run MoNomo and the MoNomo service. "You" means anyone who visits the website or uses the app.

This policy covers the MoNomo website at monomoapp.com and the MoNomo apps for iPhone and Android, including test versions handed out through TestFlight and Google Play testing. It does not cover other websites you reach by following a link from MoNomo.

MoNomo is currently a test. Anyone 18 or older can sign up. An account becomes active once its owner types in a 6-digit code we email to the address they signed up with. Features, and the way we handle data, may change during the test. When they change in a way that affects your privacy, we will update this policy first.

2.What we collect

Account information

When you sign up, we collect your email address, a password, a display name (your preferred name, which is what other members see; it does not have to be your real name), and a username (your @handle, which other members can search for). Your password is stored only as a salted hash, a one-way scrambled form. We never store it in plain text and cannot see it. We also keep your account status (for example, waiting for your email code, active, or suspended), your role (for example, member or administrator), when the account was created, when your email was confirmed, and when it was last used. When you sign up, we record which version of the Terms and this policy you agreed to, and when.

Your email code. To confirm the email address is yours, we email it a 6-digit code. We keep only a scrambled (keyed hash) copy of the code, never the code itself, plus when it expires (15 minutes), how many wrong tries it has had, and when codes were sent (so we can limit how many go out). The code is deleted once it is used. We use your email address for the code, password resets, and account notices, never for marketing.

Vouches. If a friend vouches for you (or you vouch for a friend) so the member directory opens early, we record who vouched for whom and when. Administrators can see it. Withdrawing the vouch, unfriending, or blocking deletes it.

Password resets

If you use "Forgot your password?", we make a one-time reset link and keep only a scrambled (hashed) copy of its secret part. We email the link to the address on your account (through Brevo, described in Services that receive data), and it stops working after 2 hours. If our email sending is ever down, a person who runs MoNomo copies the link from the admin panel and emails it to the address on your account; that person can see the link until it is used, canceled, or expires after 48 hours, and the full link is deleted as soon as it is used. A reset signs you out everywhere.

Age confirmation

At signup you enter your birthdate so we can confirm you are 18 or older. We do not store your birthdate. We keep only the date your age was confirmed as adult.

Profile information (optional)

Everything in your profile beyond your display name is optional, and you decide what to add. Profile fields can include:

• your name and pronouns;
• your city (a city only, never a street address);
• the year you left the church;
• the mission you served, the years you served, and the language you served in;
• your religious affiliation now (for example, "Never Mormon", "Evangelical", or "Atheist");
• your home ward;
• the date of your last sacrament meeting, stored in your profile only while it is not set to Only me (the freedom counter keeps its own copy in your private app data, below);
• a bio, hobbies, interests, what you are "looking for," and answers to profile prompts;
• a profile photo;
• your resignation anniversary ("Ex-versary") date;
• your privacy choices: the Public box on each item, the Only me lock on the year you left, your ward, affiliation, Ex-versary, and last sacrament date, "Who can find and message me" (Any member or Friends only), and whether friends may post on your wall.

You change all of these in You > Edit profile. How each choice works is in What other users can see.

Profile walls

Your profile has a wall where your friends (and you) can post short text, up to 1,000 characters. Wall posts are words only: no photos and no replies. We store each post's text (encrypted at rest, like other comments), who wrote it, whose wall it is on, and when. You can turn off new posts on your wall at any time; posts already there stay until someone deletes them.

Your private app data (synced)

A lot of MoNomo is just for you. So that it survives a lost phone and works on both the website and the app, the app keeps one private bundle of your data and saves a copy of it to our server under your account. Other members never see it. It can contain:

• your journal entries, with the moods and prompts you picked;
• the freedom counter: the date of your last sacrament meeting and, if you enter it, a monthly income figure used only to do the tithing math. It is never shown to anyone;
• your banned words list, which may contain names of people in your life;
• your shelf items, quiz results, badges, easter eggs found, and saved news articles;
• your favorites (friends, groups, events, and resources), your saved Gather filters, and copies of your RSVPs and group joins;
• your conversations with the scripted bots (the missionaries, the bishop, and Mom are bots, not people);
• your app settings, such as theme, wording, swear mode, and content warnings.

