Politik konfidansyalite
Paj sa a disponib an anglè sèlman.
Effective November 7, 2026 · Version 2026-11-07
This policy explains what Moncors collects, why, who can see it, and the choices you have. In short: we collect what is needed to deliver your training program, and we also use it to run, secure, research and improve Moncors and to build new features, including with machine-learning tools. Your coach can see your training and nutrition data. We share information with the companies that run our services and in the other ways described below.
1. Who we are
Puralico, LLC, doing business as Moncors (“we,” “us”). Contact: hello@moncors.com. We decide how and why the information described here is used.
2. Information we collect
Information you give us
- Account: name, email address, date of birth, time zone, unit preference, and a password (stored only as a cryptographic hash).
- Training: your program and schedule; every set you log (exercise, weight, repetitions, reps in reserve, timestamp); how hard sessions felt; notes; exercise substitutions and reasons.
- Body measurements: body weight and any circumference measurements.
- Nutrition: food you log, including items scanned by barcode, quantities, calorie and macronutrient totals, and the targets your coach sets.
- Health-related information you choose to share: anything you tell your coach through the app, such as guidance from your primary care provider about your training. We do not ask for or keep medical records, diagnoses, medication lists or health screening answers.
- Check-ins: weekly answers on sleep, energy, soreness and steps, and notes to your coach.
- Communications: messages, support requests and feedback.
- Photos (optional): progress photos if the feature is enabled for your account. It is off by default and off for anyone under 18 unless a guardian asks us in writing to turn it on.
Information we collect automatically
- Device and log data: IP address, browser and device type, operating system, pages and features used, and timestamps.
- Audit records of significant actions, such as a program assigned, a consent granted or a data export requested.
- Cookies and similar technologies. In the app, we use only those needed to sign you in and keep the Service secure. On moncors.com and blog.moncors.com, we use Vercel Web Analytics and Speed Insights, which measure page views and performance without cookies, and cookies that remember your language and light or dark display choice. If we add other analytics or measurement tools, we will update this policy.
Information from others
- Your coach and, for a minor, your guardian.
- Third-party data sources, such as nutrition and barcode databases.
- Service providers that help us run and secure the Service.
Information we create
We generate information from what you give us, such as totals, trends, scores, flags and the outputs of models. We call this Derived Data.
What we do not collect on purpose: your precise location, your contacts, your browsing history outside Moncors, government ID numbers, or payment card numbers. If we add paid plans, a payment processor will handle card details.
3. How we use information
We use the information in section 2, including health information, for these purposes:
| Purpose | What it involves |
|---|---|
| Delivering the Service | Showing your program, recording what you log, calculating totals and trends |
| Enabling coaching | Letting your coach see your training, nutrition and progress so they can adjust your program |
| Features and alerts | Flags to your coach, such as stopped logging or stalled progress. These are conveniences and are not monitoring of your health |
| Improving and developing Moncors | Analytics, research, testing, product development, and training, testing and improving machine-learning and artificial-intelligence models |
| Personalization | Tailoring what you see in the Service |
| Communications and marketing | Service messages; and emails about Moncors' services, which you can opt out of |
| Security and integrity | Preventing abuse, investigating incidents, and keeping audit records |
| Business operations | Billing, support, planning, reporting, financing, and corporate transactions |
| De-identified Data | Creating aggregated or de-identified information and using, sharing, licensing or selling it |
| Legal and safety | Responding to lawful requests, enforcing our terms, and protecting people |
| Anything else | Any other purpose described to you at the time, or for which you give consent |
We may combine information across your use of the Service and across users. We use service providers' tools, including artificial-intelligence tools, to process information for these purposes.
4. How we share information
- Your coach. The coach you have an active relationship with can see your training logs, body measurements, nutrition logs, check-ins and program history. They cannot see a progress photo unless you share that photo with them. When the relationship ends, their access ends.
- Your guardian, if you are under 18. See section 6.
- Service providers. Companies that help us run the Service, with access as needed to do that:
| Provider | Role |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Application hosting and content delivery; website analytics (Web Analytics and Speed Insights) |
| Resend | Transactional and service email |
| Google (Google Workspace) | Our business email, including messages you send to hello@moncors.com |
| Others we use from time to time | Analytics, support, payments, AI services, security, and professional advisers |
- Affiliates and successors. If Moncors is acquired, merged, financed or sold, or its assets are transferred, information may transfer as part of that transaction. We will give notice before information becomes subject to a materially different privacy policy.
- Legal, safety and emergencies. We will disclose information if required by law, subpoena or court order, to protect rights, safety or security, or when we reasonably believe it is necessary to prevent serious harm, for example giving health information you have shared with us to emergency personnel.
- De-identified Data. We may share, license or sell De-identified Data to anyone.
