Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how Andrew Spearman ("I", "me", "my"), the developer of the Monch app and the monchapp.com website ("Monch", the "App", the "Service"), handles information in connection with your use of the Service.

Monch is an iOS app that is currently free, with no Monch accounts and no in-app purchases or subscriptions. Monch is designed to be privacy-first: the content you create and store in the App stays on your device and in your own private iCloud, and is not accessible to me unless you deliberately choose to send or share it.

By using Monch, you agree to the practices described in this Privacy Policy.

No Advertising or Ad Tracking

Monch does not show advertising. I do not track you across other companies' apps or websites, and I do not share your personal information with advertisers.

I use analytics and crash data to fix bugs, improve the App, and understand how Monch is used.

Information You Store in the App

When you use Monch, you may create or import content such as recipes, your cookbook, meal plans, grocery lists, and notes. This content is stored locally on your device.

If you have iCloud enabled for Monch, this content is synced to your own private iCloud database via Apple CloudKit so it is available across your Apple devices. Data in your private CloudKit database is stored under your Apple Account and is governed by Apple's Privacy Policy. As the developer, I cannot access the contents of your private CloudKit database.

If the App later offers features that let you share content with other people, content you choose to share through those features may leave your private database and become visible to the people you share it with.

You can delete this content at any time within the App, by disabling iCloud for Monch in your device settings, or by deleting the App.

Information I Collect Automatically

To keep Monch reliable, I use third-party tools that collect limited technical information when you use the App. This may include:

Analytics data — pseudonymous usage information such as which features are used, in-app events, app version, device type, operating system version, and coarse location (derived from your IP address, which is not stored). This is used to understand how the App is used and to prioritize improvements.
Crash and diagnostic data ("Log Data") — when the App encounters an error, information such as device type, operating system version, app configuration, the date and time of the error, and a technical error report may be collected so I can diagnose and fix the problem.

I do not use this information to identify you personally, and I do not combine it with the content you store in the App.

When I May Disclose Information

I may disclose information covered by this Privacy Policy:

Where the law requires it — for example, in response to a valid court order, subpoena, or lawful request from a government, law enforcement, or regulatory authority.
To protect rights and safety — where I reasonably consider disclosure necessary to investigate, prevent, or take action about suspected fraud, security incidents, breaches of the Terms & Conditions, or risks to the safety of any person.
In a business transfer — if I incorporate, restructure, or sell or transfer all or part of the App or my business, information covered by this Privacy Policy may be transferred to the acquiring or successor entity as part of that transaction. Any successor will be bound by this Privacy Policy in respect of that information unless and until you are told otherwise.

Legal Bases for Processing (UK/EU users)

Where the UK GDPR or EU GDPR applies to you, I rely on the following legal bases:

Legitimate interests — to analyze usage and fix errors so the App works well and remains secure, balanced against your rights.
Consent — where required, for example for certain analytics; you can withdraw consent at any time (see "Your Choices").
Legal obligation — where I must process information to comply with the law.

Data Retention

Content you store in the App is retained on your device and in your private iCloud until you delete it or delete the App.
Analytics and crash data are retained by the tools I use for the periods set out in their policies, after which they are deleted or aggregated.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding personal information about you:

the right to access the information held about you;
the right to correct inaccurate information;
the right to delete information ("right to be forgotten");
the right to restrict or object to certain processing;
the right to data portability; and
the right to withdraw consent at any time.

Because Monch does not maintain accounts and your content stays on your device and in your own iCloud, the most direct way to exercise these rights over your content is to delete it within the App or to delete the App. For analytics and crash data, you can contact me using the details below and I will respond as required by applicable law.

United Kingdom and European Economic Area

If you are in the UK or EEA, you have the rights described above under the UK GDPR / EU GDPR. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to access and delete it, the right to correct it, and the right to opt out of the "sale" or "sharing" of personal information. I do not sell or share your personal information. I will not discriminate against you for exercising your privacy rights. You may exercise these rights by contacting me using the details below.

Other regions

Users in Australia, New Zealand, and elsewhere have the rights granted under their local privacy laws (including the Australian Privacy Principles and the New Zealand Privacy Act 2020). You can contact me to exercise those rights.

Your Choices

Analytics: You can turn analytics off at any time in Settings > Monch > Share Analytics.
Crash reports: Sharing crash data with developers is controlled by iOS. You can change this in Settings > Privacy & Security > Analytics & Improvements > Share With App Developers.
iCloud sync: You can turn off iCloud for Monch in your device settings at any time.
Deleting data: You can delete your content in-app or remove the App entirely.

International Transfers

The third-party tools I use may process limited technical data on servers located outside your country, including the United States. Where required, these transfers are protected by appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

Children's Privacy

Monch is not directed to children under 13, and I do not knowingly collect personal information from children under 13. If you are in a region where a higher age of digital consent applies (for example, up to 16 in parts of the UK/EU), you should only use the App if you meet that age or have permission from a parent or guardian. If you believe a child has provided personal information through the App, please contact me and I will take appropriate steps to address it.