Social activity

To run the community features, we store:

• friend requests you send and receive, and your friends list;
• people you have blocked;
• direct messages you send and receive, including photos and link cards;
• groups you join or start, events you RSVP to or create (and any cover photo you add to one), and comments you post on discussion boards;
• posts you write on your own or a friend's profile wall, and posts friends write on yours;
• reports you file about other users or content;
• your activity list (your feed), which only your friends can see. It holds the badges and quiz results you choose to add and, only if you turn on "Share my activity with friends", new friendships (named only when that friend shares their activity too), groups you join or start, events you host, and which open topic boards you comment in (never what you wrote, and never group, event, support, identity, or faith boards). Only what happens after you turn it on is shown, and turning it off deletes those items. Wall posts never go on anyone's activity list.

Photos

When you upload a photo, the app re-encodes it on your device before it is sent to us. This removes embedded metadata, such as the GPS location where the photo was taken and camera details. We store the cleaned image. Anything visible in the picture itself (a face, a street sign, a house) is still visible, so please choose photos with that in mind.

Cities and places you type

When you create an event or group, or search Gather for things "near" a city or ZIP code, our server looks that place up in a copy of public US Census Bureau place and ZIP code data that lives on our own server, and, for places outside the US, a copy of the GeoNames list of towns and cities (used under the Creative Commons Attribution 4.0 license). It finds the center of that city or ZIP code. No outside geocoding or mapping service is asked. For events and groups, we store the city and its center point, never a street address, so they can be filtered by distance. If you leave the Gather location filter empty, the app uses the city in your profile for that search. Search places are used for the search and not saved to your account, apart from the filters the app remembers for you in your private app data.

Location

The map has a "Near me" button. If you use it, your device asks for permission to use its location, and that location is used only on your device to move the map. It is never sent to us and we never store it. We do not track your location in any other way. Your IP address can suggest a rough area, but we do not use it to locate you.

Push notifications (phone app, if you turn them on)

If you allow notifications, your phone gives the app a push token: an address for sending notifications to that phone. We store it with your account and use it only to send the notifications you turned on. Every kind of notification starts off (including "Posts on your profile", which tells you when a friend posts on your wall), and allowing notifications on your phone does not turn any of them on. Notifications are delivered through Expo's push service and then Apple (on iPhone) or Google (on Android), which see the notification and the token. By default, lock-screen text is generic and does not show names or message content. Turning notifications off, signing out, or deleting your account stops them; the token is removed when you delete your account.

Technical information

When your device connects to MoNomo, our server and Cloudflare (our network provider, described below) receive your IP address and basic request information, such as the time of the request, the feature requested, and your browser or app version. Our server writes a log entry when a request fails, with the time, the feature requested, and the error. We also issue sign-in session tokens so you stay signed in, and record when each session was last used. A session that goes unused for 14 days is deleted. If you turn on "Enable biometrics" in the phone app, the app keeps its session token in your phone's secure storage and asks your phone to check your fingerprint, face, or passcode before using it; that check happens on your phone, and MoNomo never receives your biometric data. The app checks our server for updates; that check sends nothing about you.

3.What we do not collect

• We do not show ads, and we do not use advertising trackers or pixels.
• We do not use third-party analytics tools or analytics SDKs.
• We do not buy data about you from data brokers, and we do not sell data to anyone.
• We do not "sell" or "share" personal information as those terms are defined in California law, which includes sharing for cross-context behavioral advertising, and we do not use your data for targeted advertising as defined in other state laws.
• We do not store your birthdate, your street address, or your device location.
• The app does not read your contacts or your calendar. "Add to calendar" opens your phone's own new-event screen (or a calendar link), and you decide whether to save it.

If any of this ever changes, we will update this policy before the change takes effect, and where the law requires your consent, we will ask for it first.

