Privacy Policy

The short version

Monet is local-first. Your captures, annotations, and handoff bundles stay on your device and, if you use iCloud sync, in your own iCloud. There is no account system and no usage analytics. The iPad App uploads no project content to us; the Desktop program sends us crash reports so we can fix failures, and you can turn that off in Settings. This website collects only what you choose to give it: your email address if you joined our email updates list, your purchase details from the payment partners named below, and your message if you write to support.

The Monet iPad App

• Website captures, screenshots, annotations, and generated bundles are stored on your device and, when iCloud sync is on, in your own private iCloud (CloudKit and iCloud Drive). Either way they live in your Apple account, not on our servers, and we cannot see them.
• Sign-in sessions you save for capturing gated sites are stored on your device and used only to load those sites during capture. They are never transmitted to us.
• Subscriptions are processed by Apple through your App Store account. We receive aggregate sales reports from Apple; we do not receive your name, payment details, or Apple ID.
• The app contains no third-party advertising or analytics SDKs.
• The app contacts the websites you choose to capture, the same way a browser does. What you capture is between you and those sites; make sure you have the right to review them.
• Optional cloud capture: if you add your own ScreenshotOne or Urlbox key, the page URLs you capture with the cloud crawl, along with any sign-in session you attached for that site, are sent to the service you chose under your account and its privacy policy. This is off by default and uses your key from the device Keychain.
• Optional GitHub and Vercel connections: if you sign in to start a project from a repo or a Vercel project, your token is stored in the device Keychain and used only to list your repos and projects. Those requests go straight from your device to GitHub or Vercel; nothing passes through us.
• Optional Project Primer setup: a Primer can configure a project, capture limits, and the names of connector values the project needs. Primers reject passwords, tokens, cookies, API keys, and other credential-like values.
• Optional local transfer: when you explicitly request a Hermes transfer, Monet connects directly to the local address in its short-lived link. You compare a four-digit code and select each value before transfer. Approved values are end-to-end encrypted in transit and stored in this device's Keychain. The session and private values do not pass through IamMonet or Vercel.
• Optional AI Design Critic: if you add your own Anthropic API key, the captured page images you choose to critique are sent to Anthropic under your key and Anthropic's privacy policy. This is off unless you add a key; the key stays in your Keychain and we never see it or the content.
• On launch, the app fetches a small static version file from iammonet.com to check for required updates. The request carries no identifiers; standard server logs apply as described below.

The Monet Desktop program

• The Desktop program for macOS and Windows is local-first in the same way: captures, annotations, and bundles stay on your machine.
• Desktop checkout runs onPaddle, our merchant of record. Paddle collects your name, email address, billing country, and payment details to process the purchase, under its own privacy policy. We receive your email address and subscription status; we never see your card number.
• We useRevenueCatto validate purchases and keep your subscription active. RevenueCat processes purchase receipts, a random app identifier, and basic device information on our behalf, under its own privacy policy.
• Crash and error reporting: the Desktop program sends crash reports and error events toSentry(Functional Software, Inc., US) so we can find and fix failures. A report contains the error and stack trace, the app and operating system versions, and an anonymous session ping when the app starts. Reports never include your captures, annotations, project content, or API keys, and we strip auth headers and identity fields before anything is sent. Error log lines can quote a page URL the app was working on when it failed. Crash reporting is on by default and can be turned off in the app's Settings.
• If the Desktop program ever collects anything beyond this, this policy will change first.

This website

• The launch-notification form collects your email address and nothing else. We use it to send launch announcements for Monet products, then we stop. Reply to any email or write to support@iammonet.com to be removed.
• The support form collects your email address and your message so we can reply, and nothing else. We keep support threads only as long as needed to resolve them.
• The site sets no tracking cookies and runs no advertising.
• Our hosting provider (Vercel) keeps standard server logs, such as IP address and requested page, for security and operations.

Your rights

Email support@iammonet.com to ask what we hold about you (for most people: one email address or nothing), to correct it, or to have it deleted. California residents have additional rights under the CCPA; we honor deletion and disclosure requests regardless of where you live. We do not sell personal information.

Children

Monet is a professional tool and is not directed at children under 13. We do not knowingly collect information from them.

Changes and contact

If the app or site ever changes what it collects, this policy changes first and the effective date above moves. Questions: support@iammonet.com, or Garton Holdings, LLC, Modesto, California.