Privacy

Monch is run by Max Wilson, trading as Monch, in Scotland. This page explains what Monch keeps about you, why, and what you can do about it. If anything is unclear, email support@monch.cooking.

What Monch keeps

• Your account: your name, email address and profile picture link from Google (if you sign in with Google), and passkeys you add (only their public keys - nothing that could unlock them).
• Signing in: each signed-in device's session, with its IP address and browser details, so you stay signed in and we can spot misuse. Sessions end after 30 days without use, and after six months at most.
• What you put in: your recipes and their earlier versions, photos, notes, favourites, meal plans, shopping lists and household. Photos are redrawn on your device before upload, which removes hidden details such as location and camera.
• Billing: whether your household subscribes, which plan and when it renews. Card details go straight to Stripe; Monch never sees them.

Who else handles it

• Cloudflare runs Monch and stores its database and photos (we ask for them to be kept in Western Europe), and forwards email sent to support@monch.cooking.
• Google, if you sign in with Google, and for the support mailbox.
• Stripe takes payments and keeps billing records.

These companies may handle data in other countries, under their own safeguards for UK personal data. Monch doesn't sell your data, show ads, or use analytics or tracking.

Who can see your things

Your recipes, plans and shopping list are seen only by the people in your household. The personal note you can add to a recipe ("Your note") is seen only by you.

Why

To provide the service you've signed up for (that's the legal basis: our contract with you), and to keep it secure and working (our legitimate interest).

On your device

Monch uses cookies only to keep you signed in and to remember your time zone. Your browser also keeps your theme choice, unsaved edits and pages you've opened, so they work offline. There are no advertising or tracking cookies.

How long

• For as long as you have an account.
• Deleting your account (Household → Account) removes your account, sessions, passkeys and notes, and your recipes and their photos - unless you hand the recipes to someone in your household. The household's shared plan and list stay with the people still in it.
• Photos you upload but never save are deleted after a day.
• Backups of the database are deleted within 30 days.
• Stripe keeps billing records for as long as the law requires.

Your rights

You can ask for a copy of your data, for it to be corrected or deleted, or object to how it's used - email support@monch.cooking. If you're not happy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Monch isn't meant for children under 13.

Changes

If this changes, we'll update this page and the date at the top.