4.How we use your information

We use your information only to run MoNomo and keep it safe. Specifically, we use it to:

• create your account, confirm you are an adult, and email you a code to confirm your email address;
• show your profile, posts, comments, and activity to the people you have chosen to show them to;
• suggest "people like you" who share your mission, mission language, city, or home ward. Another member counts as a match only on an item they made Public, never on one they keep for friends or for themselves;
• deliver your messages, friend requests, group activity, and event RSVPs;
• filter events and groups by place and distance;
• keep your private app data, including your journal, in sync between your devices;
• remember your settings;
• keep you signed in and keep accounts secure;
• review reports, enforce our Terms, Community Guidelines, and Organizer Agreement, and protect users from harassment, fraud, spam, and threats;
• fix bugs and keep the service working;
• send you messages about your account, the test, or changes to our policies;
• comply with the law.

We do not use your information to build advertising profiles, and we do not make decisions about you that have legal or similarly significant effects using automated processing.

Where we use AI

We use an AI model (Claude, made by Anthropic) for three jobs, and none of them uses your data:

• Weekly discussion prompts. Each Monday, every topic board on the Discussion Board gets one opening prompt, posted by the MoNomo Team account and labeled as the week's prompt. The model writes them. It is given only each board's name and description, our style notes, and that board's earlier prompts. If the model is unavailable or its answer fails our checks, the prompt comes from a list we wrote by hand. The model never sees anything members posted.
• News. The model searches the web and suggests links to recent public news articles. It never writes a headline or a summary: our server opens each page itself and keeps only the ones it can verify. It is given only our instructions and the date.
• Listed events. The model searches the web for public event pages from real groups. Our server checks each page, and a person who runs MoNomo approves every event before it is listed. The model is given only our instructions, the date, the names of cities where we already list public groups, and the websites we have chosen to skip.

We do not use AI to read, sort, or moderate your profile, posts, comments, messages, or journal.

5.Sensitive information

Many privacy laws give extra protection to "sensitive" personal data, which includes information revealing religious or philosophical beliefs, sexual orientation, sex life, health, and racial or ethnic origin. California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia, and other states define it this way, and the EU and UK GDPR treat it as a "special category."

On MoNomo, sensitive information is unavoidable. Simply having an account on a community for people who have left or are questioning the LDS church can reveal something about your religious beliefs. Several profile fields reveal religious history directly: your affiliation, your ward, your mission, the year you left, the date of your last sacrament meeting, and your resignation anniversary. Groups you join (for example, LGBTQ+ or support groups) can reveal your sexual orientation, gender identity, or health. Your profile, messages, comments, and journal may also contain information about your sexual orientation, gender identity, mental or physical health, family situation, or other sensitive topics, if you choose to share it.

Here is how we handle it:

• Purpose. We process sensitive information only to provide the service you asked for: your account, your profile, your conversations, your journal, and the community features you use.
• No sale, no ads. We never sell sensitive information, never use it for advertising, and never use it to infer things about you.
• Your choice and consent. You decide what to put on MoNomo. Where a law requires consent to process sensitive data, we ask for it at signup, separately from agreeing to the Terms, and you also give it through the choices you make in the app, such as filling in a profile field or joining a group. You can withdraw consent at any time by removing information, changing your settings, or deleting your account. Because MoNomo cannot work without processing the fact that you are a member, withdrawing consent for that means closing your account.
• Opting out. If you live in a state that gives you a right to opt out of the processing of sensitive data (for example, Utah), you can exercise it the same way: remove the information, or ask us to delete your account. Email us if you want help.

6.What other users can see, and outing risk

For many people, being seen on MoNomo carries real risk. Family members, ward members, employers, or others could react badly to learning that you have left or are questioning the church. We want you to understand plainly what other people can see.

