Monthr privacy

Last updated 2026-08-18

What Monthr reads

Photos

Only the image files you explicitly drop onto a slot or choose through the open panel. Monthr reads them to lay them out and to embed them in the PDF you export. Your original files are never modified, moved, renamed or deleted. Monthr remembers the paths of the photos you chose so it can reopen your calendar next time; if a file has moved, the slot is emptied and Monthr says so.

Contacts

Only if you turn on "Birthdays from Contacts". macOS asks your permission the first time, and Monthr requests exactly two fields — name and birthday. It does not read phone numbers, email addresses, postal addresses, photos, notes, or anything else, and it does not write to your Contacts. If you decline, the rest of the app is unaffected. You can revoke access at any time in System Settings → Privacy & Security → Contacts.

What stays on your Mac

Monthr keeps its own settings and your custom events in ~/Library/Application Support/Monthr/. Nothing in that folder is transmitted anywhere. Deleting the app and that folder removes every trace of it.

The update check

Monthr checks twoplus11.com about once a week to ask whether a newer version has been released. That request sends the app version and nothing else — no identifier, no account, no information about your photos, contacts, calendars or Mac. If an update exists, Monthr downloads it from us and verifies its cryptographic signature before installing; a download that does not verify is refused.

You can turn the check off entirely in Settings → Updates. With it off, and with no business license key entered, Monthr makes no network connections at all.

The business license check

This one exists only if you buy a business license and enter the key. Monthr then sends the following to api.twoplus11.com when you activate, and again about once a day while the key is in place:

• The license key you entered, and the product it is for.
• An id derived from this Mac — the hardware serial run through SHA-256 and truncated. The serial itself never leaves your Mac, and the id cannot be turned back into it. It is what stops one seat being used on five machines.
• The computer name shown in the "Name this computer" field when you activate. This is only what you typed there, and nothing at all if you left it empty. Nothing is ever substituted for a name you did not give: not your Mac's Sharing name, not its host name, not your account name. You can change it or clear it whenever you like, and clearing the box takes the name off the next check rather than leaving the old one in place.
• The app version.

Those values are stored against your license so whoever bought it can see which machines are using their seats, and so a seat can be freed. Nothing about your photos, contacts, events or calendars is ever sent. Remove the license in the License sheet and Monthr tells the server to release the seat and stops contacting it.

What we never do

• No analytics, telemetry, crash reporting or usage tracking of any kind.
• No accounts and no sign-in. Monthr calls our licensing server only when you have entered a business license key — never for personal use.
• No advertising, and no data sold or shared with anyone.
• No cloud processing — every photo and every page is rendered locally.

Children

Monthr is a general-purpose tool and is not directed at children. Because it collects no personal information from anyone, it collects none from children.

Changes

If this policy ever changes, the updated version will be posted here with a new date, and material changes will be noted in the changelog.

Contact

Questions about privacy: report an issue.