Privacy

Last updated October 23, 2026

Mon is the account behind sorrycc’s apps, such as Mayoi. This page says what Mon stores about you, why, and how to delete it.

What Mon stores

• Your profile from GitHub or Google. When you sign in, Mon asks GitHub or Google for your account id, name, username, profile picture address and email address. It keeps the email address only when GitHub or Google has verified it, so that signing in with the other one finds the same account. From Google, Mon asks only for the openid, email and profile scopes; from GitHub, read:user and user:email. Mon never sees your password, and it doesn’t keep the access tokens GitHub or Google give it.
• Signed-in browsers and apps. For each browser signed in to this website, Mon keeps the browser’s user agent and when it signed in. For each app you sign in, it keeps the app’s name, the device name the app sends (usually the computer’s name), and when it was last used. An app unused for 90 days is signed out, and an app signing in again on the same device replaces its earlier sign-in. Sign-in keys are stored only as hashes.
• App settings. Apps you sign in can save their settings in your account so they follow you to other machines. Each app can only read and write its own settings.
• AI usage. When an app or one of your API keys uses an AI model through Mon, Mon records which model, which app or key, how many tokens went in and out, whether it worked, how long the model took to answer, and when. It keeps these records, and daily totals of them, for 90 days, to apply your plan’s limits. It doesn’t store or log what you send to the model or what the model answers.
• Ikaga requests. If you use Ikaga, Mon stores each Claude Code permission prompt or question it sends you while you’re away: the tool and what it would do, such as a command or a file change, the project folder, the session, the device that sent it, and your answer. Mon keeps them for 7 days, so you can see what you decided, then deletes them. Ikaga is turned off unless you turn on Away in its app. If you use Ikaga on an iPhone, Mon keeps the phone’s push address from Apple, until you sign the app out, and tells the phone of each request through Apple’s push service. Those notifications carry only the kind of request and its id: the phone fetches the details from Mon, so they don’t pass through Apple. If you send tasks to your Macs with Ikaga, Mon stores each task: the Mac, the project folder, the prompt, and how it went, with the coding agent’s last message after each step, cut short, for 7 days. Each Mac that takes tasks tells Mon its name and the project folders and coding agents it offers, until it’s signed out. If you turn on Watch GitHub on a Mac, it reads the new issues and pull requests of your projects’ repositories with your GitHub login and sends each to TypeSafe and DeepSeek, through Mon’s AI gateway, to judge whether to ask you about it and to draft a reply; one it asks you about is stored at Mon as a request, with its title, the start of its text, the reply and the task suggested, for 7 days.
• Crash reports. When an app crashes and you choose to send its crash report, Mon stores the report: the app’s version, the operating system and processor, when it happened, and the crash’s log, which says where in the app’s code it crashed. The app takes your home folder’s name out of the log first, and Mon does it again. Crash reports are anonymous: Mon doesn’t link them to your account or keep where they came from, even if you’re signed in. It keeps them for 90 days.
• Feedback. When you send feedback from an app, Mon stores what you wrote, its kind, the contact you gave, the app’s version, the operating system and processor, and the screenshots, files and app log you chose to include, with your home folder’s name taken out of the log. If you’re signed in, it’s linked to your account, so sorrycc can answer you; otherwise it’s anonymous. Mon keeps it for a year, and deletes it with your account.
• Email. If an admin lets you, apps you sign in can send email through Mon, from Mon’s address, with a line saying it was sent for you. For each email, Mon records the app, the recipient, the subject, whether it was delivered, and when, for a year, and deletes the records with your account; it doesn’t keep the email’s text. If you get an email through Mon, its link stops that app emailing you: Mon keeps your address and the app’s name, and nothing else, so it won’t send to you again.

Mon doesn’t record your IP address, use analytics or ads, or sell your data, and it shares it only as described below. Its server logs record which pages were requested, not who requested them.

Cookies

Mon sets two cookies, both needed to sign in: mon_session keeps you signed in for up to 30 days, and a short-lived cookie protects the GitHub or Google sign-in step for ten minutes.

Who else is involved

• GitHub and Google sign you in, under their own privacy policies. Your profile picture loads straight from them.
• DMIT hosts the server Mon runs on, in the United States.
• Cloudflare stores copies of Mon’s backups, in its R2 storage, and sends the emails apps send through Mon, with Cloudflare Email Service.
• AI providers answer the requests you send through Mon’s AI gateway, under their own privacy policies. Mon passes on the request as you sent it, but not who you are. The providers are DeepSeek (Hangzhou DeepSeek Artificial Intelligence), whose servers are in China, and TypeSafe (TypeSafe AI), which answers the TypeSafe requests. If you don’t use Mon’s AI models, nothing is sent to them.

Deleting your data

On your account page you can sign out any browser or app, delete any app’s settings or your Ikaga history, disconnect GitHub or Google, or delete your account, which deletes everything above right away, AI usage records included. Mon keeps daily backups of its database for two weeks on its server and 30 days at Cloudflare, so deleted data is gone from every backup within 31 days.

Contact

Questions or requests about your data: sorrycc@gmail.com. If this policy changes, the date at the top changes with it.