• Every member who is signed in can see your display name and @username. They also see your photo, unless "Who can find and message me" is set to Friends only. Nobody who is signed out can see any profile.
• The Public box. Every other item on your profile has its own Public box: pronouns, city, the year you left, mission (with its years and language), home ward, affiliation, Ex-versary, last sacrament date, about me, looking for, hobbies, interests, prompts, and your wall. Checked, any signed-in member can see that item. Unchecked, only your friends can. New accounts start with every box unchecked. Your Ex-versary only ever shows the month and day, never the year.
• Only me. The year you left, your home ward, your affiliation, your Ex-versary, and your last sacrament date also have an Only me lock. Locked, nobody else sees that item, friends included, whatever its Public box says. On a new account the ward, affiliation, Ex-versary, and last sacrament date start locked.
• Who can find and message me. With Any member (the default), members can find you in search and suggestions and send you a message request. With Friends only, people who are not your friends see only your name and @username, with a plain placeholder instead of your photo, and none of your profile or wall, whatever your Public boxes say. You are left out of the member directory, name search, "people like you" suggestions, and partial @username matches, and only friends can message you. Someone who types your exact @username can still find you and send a friend request.
• How members can find you. Any member can find you by your exact @username, or by typing the first letters of it (unless you chose Friends only). Members whose account has been open for a week (or who a friend vouched for) can also browse the member directory and search it by name, city, mission, or mission language. Search only matches what that member could already see: a member who is not your friend can find you by city or mission only if that item is Public. Nobody can search by ward: your ward is stored encrypted and is never searchable. If your ward is Public and not locked, it is used to suggest "people like you" to another member who shares that ward and has not locked theirs, by comparing scrambled (keyed hash) copies.
• Friends see every item you filled in, except the ones locked to Only me.
• See it for yourself. Your profile on You shows exactly what a friend sees, and "Viewing as" switches to what a member who is not your friend sees. You change it all in You > Edit profile.
• Your wall. Only your friends (and you) can post on it. Who can read it follows the wall's own Public box: checked, any signed-in member; unchecked, friends only. You can delete any post on your wall, and anyone can delete their own posts. People you have blocked, or who blocked you, cannot see or post on your wall. Wall posts never go on any activity list. A friend's post can be reported like any comment, and administrators can read and remove it.
• The Discussion Board. Comments on topic boards can be read by any signed-in member, with your display name on them (if you chose Friends only, your name is not a link to your profile for people who are not your friends). Topic boards start fresh each Monday; older weeks become a read-only archive that any signed-in member can browse and search. Archive search only finds comments the person searching could already see. You can still delete your own archived comments. A group's board is for that group's members, and an event's board for the people who can see that event.
• Your activity list is visible only to your friends, never to strangers. RSVPs, your journal, Vent, and anything about support, identity, or faith groups and boards never go on it. You can remove any item.
• Group leaders can see the names of people in groups they lead.
• Messages are seen by the people you send them to. They can screenshot or share what you send, and we cannot stop that.
• Your private app data, including your journal, is not shown to any other user.
• Administrators (the people who run MoNomo) can see account details, reported content, and content involved in a report, so they can help with accounts and handle reports. That includes direct messages: when a message or a conversation is reported, an administrator reads the reported message or the recent messages between the two people.

Anyone 18 or older with an email address can join MoNomo, including people you know in real life. Someone could join in bad faith. We do not check identities: the email code proves only that someone can read that inbox. New accounts have to wait a week (or be vouched for by a friend) before they can browse the member directory, but we cannot guarantee that every member has good intentions.

Things you can do to lower your risk:

• use a display name and photo that do not identify you;
• set "Who can find and message me" to Friends only (You > Edit profile);
• leave Public boxes unchecked, keep your ward, affiliation, Ex-versary, last sacrament date, and the year you left on Only me, or leave fields blank;
• leave your wall's Public box unchecked, or turn off posts on your wall;
• use an email address that is not tied to your real name;
• think twice before adding events to a calendar that syncs with someone else's, since the event title lands there;
• block anyone you do not want contacting you or seeing your activity;
• report anyone who threatens to out you, harasses you, or seems to be there to watch members.

7.Services that receive data

We do not sell or rent your information. A small number of outside services receive some data in the normal course of using MoNomo:

