Appearance
Privacy Policy
Effective Date: July 25, 2026 Last Updated: July 25, 2026
1. Introduction
Monitrun ("we," "us," or "our") operates the Monitrun mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our iOS application and associated web services.
By using Monitrun, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
This Privacy Policy complies with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Data Protection Act 2018, and other applicable international data protection laws.
2. Data Controller
For the purposes of the GDPR and applicable data protection laws, the data controller is:
Monitrun Website: https://monit.run Contact Email: virskor@gmail.com
3. Information We Collect
3.1 Personal Information You Provide
When you register for an account or use our Service, we may collect:
| Category | Examples | Purpose |
|---|---|---|
| Account Data | Username, email address, phone number | Account creation, authentication, communication |
| Profile Data | Display name, avatar | Personalization |
| Payment Data | Subscription plan, transaction ID (via Apple In-App Purchase) | Subscription management |
| User Content | Website URLs, monitoring configurations, custom HTTP headers | Providing the monitoring service |
| Communications | Support messages, feedback | Customer support, service improvement |
3.2 Information Collected Automatically
When you use the Service, we automatically collect:
| Category | Examples | Purpose |
|---|---|---|
| Device Information | Device model, OS version, device name, unique device identifiers | Push notifications, security, troubleshooting |
| Log Data | IP address, access times, app crashes, performance data | Service improvement, security monitoring |
| Usage Data | Features used, monitoring frequency, interaction patterns | Service optimization, analytics |
| Push Notification Token | Apple Push Notification service (APNs) device token | Delivering alert notifications |
| Monitoring Data | Ping results, HTTP status codes, response times, SSL certificate information | Providing core monitoring functionality |
3.3 Information from Third Parties
We do not purchase or receive personal data from data brokers. The only third-party data we receive is:
- Apple In-App Purchase receipts: Transaction identifiers and subscription status from Apple
- Apple ID (if used for Sign in with Apple): Email address (or private relay email)
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contractual necessity (Art. 6(1)(b) GDPR) |
| Providing monitoring services | Contractual necessity (Art. 6(1)(b) GDPR) |
| Push notification delivery | Legitimate interest (Art. 6(1)(f) GDPR) — timely alerts about your websites |
| Service analytics and improvement | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f) GDPR) |
5. How We Use Your Information
We use collected information for the following purposes:
- Service Provision: Creating and managing your account, executing website monitoring checks, sending alerts
- Push Notifications: Delivering real-time notifications about website status changes, SSL certificate expirations, and service disruptions
- Subscription Management: Processing and verifying premium subscriptions via Apple In-App Purchase
- Service Improvement: Analyzing usage patterns to improve features, performance, and reliability
- Security: Detecting and preventing fraud, abuse, and security vulnerabilities
- Communication: Sending service announcements, security alerts, and support responses
- Legal Compliance: Meeting applicable legal and regulatory obligations
6. Data Sharing and Disclosure
6.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6.2 Service Providers
We may share data with trusted service providers who assist in operating our Service:
| Provider Type | Purpose | Data Shared |
|---|---|---|
| Cloud Infrastructure (hosting) | Server hosting, data storage | Account data, monitoring data, logs |
| Push Notification Service (APNs) | Delivering push notifications | Device token, notification content |
| Apple App Store / In-App Purchase | Payment processing | Transaction identifiers |
| Analytics Service | Usage analytics | Anonymized usage data |
All service providers are contractually bound to protect your data and may only process it for the specified purposes.
6.3 Legal Requirements
We may disclose information if required to do so by law or in response to valid requests from public authorities (e.g., court orders, government agencies).
6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify you before your personal data becomes subject to a different privacy policy.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction.
We implement appropriate safeguards for international transfers, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Data processing agreements with all international processors
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure that any transfer of your personal data outside these regions meets GDPR requirements.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account existence + 30 days after deletion |
| Monitoring data and logs | Duration of account existence; deleted within 30 days of account closure |
| Push notification tokens | Until device is unregistered or account is deleted |
| Subscription records | Duration of subscription + 7 years (tax/legal requirements) |
| Support communications | 2 years after last interaction |
| Server logs | 90 days |
Upon account deletion, personal data is removed or anonymized within 30 days, except where retention is required by law.
