Privacy Policy

Last Updated: May 21, 2026

At Mono Desk Co., your privacy is fundamental to everything we build. This Privacy Policy explains how we collect, use, and protect your information when you use monodeskco.com and the Mono Planner application.

1. Website & E-Commerce Data

When you make a purchase on our website, payment processing is handled entirely by Stripe. We never store your credit card numbers, CVV, or full payment details on our servers. Stripe may collect your name, email address, and billing information as required to process your transaction.

We use minimal, privacy-respecting analytics to understand general site usage patterns. We do not use invasive tracking pixels, fingerprinting, or sell any data to third-party advertisers.

2. Mono Planner: Zero-Knowledge Architecture

Mono Planner is built on a zero-knowledge encryption architecture. All personal data you enter into the app—including tasks, journal entries, habits, goals, financial records, and wellness data—is encrypted using AES-256 encryption on your device before it is ever transmitted to our servers.

We cannot read, access, or decrypt your data. Your encryption keys are derived from your credentials and never leave your device. Even in the event of a server breach, your personal data remains encrypted and unreadable.

Calendar Sync Exception: If you opt in to third-party calendar synchronization (e.g., Google Calendar, Apple Calendar), the calendar data shared with those services is transmitted unencrypted as required by those platforms. This is entirely optional and is the only exception to our zero-knowledge architecture.

3. How We Use Your Information

We collect your email address solely for the purposes of account authentication, Stripe payment processing, and optional calendar synchronization. We do not send marketing emails unless you explicitly opt in. We will never sell, rent, or share your personal information with third parties for their marketing purposes.

4. Third-Party Services

We use the following third-party services to operate Mono Planner:

Stripe— Payment processing. Stripe's privacy policy governs their handling of your payment data.
Supabase— Authentication and database infrastructure. Supabase is SOC 2 Type II compliant and GDPR-compliant. All user data stored in Supabase is encrypted at rest.

5. GDPR & CCPA Compliance

We respect your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, export, and delete your personal data at any time. Because of our zero-knowledge architecture, you can export and delete your data directly from within the Mono Planner app without needing to contact us.

6. COPPA Compliance

Mono Planner is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

7. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at support@monodeskco.com.