• Cloudflare. Cloudflare serves the MoNomo website files (Cloudflare Workers) and carries traffic between your device and our server (Cloudflare's network and Cloudflare Tunnel). Cloudflare sees your IP address and request information, and data passing to and from our server travels through its network. Cloudflare acts as our service provider. Its handling of data is described in its own privacy policy.
• Maps on the website and in the app. The map is drawn on your device by MapLibre, an open-source map library (on the website your browser loads it from cdnjs, run by Cloudflare; in the app it is built in). The map images and label fonts come from MoNomo's own map server on Cloudflare, made from OpenStreetMap data by Protomaps. Until that server is switched on, the map images come from OpenStreetMap's tile servers and the label fonts from Protomaps' public files on GitHub. Those requests come directly from your device, so whichever service answers sees your IP address and the area of the map being loaded. No Google or Apple map component is used to draw the map.
• Directions and calendar links. "Open in Maps" buttons open Google Maps or Apple Maps with the event's or group's town or public meeting place. On the website, "Add to calendar" either downloads a calendar file or opens Google Calendar with the event filled in. In the app, it opens your phone's own calendar screen. Whichever service you open receives the event or place, and its own policy applies.
• Brevo (email). We send MoNomo's emails through Brevo (Sendinblue SAS, based in France), our email delivery service provider. That covers your sign-up and sign-in codes, password reset links, and account notices. Brevo receives your email address and the content of each email we send you, and keeps delivery records (for example, whether a message was delivered or bounced). Brevo may process this outside the United States. We do not send newsletters or marketing email, and we do not give Brevo anything else about you, such as your profile, messages, or journal. Brevo's handling of data is described in its own privacy policy.
• Anthropic (AI model). We use Claude, an AI model made by Anthropic, to write the weekly discussion prompts and to search the web for news links and public event pages, as described in Where we use AI. Anthropic receives our instructions and public information only: board names and descriptions, earlier prompts, the date, city names from our public listings, and the web pages the model reads. It never receives your account, profile, posts, comments, messages, journal, or anything else about you or any other member.
• Push notifications. If you turn them on, notifications go through Expo's push service and then Apple Push Notification service or Google's Firebase Cloud Messaging, as described in What we collect.
• Links you choose to open. MoNomo links to outside sites, such as news articles and resources. When you open one, that site receives whatever your browser or device normally sends (such as your IP address and browser details), and its own privacy policy applies.
• App stores. Apple (App Store and TestFlight) and Google (Google Play) handle app downloads, updates, and tester invitations, and collect information under their own policies. If you share crash reports or feedback through TestFlight or Google Play, those go to us through them. We do not add any other crash-reporting service.

We may also disclose information:

• when required by law, as described in Law enforcement and legal requests;
• when we believe in good faith that it is necessary to prevent imminent physical harm to someone;
• if MoNomo is sold, merged, or reorganized, to the new owner, who would be bound by this policy for the information it receives. We would tell you before that happened.

8.Where your data is stored

During the private test, your account data, profile, private app data (including your journal), messages, and images are stored on a server computer that we operate in Utah, in the United States. Backups of the database are kept on that same computer. People reach that server through Cloudflare. The website files themselves are served by Cloudflare.

Your phone or browser also keeps its own copy of your private app data so the app works offline. Signing out does not erase it; Settings > Erase this device's copy does.

This setup may change. We may move to a cloud hosting provider as MoNomo grows. If we do, we will update this policy to name the provider and describe where data is kept, before or at the time of the move.

If you use MoNomo from outside the United States, your information will be transferred to and stored in the United States, where privacy laws may differ from those where you live.

