Privacy policy
19 October 2026
This policy explains how MONITY GmbH processes personal data when you use catholon.com and the Catholon iPhone, iPad and Android apps. Features process data only when you use them; downloaded materials and personal drafts can also be used locally without an account.
Controller and contact
MONITY GmbH, Sonnhaldenstrasse 75, 6331 Hünenberg, Switzerland; UID CHE-270.537.861. For privacy questions, access, correction or deletion requests, contact info@catholon.com.
Accounts and security
When you register or sign in, we process your email address, display name, account identifier, authentication credentials and security events to provide and protect your account. Optional profile images and profile details are processed when supplied. Passwords entered in the app are sent over HTTPS; the app retains session cookies rather than your login password.
Reading, study and offline work
Saved texts, PDFs, scans, OCR results, handwritten signatures and study drafts can remain on your device. Content selected for synchronization, course submissions, notes, progress, recordings and library contributions is transmitted to Catholon and associated with your account. Camera and photo permissions are used for the files you select. OCR in the bundled app is performed on the device. Signing a PDF does not independently verify your identity.
Community, messages and live sessions
If community access is enabled, Catholon processes the posts, reactions, contacts, messages, uploaded images, videos and audio you provide. Public posts can be visible to other visitors; restricted posts and messages are delivered according to the applicable visibility and membership settings. Participants in live rooms can receive your microphone or camera stream when you enable it. These features are not represented as end-to-end encrypted. Report or block tools support moderation.
Sensitive information
Prayer notes, study interests, profiles and community content may reveal religious beliefs or other sensitive information. Use local drafts when you do not want to transmit this information. Only share sensitive content deliberately and where you have the right to do so; public posts may be copied by others. Permission to use a feature does not grant permission to disclose another person’s private information.
Age ranges and community access
In app version 1.4.0, community, chat and interactive live rooms require an age range of at least 16. On supported iPhones and iPads the app requests an age range using Apple’s Declared Age Range API. A refused, unavailable or restricted response does not unlock community features. Communication restrictions are respected. Other supported clients label a self-declared age range as such. An age range is not an identity-document check. The exact date of birth is not collected by this feature. Server records store the range, source, policy and session binding; access grants expire after 15 minutes. Expired age-session records are removed by the service after 30 days and browser handoff records after one day.
External content and service providers
Hosting, email delivery, content storage and live-stream infrastructure process the technical data necessary to deliver the features you request. External video players, map tiles and navigation services can receive your IP address, device/browser information and requested content. Embedded YouTube content is supplied by Google/YouTube; navigation to Apple Maps or Google Maps is handled by the selected provider. The provider’s privacy policy applies to its independent processing. Opening external content can involve processing in the United States or other countries outside Switzerland and the EEA.
Location and device permissions
The Nearby feature uses location permission when you request it. The app uses this location locally to find nearby Mass locations; opening navigation sends the selected destination to your chosen maps service. That service may use its own location permission. Camera, microphone, photos and notifications can be disabled in device settings. Not granting a permission disables the corresponding optional feature.
Purposes and legal grounds
We process data to deliver requested account, study, communication and support functions, maintain security, moderate abuse and comply with legal obligations. Where GDPR applies, the grounds depend on the operation: performance of a requested contract (Article 6(1)(b)), legitimate interests in security and service operation (Article 6(1)(f)), legal obligations (Article 6(1)(c)), or consent for optional processing (Article 6(1)(a)). Sensitive data requires an applicable Article 9 condition, including explicit consent where required. Consent can be withdrawn for the future. Swiss data-protection law also applies to the controller.
Cookies, storage and advertising
Session and security cookies keep you signed in and protect account requests. Local storage holds language, preferences, downloads and drafts. The native app does not request an advertising identifier and includes no advertising or cross-app tracking SDK. External website content may use its own storage; optional analytics or marketing choices are separate from necessary account functions.
Retention and deletion
Local files remain until you delete them or remove the app, subject to operating-system backups. Server account and study data is retained for the relevant service and handled through the account deletion process. Security, legal, accounting and dispute records can require longer retention; backups may expire later than active data. Deleting your account does not remove copies that recipients or other users have independently saved. You can request data export or account deletion in the app’s Account > Privacy, data export & account deletion section.
Your rights and international transfers
Depending on applicable law you may request access, correction, deletion, portability or restriction, object to processing and withdraw consent. Contact info@catholon.com; we may request proportionate information to protect your account before fulfilling a request. You may complain to the Swiss FDPIC or the competent EEA authority, including CNIL in France. International transfers requiring safeguards must use the applicable adequacy or contractual protections; information about the relevant recipient and safeguards can be requested from the controller.
Backups and security
Connections to Catholon use HTTPS. Optional password-protected exports use operating-system Web Crypto to encrypt the selected backup. Keep the password: the export feature does not provide a password-recovery service. This does not mean every local cache is separately encrypted by the app. Protect your device and exported files.
Changes
Updates to this policy are published on this page. Material changes to optional data use or consent requirements must be communicated before that processing is enabled. The current policy is available at https://catholon.com/privacy.html?lang=en and inside the app, including offline.