- With your direction or consent. We share identifiable information with others when you or your guardian ask us to or agree to it.
Sale and advertising. We do not currently sell identifiable personal information or share it for cross-context behavioral advertising. We reserve the right to change this by updating this policy. Where the law requires your consent, or a guardian's, for identifiable health information or a minor's information, we will not apply the change to you until you give a separate written authorization.
5. Health information
We treat body measurements, nutrition data, check-in answers and any health-related information you choose to share with your coach as health information. We do not ask for medical records, diagnoses or medication lists; if your primary care provider gives you guidance about your training, you can share it with your coach as your provider directs. We collect health information because training safely requires it, and for the purposes in section 3. We collect and use it only with the consent you or your guardian give through the Health Data Consent, which you can withdraw at any time by writing to hello@moncors.com. Withdrawing may stop you from using the Service, and it does not undo uses already made, De-identified Data, or models already trained. Health information is shared only as described in section 4. We may disclose it to your coach, to our service providers, in an emergency, and as the law requires. We do not sell identifiable health information without a separate signed authorization.
Washington, Nevada and other states treat some of this as “consumer health data.” This section, with sections 3, 4 and 9, is our notice for that data.
6. If you are under 18
Under 13. Moncors is not for you. We do not allow accounts for anyone under 13 and we delete any we find. A parent who believes we hold information about a child under 13 should write to hello@moncors.com.
13 to 17. Your account needs a parent or guardian's recorded consent before it activates. Until then, the account is locked and we do not collect training or nutrition data.
While the account is active, your parent or guardian can ask to see everything stored about you, get a copy, correct it, delete it, or withdraw consent. Withdrawing consent locks the account and stops further collection.
By default for accounts under 18, progress photos are off and estimated calorie expenditure is not shown. We may change these defaults. We do not use a minor's name, photo, likeness or identifiable results publicly without the guardian's separate written permission. The use of a minor's information described in sections 3 and 4 applies to accounts under 18, including the license in the Terms, and a guardian's consent covers it.
7. How we protect information
We use administrative, technical and physical safeguards that we consider reasonable for the kind of information we hold. No system is perfectly secure, and we cannot guarantee the security of any information. You are responsible for keeping your password secret. If a breach affects your information, we will notify you and any authority as the law requires.
8. How long we keep information
| Information | Retention |
|---|---|
| Account, training, health and other account data | As long as your account is active. If you delete your account, we keep it for 14 days so you can ask for a copy, which we email to you, and then we delete it |
| Progress photos | Until you delete them or your account is deleted |
| Data exports | Emailed to you; any temporary copy in our storage is deleted after about seven days |
| Signed agreements and consent records | 7 years |
| Audit records | 2 years |
| Server logs | 90 days |
| De-identified Data, and models and analyses already created | Indefinitely |
We keep signed agreements and consent records longer than other data, because they show what you agreed to. We may also keep other records where the law requires it or to defend or bring claims, including for a client who was a minor, since the time for a claim can run from the age of majority. Copies in backups age out on our normal schedule.
9. Your choices and rights
You, or your guardian if you are under 18, can write to hello@moncors.com to:
- access the information we hold about you;
- export a copy (CSV, JSON or a readable PDF);
- correct inaccurate information;
- delete your account and its data;
- withdraw consent that you or your guardian gave, including the Health Data Consent;
- opt out of marketing emails; and
- object to a particular use, and we will stop it or explain why we cannot.
We respond within 45 days. If we need more time, we will tell you why and may extend once by up to 45 more days where the law allows. We may need to verify your identity first. When you delete your account, we keep your data for 14 days so you can ask for a copy, which we email to you, and then we delete it, except for information we are allowed or required to keep (section 8), De-identified Data, and models already trained, which cannot be unwound.
We do not charge you or treat you worse for using these rights. Withdrawing consent for information we need to provide the Service may mean we can no longer provide it.
If you live in a state whose privacy law gives you additional rights, you have them as the law provides. Where a law lets you appeal our decision on a request, write to hello@moncors.com with “Appeal” in the subject line.
10. Where information is held; browser signals
Moncors operates in the United States and stores information there. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, where privacy law may differ from your own. We do not currently respond to “Do Not Track” signals. Where the law requires, we honor opt-out preference signals such as Global Privacy Control.
11. Changes to this policy
We may update this policy. If a change is material (a new category of information, a new kind of recipient, or a materially different use), we will give notice by email or in the app before it takes effect and update the effective date. Where the law requires your consent, or a guardian's, before we apply a change to information already collected, we will ask for it. We keep prior versions and will give you one on request.
12. Contact
Questions, requests or complaints: hello@moncors.com
Puralico, LLC, doing business as Moncors. Our mailing address is available on request: email hello@moncors.com.