9.How long we keep data

• Account and profile data, private app data, messages, social activity, and photos are kept while your account is active, until you delete them.
• When you delete something (a journal entry, a comment, a wall post, a profile field), it is gone from the live database at once, with one exception: comments and wall posts that are deleted (by you, by the owner of the wall they are on, or by a moderator) are hidden from everyone but kept, still encrypted, in the database so moderators can review reports about them. Their words are erased when the account that wrote them is deleted, unless a report holds them, as described next.
• When you delete your account in Settings (it asks for your password), we delete your email, password, profile, private app data, sign-ins, push tokens, friendships, blocks, RSVPs, group memberships, and public activity feed, take down the events and groups you created, and remove the text and photos of your comments and of the posts you wrote on anyone's wall, right away. Your own wall comes down at once too: every post on it is hidden from everyone. Posts your friends wrote on your wall are theirs, so their words stay in the database, hidden from everyone and encrypted, until that friend deletes their own account. Your name becomes "Deleted member". Messages are the exception: each message is one shared copy with the person you wrote to, so they keep their side of the conversation, under "Deleted member". If something you posted is under an open safety report, it is hidden from everyone and kept for the moderators until they close the report. If your account itself is under an open report, or was suspended, we also keep your display name and a scrambled (keyed hash) copy of your email, never the email itself, so moderators can still see whose account it was and so deleting can't be used to undo a suspension: a suspended email can't sign up again, and a new account with the email of an account under report is flagged to the moderators. For an open report we let these go when the report is closed; for a suspension we keep them while the suspension stands (you can appeal it). See Delete your account for the full list. If you ask us by email instead, we do it within 30 days.
• Backups. The server makes a copy of the database every night and keeps the last 7. Anything you delete ages out of the backups within 7 days. We use backups only to recover from a failure.
• Server error logs are kept in the server's system log, which deletes old entries automatically as it fills up. There is no fixed day count yet; we intend to set a 30-day limit before MoNomo opens to the public.
• Reports you file and records of moderation actions are kept as long as needed to keep the community safe, including after an account is deleted. Where the law requires us to preserve something (for example, apparent child sexual abuse material reported to NCMEC), we keep it for the period the law requires.
• The private test. Data from the test may be wiped when the test ends. We will tell testers before that happens, so you can download your data first.

10.Security

We use reasonable measures to protect your information, including salted password hashing, hashed session tokens, encrypted connections (HTTPS) between your device and MoNomo, encryption at rest (AES-256) for your messages, journal and other private app data, sensitive profile fields (such as affiliation, ward, last sacrament date, and resignation date), comments, wall posts, and reports, with the key kept outside the database and its backups, access limited to the people who run the service, and stripping location metadata from photos before upload.

To be honest about the limits: MoNomo is a private test run by a small studio, and no system is perfectly secure. Encryption at rest protects a copy of the database (a stolen disk or backup file) that does not come with the key. It does not hide your data from the server itself: the server holds the key so it can show you your own data and so administrators can handle reports, which means your journal and the rest of your private app data are not end-to-end encrypted. Some data is not encrypted at rest at all: your email, display name, @username, city, mission and mission language (search needs them), your privacy choices (which items are Public or Only me, Friends only, and whether your wall takes posts), public events and groups, and uploaded photos. The people who administer the server could technically read any of it. We commit not to, except where the law requires it or to investigate a credible threat to someone's safety. Please think carefully about what you store here, especially anything that would hurt you if it were exposed.

If a security breach affects your personal information, we will notify affected users and any authorities as required by law, and we will tell you what happened and what you can do.

You can help by using a strong password you do not use anywhere else, and by signing out on shared devices.

11.Your rights and how to use them

Wherever you live, you can ask us to:

• Access the personal information we hold about you, and learn how we use it;
• Correct information that is inaccurate (much of it you can also edit yourself in the app);
• Delete your account and personal information;
• Export your information in a portable, commonly used format (portability);
• Opt out of the sale of your data, targeted advertising, and profiling. We do none of these, so there is nothing to opt out of, but you are welcome to ask and we will confirm it in writing;
• Withdraw consent or opt out of the processing of sensitive information, as described in Sensitive information.

Do it yourself in the app

• Download my data: Settings > Your data > Download my data gives you one JSON file with your account details, profile, private app data (including your journal), the messages you sent, your comments (including the posts you wrote on anyone's wall), your friends and blocks, your RSVPs and groups, the events and groups you created, your activity list, and the reports you filed. Messages other people sent you, and posts friends wrote on your wall, are theirs, so they are not in the file.
• Delete your account: Settings > Delete account.

How to make a request

For anything else, email us at privacy@monomoapp.com from the email address on your account, and tell us what you would like us to do.

To protect you, we will verify that the request comes from the account owner, usually by confirming it came from your account email address or asking you to confirm through the app. We will not ask for more information than we need to verify you. You may use an authorized agent where your state's law allows. We may ask the agent for proof that you authorized them, and may ask you to confirm your identity directly.

How fast we respond

We will respond within 45 days. If we need more time, we may extend that by up to another 45 days where the law allows, and we will tell you why within the first 45 days. Requests are free. We may decline requests that are manifestly unfounded or excessive, and will tell you why.

