Mona Offline Privacy Policy

Last updated: October 30, 2026

Mona Offline is made by tivity B.V. in Amsterdam. This policy describes which data the app and this website process, why, and what you can do about it.

It is short, because there is little to tell.

Who is responsible

tivity B.V.
Keizersgracht 720 HV
1017 EW Amsterdam, The Netherlands
Chamber of Commerce (KvK) number 84898569
hello@monaoffline.com

What Mona does not do

Before we describe what does happen, this may be more useful to know.

Mona has no accounts. You create nothing and you log in nowhere. There is no password, no profile and no login session.

Mona contains no ads and no advertising code. It also has no analytics package, no crash reporting and no other third-party software that could collect data on our behalf. So there is no party looking over your shoulder.

Mona does not sell your data and shares nothing with third parties for their own purposes.

Mona does not look at your internet traffic. See the sections on the VPN on Android and on Screen Time on iPhone and iPad below.

Which data we process

There are exactly two streams. Both are optional, you switch both on yourself, and you can switch both off again at any time. If you do not switch them on, no data at all leaves your device.

1. Pseudonymous usage statistics

If you choose this during the introduction, the app sends one small message a day containing:

• a pseudonymous installation code
• the date
• whether the gate is on or off (Android), or whether you have given Mona permission for Screen Time (iPhone and iPad)
• the number of times you dialed in today
• the number of times yesterday
• the total since installation
• the version number of the app
• the version you first opened Mona with

What that installation code is. A short string of characters that the app generates at random on first launch, for example m3a9c1fad. It is not derived from your device, your Google account, or the advertising identifier of Android. It exists only in the app and on our side.

Why pseudonymous and not anonymous. Anonymous would mean the messages cannot be brought together. They can: the code stays the same, so the messages from one installation form a series. We cannot connect that series to a person and we do not try to, but it remains a code that belongs to your installation. That is why we call it pseudonymous, and why the code is in the app's settings screen: so that you can ask for it to be deleted.

What for. To see whether people keep using Mona. That is the only question we ask with it.

What Google sees along the way. The message goes to Google Apps Script, and as with any request over the internet, the recipient sees the IP address your device uses for the connection. That is not part of the contents of the message, we store it nowhere and we use it for nothing.

Legal basis. Your consent. You give it on a screen with two buttons, and you can withdraw it at any time with the switch in the app.

2. Your email address for the waitlist

If you sign up on this website, we process:

• your name
• your email address
• whether you have an Android device
• how often you catch yourself scrolling without having decided to (one of four answers)
• that you signed up through the website

If you sign up in the app, we only ask for your email address. No name is sent then, only a fixed label that tells us the signup came from the app. Whether it is an Android device is sent along as well.

What for. To send you one message as soon as Mona is available, and to be able to send you new versions if you take part as a tester. As soon as you sign up, we also send you a confirmation right away. No newsletter, no third-party advertising.

Legal basis. Your consent. You sign up yourself and you can unsubscribe at any time.

These two cannot be linked to each other

This is a property of the data rather than a promise: the statistics carry an installation code but no address, and the signup carries an address but no installation code. On our side there is no key that could join them.

What the VPN does on Android, and above all what it does not do

This section applies to Android only. On iPhone and iPad, Mona does not use a VPN. See the section on Screen Time below.

On Android, Mona uses the device's VPN function to interrupt your internet connection. That sounds more drastic than it is, so here is exactly what happens.

The connection goes nowhere. Mona sets up a tunnel that exists only on your own device, with no server on the other end. There is no endpoint, no DNS server and no forwarding. The app takes the data packets off that tunnel and throws them away. Taking them off is necessary, otherwise the tunnel fills up, but nothing looks inside them: nothing is parsed, counted, stored or sent. "Reading" here means no more than taking in and discarding, and the app holds no line of code that looks at what is inside.

Because no traffic leaves your device through Mona, there is also no path over which anything could be intercepted.

The apps you put on your own list stay completely outside that tunnel. Their traffic follows the normal route of your device and does not touch Mona.

Screen Time on iPhone and iPad

On iPhone and iPad, Mona does not use a VPN. Instead, Mona uses Apple's Screen Time features (Family Controls) to put the apps you choose behind the dial tone.

For that, Mona asks for permission on your own behalf (individual authorization). No parent, administrator or other person monitors you. You can withdraw the permission at any time in your device settings, under Screen Time.

You choose which apps those are yourself, with Apple's system picker. Mona stores that choice only on your device and sends it nowhere. Apple does not give Mona a list of your apps: to Mona, the choice consists of codes that Mona cannot translate back into apps.

The shielding itself is carried out by iOS. Nothing leaves your device through Screen Time. The only data Mona sends are the two optional streams above.

Who we share data with

With nobody, in the sense that nobody receives it for their own purposes.

Four services process data on our behalf and on our instructions:

• Google Apps Script receives and stores the pseudonymous usage statistics.
• Supabase receives and stores the waitlist signups.
• SMTP2GO sends the confirmation email after a signup and receives your email address and your name for that purpose. If Supabase cannot be reached at that moment, SMTP2GO carries your signup to our own address instead, so that it is not lost. Your name, your answer about your phone and your answer about scrolling then go along with it.
• Vercel hosts this website and runs the function that prepares the confirmation email. In doing so, Vercel processes technical data about your connection, such as your IP address.

Nobody else. No ad networks, no data brokers, no analytics companies.

How long we keep data

Usage statistics: up to 24 months after the last message from that installation code. After that we delete the rows.

Waitlist signups: until you unsubscribe, and at the latest 12 months after the launch of the app.

For SMTP2GO and Vercel the period is set by their own policy rather than by us. SMTP2GO keeps the data about a sent email (sender, recipient, delivery) and deletes it after 35 days; it does not keep the content of the email, since that is a separate archiving feature which we do not use. Vercel keeps the log lines of its functions for an hour. Those log lines do not contain your email address, because our functions do not write it into them.

If you ask for deletion sooner, we do it sooner. See below.

Your rights

You have the right to know which data we hold about you, to have it corrected, and to have it deleted. You can withdraw your consent at any time.

For your email address that is simple: email hello@monaoffline.com and we will remove your signup.

For the usage statistics you need your installation code, because without that code we cannot tell which rows are yours. The app shows it in the settings screen. Include it in your message to hello@monaoffline.com and we will delete the matching rows.

You can also simply switch the statistics off with the switch in the app. The sending stops immediately.

Security

All data that the app or the website sends travels over an encrypted connection (HTTPS).

Complaints

If you disagree with how we handle your data, please let us know at hello@monaoffline.com. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Changes

If anything changes in what the app processes, we will update this policy and change the date at the top. For changes that affect your consent, we will ask you again in the app.