9. Your Rights
9.1 GDPR Rights (EEA, UK, Switzerland)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:
- Right of Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing (Art. 18): Limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time (for consent-based processing)
To exercise these rights, contact us at virskor@gmail.com. We will respond within 30 days.
9.2 CCPA Rights (California)
If you are a California resident, you have the following rights under the CCPA:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information; no opt-out required
- Right to Non-Discrimination: Equal service regardless of exercising privacy rights
9.3 How to Exercise Your Rights
- Email: virskor@gmail.com
- In-app: Settings → Privacy → Data Rights Request
- Response time: Within 30 days (may be extended by 30 days with notification)
We will verify your identity before processing any request to protect your privacy and security.
10. Data Security
We implement industry-standard security measures to protect your personal data:
- Encryption: All data in transit is encrypted using TLS 1.3; sensitive data at rest is encrypted using AES-256
- Authentication: Secure token-based authentication with session management
- Access Control: Role-based access controls; only authorized personnel can access user data
- Monitoring: Continuous security monitoring and intrusion detection
- Penetration Testing: Regular security assessments by qualified third parties
- Incident Response: Documented breach notification procedures (notification within 72 hours as required by GDPR Art. 33)
Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
11. Children's Privacy
The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.
If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information. If you believe we may have collected such information, please contact us at virskor@gmail.com.
For users between ages 13 and 16 (or the applicable age of consent), we may require verifiable parental consent before processing personal data, in compliance with GDPR Art. 8 and COPPA.
12. Cookies and Tracking Technologies
The iOS app does not use traditional cookies. However, we use the following technologies:
| Technology | Purpose | Type |
|---|---|---|
| Device Push Token | Push notification delivery | Essential (cannot be disabled) |
| Local Storage | Caching monitoring results, user preferences | Essential (on-device only) |
| Analytics Identifiers | Aggregated usage analytics | Optional (can be disabled in Settings → Privacy) |
You can disable analytics tracking at any time in the app's Settings under Privacy → Analytics.
13. Specific Disclosures
13.1 Apple App Store Compliance
- We comply with Apple's App Store Review Guidelines and Apple Developer Program License Agreement
- Any data collected through Apple's APIs (e.g., Sign in with Apple) is handled in accordance with this Privacy Policy
- We do not use Apple's IDFA (Identifier for Advertisers) for tracking
13.2 Push Notifications
Push notifications are used exclusively to alert you about:
- Website status changes (up/down)
- SSL certificate expiration warnings
- Service announcements and security alerts
You can disable push notifications at any time in iOS Settings → Notifications → Monitrun.
13.3 Location Data
Monitrun does not collect or process precise geolocation data. We do not request location permissions.
13.4 Third-Party Analytics
If we use third-party analytics services, we configure them to:
- Anonymize IP addresses where possible
- Not share data with the third party for advertising purposes
- Allow opt-out through app settings
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes:
- We will update the "Last Updated" date at the top of this policy
- We will notify you via in-app notification or email at least 14 days before the changes take effect
- Continued use of the Service after the effective date constitutes acceptance of the revised policy
We encourage you to review this Privacy Policy periodically.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
| Channel | Details |
|---|---|
| virskor@gmail.com | |
| Privacy Rights Request | Settings → Privacy → Contact Us |
| Mailing Address | Available upon request |
If you are located in the EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local Data Protection Authority.
16. Region-Specific Supplements
16.1 European Economic Area (EEA) / United Kingdom
- Data Protection Officer (DPO): Not required (core activities do not involve large-scale systematic monitoring), but inquiries can be directed to virskor@gmail.com
- Lead Supervisory Authority: Determined upon establishment in the EU/EEA
16.2 California, USA
- CCPA Notice: We do not sell personal information as defined by Cal. Civ. Code Section 1798.140(ad)
- Categories collected: Identifiers, commercial information, internet activity information, device information
- Categories disclosed: As described in Section 6 above
16.3 Brazil (LGPD)
- This policy complies with Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018)
- Legal bases under LGPD mirror those described in Section 4
- Exercise rights by contacting virskor@gmail.com
This Privacy Policy is available in English only. In case of any discrepancy, the English version shall prevail.