Privacy Policy · Reunified

This policy explains how Nikodem Bernat, operating as Reunified (“we”), handles personal information in the Reunified services: your Reunified account, the Mono, Studio, and Links apps, their cloud services, the reunified.com website, including public profiles, and short links on reunified.link. Contact reunified@reunified.com with privacy questions or requests.

Information and purposes

Your Reunified account

One Reunified account signs you in to every Reunified app. To provide it, authenticate access, and prevent abuse, we process your email addresses, display name, password hash and two-factor settings if you set them, sign-in and verification records, account identifiers, device and session information, IP address, and security events.

Mono

Your workspace: Mono stores conversations, memories, tasks, settings, credentials, and files on your device. Features you enable can synchronize records between your devices, upload vault files, or run tasks in the cloud. Those services process the content and metadata needed to perform the requested operation.
AI and integrations: When you send a request to an AI model, run a skill, or connect a tool or service, the selected provider receives the request and relevant context. This can include conversation history, attachments, memories, project content, tool results, or integration credentials needed for that feature. Review the context and permissions before using a provider or tool.
Device permissions: Dictation uses your microphone and operating-system speech services when you start it. Location-aware skills can request your device location after you enable the relevant skill permission; location context can then be included in the skill request. If device location is unavailable, supported cloud features may use an approximate location inferred from your IP address. On supported platforms, features can also access photos, the camera, calendar events, or reminders when you choose those actions. Biometric unlock uses the operating system’s authentication result; we never receive your fingerprint or face template. You can manage these permissions in your operating-system settings.

Studio

Connected platforms: When you connect a social network (such as Bluesky, Facebook, Instagram, Threads, X (Twitter), Mastodon, Misskey, or Telegram), we store the access credentials that platform issues, your profile details on it, and the statistics it reports, such as follower counts and post engagement. We use them only to publish what you schedule, show your insights, and keep your profile current. You can disconnect a platform in Studio at any time, and you can also revoke our access in that platform’s settings.
Your content: We store the posts, articles, links, and media you create, schedule, or publish, and send them to the platforms you choose at the time you choose.
Your public profile: Your profile at reunified.com/@handle shows your name, handle, avatar, links, and published posts and articles, and it can offer an RSS feed and a newsletter sign-up. Anything you publish there is public. Whether your email address appears on the profile is up to you.
Newsletter and feed subscribers: If you subscribe to someone’s newsletter on a Reunified profile, we process your email address, a confirmation token, and your subscription status to confirm and manage the subscription. RSS subscriptions are tracked with an anonymous feed identifier.

Links

Your links: We store each short link’s title, destination address, code, destination rules (the countries, languages, platforms, and devices they match), and whether it is shown or pinned on a public profile. A link belongs either to one of your identities (your @handles, or a team’s you manage) or to your account alone. Links shown on a public profile are public.
Clicks: When someone opens a short link on reunified.link, we record when it happened, the visitor’s country (derived from their network location by our hosting provider), preferred language, platform (such as iOS or Windows), device type, browser family, the host of the site they came from (or that there was none), and which rule sent them on. We do not store the visitor’s IP address, full browser identification, or any cookie or identifier, and visits from bots and link previews are not recorded. Click records are used for the link’s statistics and to bill clicks, and are shown only as totals and breakdowns to the people who may see that link’s statistics.
Visitors: To deliver the redirect, our hosting provider processes the visitor’s IP address and request details, as for any website visit. If the link’s owner has no credits left, the visitor sees a page saying the link is unavailable and nothing is recorded.

Teams

Membership: If you belong to a team, its owner and the members it allows can see your name, email address, role, groups, and permissions, and they can change your permissions, suspend your access to the team, or remove you.
Activity and usage: Teams keep a log of changes to the team and report credit usage by member, identity, and app, which those who manage the team’s billing can view and export.
Managed accounts: If your account uses an email address on a domain a team has verified, that team manages your account: it can name it, suspend it, decide which apps and features you may use, and pay for your usage from its credits. You are told when your account is managed.

Purchases

We process purchase identifiers, products, amounts, currency, subscription status, credit balances, and usage records (such as posts published with Studio and clicks on short links) to fulfill purchases and operate metered services. App Store and Google Play purchases are processed by Apple or Google and managed through RevenueCat. Purchases on reunified.com and in Mono on Windows, and team subscriptions, use Stripe, which processes the payment details you enter there. We never receive your full card number.

