Privacy Policy

Last updated: 24 October 2026

Mad Monk is provided by Md Ahad Hosain, an individual developer publishing on Google Play as Bengal Tiger Studio. This policy describes how the Mad Monk Android app handles information. Contact support@madmonk.site with questions or privacy requests.

1. Information we handle

Account and profile. Google sign-in provides an account identifier and available profile information, such as your name, email address, and Google profile-photo URL. Supabase manages your Mad Monk authentication account. We also store profile details you choose, such as a display name or uploaded photo. This account/profile processing applies to both free and Premium accounts.

Focus sessions, tasks, and preferences. The app stores session duration, mode, dates, completion/progress information, tasks you enter and their details, and settings such as theme and sound choices. These support your timer, to-do list, history, streaks, and focus-time-based levels.

Purchases. Google Play processes payments. We process purchase tokens and identifiers, product/plan information, verification status and times, expiry, and account-binding information to verify Premium access, prevent unauthorized claims, manage cancellation, and restore valid purchases. We do not receive your payment-card details.

Support and technical records. If you email support, we receive your email address, message, and any information you choose to provide. Authentication, hosting, and email services may process technical records such as IP addresses, request times, and error/security events to operate and protect the service. Do not send passwords, sign-in codes, or payment-card details.

2. How we use information

• To sign you in and provide profiles, tasks, focus sessions, progress, and preferences.
• To provide cloud features for eligible Premium accounts.
• To verify purchases, restore eligible access, and process cancellation and account deletion.
• To answer support requests, investigate failures, prevent misuse, and meet applicable legal obligations.

The current app does not integrate Google AdMob or a dedicated advertising/usage-analytics SDK. We do not sell personal data. If these practices change, we will update this policy and provide disclosures or obtain consent where required before introducing the new practices.

3. Local storage and cloud features

Free accounts: focus history and tasks are stored locally by Mad Monk rather than synced through its Premium cloud feature. Account information, profile details, and any uploaded photo still use Supabase. Signing in does not by itself back up all app content.

Premium accounts: eligible task and focus-session data can also be sent to Supabase for cloud features. Sync requires connectivity and successful uploads. Unsynced changes and device-specific settings may not be recoverable after reinstalling.

The current app does not automatically erase free users' data at the start of each month. Clearing app storage, uninstalling, losing a device, or deleting an account may remove local data.

Android backups: depending on your device and Google settings, Android's separate backup or device-transfer features may keep copies of app data. These are distinct from Mad Monk Premium cloud sync and are managed through device/Google backup settings. We cannot remotely erase copies on other devices or in backups controlled by you.

Optional uploaded profile photos are stored in Supabase and displayed using a hosted image URL. Such a URL may be accessible to someone who obtains it; do not use a confidential document as your avatar.

4. Services and sharing

We use service providers for the functions below. Information is shared as necessary for these functions, not sold for advertising.

• Google: sign-in, Google Play purchases and verification, and any Google-managed device backup you enable. See Google's Privacy Policy.
• Supabase: authentication, database, storage, and server functions. See Supabase's Privacy Policy.
• Email services: support sent to support@madmonk.site is forwarded through ImprovMX to our Gmail inbox. Resend supports outgoing email. See the ImprovMX and Resend privacy policies.
• GitHub Pages: hosts this website and may process visitors' technical connection information. See GitHub's Privacy Statement.

We may disclose information where required by law or necessary to investigate misuse and protect users' rights. Providers may process information outside your country, subject to their applicable safeguards and privacy terms.

5. Device access and controls

Internet access supports sign-in, purchase verification, cloud features, and hosted content. Optional Do Not Disturb access lets the app adjust interruption settings during focus sessions when you enable it; revoke this access in Android settings. If you choose a profile photo, the app uses the image you select. Sound, vibration, and notification behavior can be controlled through the app and available Android settings.

6. Account deletion

Use Profile → Delete account, or request deletion through our Delete Account page or support email. We verify ownership before processing support requests.

Successful deletion removes your Mad Monk authentication account and stored email, profile and uploaded photo, tasks, focus history, progress, and associated active cloud records. In-app deletion also clears that account's saved app data on the device completing the flow, including for free users. It does not delete your Google/Gmail account or Google's purchase records. A remote email request cannot erase offline copies from your devices.

For verified renewing Mad Monk subscriptions, the in-app flow asks permission to cancel renewal and verifies cancellation before completing deletion. If a step fails, the app explains that completion could not be confirmed and provides retry or support options. Sending an email alone does not cancel billing. Check Google Play subscriptions to confirm renewal status.

Returning with the original Google sign-in and purchasing Google Play account can restore unexpired subscription access or a valid lifetime purchase after verification. Deleted tasks, photos, history, and progress are not restored.

7. Retention and limited records after deletion

• Active accounts: account/profile and cloud data are kept to provide the service until you remove the data or account, subject to applicable legal obligations. Premium expiry alone is not an account-deletion request.
• Purchase recovery: coded purchase and Google identity/account fingerprints, product type, and paid expiry are retained for eligible restoration and fraud prevention. These are pseudonymous, not anonymous. They do not include the deleted Gmail address, name, photo, tasks, or history. Subscription recovery records are removed after paid expiry during daily cleanup. Lifetime recovery records remain to support lifetime access. Contact support to request their removal too; this prevents automatic recovery through this mechanism.
• Deletion receipts: a random receipt fingerprint may remain for up to 24 hours plus the daily cleanup interval to confirm interrupted requests. An incomplete deletion may retain the account reference until the issue is resolved.
• Support records: correspondence is kept as needed to handle requests and follow-up, resolve disputes, and satisfy applicable obligations. Contact us to request removal of support correspondence; it is separate from app database records.
• Provider logs and technical backups: these follow the relevant provider's retention and rotation settings and may persist after active records are deleted. Mad Monk currently uses Supabase Free; we do not promise immediate erasure from every infrastructure log or backup. Any separately retained export must be handled as part of a deletion request, and completed deletions must be reapplied before a restored backup serves users. Contact support for the applicable retention details.

8. Your choices and rights

You can edit available profile details, remove an uploaded photo, manage tasks, change permissions, and request account deletion. Depending on applicable law, you may have rights to access, correct, obtain a copy of, restrict, or object to processing of personal information, or complain to a data-protection authority. Contact support@madmonk.site; we may verify ownership before responding.

9. Security

We use measures including HTTPS, authenticated access, database access controls, and server-side purchase verification. No storage or transmission method is completely secure. Protect your Google account and devices and contact us if you suspect unauthorized access.

10. Children's privacy

Mad Monk is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and take appropriate action.

11. Updates and contact

We will update the date on this page when this policy changes. For material changes, we will provide appropriate notice and obtain consent where required; continued use is not a substitute for consent when the law requires it.