Appeals

If we decline your request, in whole or in part, we will explain why. You can appeal by replying to our decision or emailing us with "Privacy appeal" in the subject line. We will respond to your appeal in writing within the time your state's law requires (generally 45 to 60 days) and explain our decision. If you are not satisfied, you can contact the attorney general of your state.

No discrimination

We will not deny you service, change the quality of service, or treat you differently for exercising your privacy rights. The only exception is the obvious one: if you ask us to delete your account, we can no longer provide the service to you.

12.California residents

This section supplements the rest of this policy for California residents and is our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). Some of these laws apply only to businesses above certain size thresholds. We provide the rights in this section to California users whether or not the CCPA applies to us.

Categories of personal information we collect

Sale, sharing, and sensitive information

In the past 12 months we have not sold or shared (for cross-context behavioral advertising) any personal information, and we have no actual knowledge of selling or sharing personal information of anyone under 16. We use sensitive personal information only for purposes the CCPA permits without a right to limit, such as providing the service you requested and keeping it secure. For that reason we do not offer a "Limit the Use of My Sensitive Personal Information" link, but you can always ask us to delete it.

Your California rights

You have the right to know what personal information we collect, use, and disclose; to access a copy of it; to correct it; to delete it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for using these rights. See Your rights for how to make a request.

Shine the Light

California Civil Code 1798.83 lets California residents ask which personal information a business disclosed to third parties for their direct marketing purposes. We do not disclose personal information to anyone for their direct marketing.

13.Residents of other US states

A growing number of states have comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Depending on your state, these laws give you the right to confirm whether we process your data, and to access, correct, delete, and obtain a portable copy of it; to opt out of sale, targeted advertising, and profiling; to consent to (or opt out of) the processing of sensitive data; and to appeal our decisions. Some states also let you request a list of the specific third parties that received your data. We honor these rights for all US users, whether or not a particular law applies to us, using the process in Your rights. If you share health-related information on MoNomo, we treat it as sensitive and handle it as described in this policy.

14.Users in the EU, EEA, or UK

MoNomo is built for and offered to people in the United States. We do not target the European Union, the European Economic Area, or the United Kingdom. If you use MoNomo from there anyway, the following applies. MoNomo is the controller of your personal data. We rely on these legal bases: performance of our contract with you (providing the service), our legitimate interests (security, abuse prevention, and fixing problems, balanced against your rights), legal obligations, and your consent. Because membership can reveal religious or philosophical beliefs and you may share other special category data, we process that data based on your explicit consent, given at signup and when you choose to add the information; you can withdraw it at any time by removing the information or deleting your account. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your local data protection authority. Your data is transferred to and stored in the United States.

15.Children

MoNomo is for adults only. You must be 18 or older to create an account. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and its data. If you believe a minor has an account, please tell us at the contact address below. Our Child Safety Standards explain how we handle child safety reports.

16.Law enforcement and legal requests

We disclose user information to government or law enforcement only when we are legally required to, such as by a valid subpoena, court order, or warrant, and we review each request to make sure it is lawful and no broader than necessary. We will try to notify affected users before disclosing their information, unless the law prohibits it or there is an emergency involving a risk of death or serious physical injury. We do not hand over information to any religious organization, and we do not respond to informal requests from anyone seeking to identify members.

17.Do Not Track and Global Privacy Control

Because we do not sell or share personal information, run ads, or track you across other websites, there is nothing for a "Do Not Track" or Global Privacy Control (GPC) signal to turn off. If your browser sends a GPC signal, we treat it as a valid request to opt out of sale and sharing, which is already how we operate.

18.Changes to this policy

We will update this policy when our practices change, including when we change hosting providers, add a service that receives your data, or leave the private test. The "Last updated" date at the top shows when it last changed. If we make a material change, we will tell you in the app or by email before it takes effect. We will not use information we already have in a materially different way without your consent where the law requires it.

19.Contact us

For privacy questions, requests, or appeals, email privacy@monomoapp.com. For anything else, including appealing a moderation decision, email support@monomoapp.com.

MoNomo, Utah, USA

This is a draft written for a private test. It has not been reviewed by a lawyer and will be revised before MoNomo opens to the public.