Diagnostics, support, and the website

Apps: The apps use Publishable for app configuration, usage events, logs, and feedback. These records can include an installation identifier, app and operating-system versions, device model, language, app events, and diagnostic information.
Services: Our servers record request errors and security logs, and Mono records skill-installation statistics.
Website: When you visit reunified.com, our hosting provider processes your IP address and request details to deliver and protect the site. If you join a waitlist, we process your email address and the platforms you selected to tell you when the app is available.
Support: Information you include in feedback or support messages is used to investigate and respond.

We use this information to deliver the features you request, including statistics for your links, maintain accounts and billing, secure the services, diagnose problems, and improve reliability. We do not sell personal information or use it for third-party advertising. Where data-protection law requires a legal basis, we rely on performing our agreement with you for requested features, legitimate interests in security and service maintenance where appropriate, compliance with legal obligations, and consent where required for optional processing.

Local access and encryption

Mono’s desktop application can read and modify files and run commands under your user account. Local shells, coding agents, and MCP servers can access information available to that account. Only connect tools and grant access to resources that you trust.

Mono’s synchronized workspace records are end-to-end encrypted with keys managed by your devices. This does not mean that every operation is end-to-end encrypted: an AI provider or cloud task must receive readable inputs to process them, and account, billing, device, and service metadata are processed separately. Studio content and links are not end-to-end encrypted, because we must read them to publish your posts and redirect your links.

Recipients and international processing

We use these providers to deliver the services:

Cloudflare, for hosting, storage, email, and some AI processing.
Groq, for supported AI models.
Publishable, for app services and diagnostics.
Apple, Google, RevenueCat, and Stripe, for the purchases described above.

The provider used for an AI request depends on the selected model and service availability.

The social platforms, AI providers, agents, MCP servers, and other integrations you choose to connect receive what you send them and process it under their own privacy terms. Disconnecting an integration stops future use through Reunified but does not delete information already sent to that service. We may disclose information when legally required or when necessary to investigate abuse and protect the services and their users.

These providers may process information in countries other than your own, including outside the European Economic Area. Contact us for information about the providers and transfer safeguards that apply to your use of Reunified.

Retention

We keep information for as long as it is needed for the purpose it was collected for.

Your content: On your device or in the features you enable, your content remains until you delete it, apply a supported retention setting, or close your account.
Link clicks: Click records stay with their link and are deleted with it.
Payment and security records: These may remain after account closure where needed for accounting, fraud prevention, disputes, or legal obligations.
Caches and backups: Temporary caches and backup copies may expire separately from active records.
Uninstalling: Uninstalling an app does not by itself delete your account or information held by connected services.

Deleting your data

Your whole account: Close your Reunified account from account settings in any Reunified app. This deletes your account and the data each Reunified service holds for it, apart from the records described under Retention. Closing the account affects every Reunified app, as explained in the deletion flow.
Mono only: Mono also offers a separate control to clear Mono data while keeping your account and purchased-credit records.
Links: Deleting a link deletes its rules and click records. Closing your account deletes your links and those of the identities that belong to you.
Studio connections: Disconnecting a platform in Studio deletes the credentials we stored for it. You can also remove Reunified’s access from that platform’s own settings, for example Facebook’s Apps and Websites page.
Newsletters: Each newsletter email contains a link to unsubscribe.
By email: If you cannot use these controls, or want us to delete specific information, email reunified@reunified.com from an address on your account. We will confirm when the deletion is complete.

Your rights

You can review or change your account details and sessions, manage connected platforms and tools, and contact us to request access to, correction, export, or deletion of your personal information. Depending on where you live, you may also have rights to restrict or object to processing, to withdraw consent without affecting earlier lawful processing, and to complain to your data-protection authority. We may need to verify your identity before acting on a request.

Children

The Reunified services are not directed at children under 13. If you are under the age at which you can consent to data processing where you live (16 in some countries), you need a parent’s or guardian’s permission. If you believe a child has given us personal information without the required permission, contact us so we can delete it.

Security

We protect information with encryption in transit, access controls, and encrypted storage of sensitive values such as two-factor secrets and platform credentials. No service is perfectly secure, so protect your devices and credentials, and tell us at reunified@reunified.com if you notice anything suspicious.

Changes

We will update this page when our practices change and give additional notice where required. The date above identifies the latest revision.