Privacy
What Monsho does with a photograph of you.
Monsho is being built and is not open to the public. Nobody has used the app, so no photograph, reference or picture of anyone is held today. The waitlist described below is the only record held today, and only if you have given an address. The remainder of this notice states what is held once the app opens.
Who is responsible
Monsho is built and run by one person in the Netherlands, who is the controller of the personal data described in this notice. Enquiries and requests, including requests to see, correct or delete personal data, are made to info@monsho.app.
The waitlist on the front page
The front page carries a field for an email address. It is the only element on either page that transmits anything, and it transmits only on submission. The basis is your consent, given when you submit the form.
-
What is stored
The address, and the time it was submitted. Nothing else: not your IP address, not your browser, not the page you arrived from, not a country and not a source.
-
Why
To send one message, when Monsho opens in the Netherlands and Belgium. The address is not used for any other purpose, is not combined with other data, and is not disclosed or sold.
-
Where
Supabase, in the EU, in a table that no browser and no signed-in user can read. Only the server that receives the form can write to it.
-
How to have it removed
Write to info@monsho.app stating the address to remove. It is deleted on request. No reason is required.
-
How long
Until Monsho opens and the single message has been sent, or until you ask, whichever is first. The list is then deleted.
Submissions to the form are rate limited. The limit retains no personal data: it counts requests against a short-lived value derived from the address, using a key held only in memory and discarded when the server is replaced.
What is collected in the app
- An email address, for sign-in.
- One photograph of you, if you choose to provide one.
- A body reference derived from that photograph.
- The pictures made from that reference.
- What you tap, save and skip in the app.
- Your sizes, your height and the departments you shop, if you provide them.
Why the photograph is treated differently
A photograph of your body is sensitive personal data. It is collected on your consent and on no other basis. Consent is requested once, in plain words, and is given by an explicit action. No option is pre-selected.
If you decline, the app still works. It shows the shops' own photographs instead of pictures of you.
Consent may be withdrawn at any time. Withdrawal deletes the photograph, the reference and every picture made from it.
Where it is held
-
Supabase
The database and the sign-in system. In the EU. No pictures.
-
Cloudflare R2
The photograph, the reference and the pictures. An EU bucket.
-
fal
Puts an item on your reference. It receives the reference and the item picture.
-
Fly.io
The server, in Amsterdam. It holds nothing at rest.
-
Sentry
Error reports, in the EU. Every picture, picture address and signed address is removed before an error report is sent.
Each is a processor acting on Monsho's instructions under a written agreement. The full list, with what each one receives, is published before Monsho opens to the public and is kept current thereafter.
What is never done
- Your photograph is never sent to a shop.
- Your pictures are never public and never shown to another user.
- Nothing about you is sold.
- No picture, picture address or signed address is ever written to a log.
How long it is kept
Retention periods are set before Monsho opens to the public and are stated in this notice once set.
This does not affect deletion on request. Everything held about you can be deleted from inside the app at any time.
What you can do
- See what is held about you.
- Correct it.
- Delete your account and everything in it, from inside the app.
- Ask for a copy of your data.
- Withdraw consent for the photograph.
- Complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.
These two pages
They set no cookies, load nothing from another site and count no visits. The typefaces are served from this site. No analytics of any kind is in use.
The front page runs one script, served from this site. It changes the picture in the phone, moves the row of pictures on request, and submits the waitlist form without leaving the page. It reads nothing about you and transmits nothing unless you press the button.
Changes
Last updated 18 August 2026, when this notice was rewritten in a formal register. No statement of fact changed. What was removed was the explanation of why the notice exists, the justification of what it does not yet state, and the description of the code behind it. Before that, 15 August 2026, when the waitlist section was added.