Privacy policy

1. Who we are

The Monkey Tribe is a small mountain-guiding business in Serbia run by Branko, who is responsible for your data (the "controller"). For questions or requests, write to branko@themonkeytribe.com.

We follow Serbia's Law on Personal Data Protection and, for walkers in the EU, the GDPR.

2. What we collect

• Account: your email address and password (stored encrypted by our login provider), or your Google email if you sign in with Google.
• Profile: name, surname, date of birth and phone number. Optional: a profile photo, allergies and medical notes, an emergency contact, and Instagram, Strava or Telegram handles.
• Hikes: the hikes you sign up for, waitlist places, whether you drive and how many seats you offer, payment status (marked by hand; we never see card details), attendance, patches and free-tour credits.
• Settings: your privacy switches and the language you want emails in.
• Emails you send us.

3. Why we use it

• To run your bookings: seats, cars, waitlist offers, payments and attendance. Without this we can't provide the hikes you sign up for.
• To keep you safe on the mountain: your guide has your phone, allergies and emergency contact on the day. Medical notes are optional, and we only keep them if you add them.
• To email you about your hikes (confirmations, offers, changes, cancellations, reminders) and when new hikes open.
• To show the community features you switch on: who's going lists, your public profile and your patches.

We don't use your data for advertising, profiling or automated decisions about you.

4. Who can see what

• The guide of a hike you're confirmed on, and the admin, see your profile details, contacts, allergies and emergency contact. Guides only see this for hikes they lead.
• Other walkers see your first name and photo on a hike's who's going list, but only if "show me on lists" is on.
• Anyone can see your public profile only if you turn it on, and then only the parts you choose (patches, walks, age, each contact).
• Your email address, date of birth, allergies and emergency contact are never shown publicly.

5. Services we use

A few companies process data for us, only to run the site:

• Supabase: database, login and photo storage (servers in Frankfurt, EU).
• Vercel: website hosting.
• Resend: sending our emails (EU region).
• Cloudflare: our domain, and forwarding the emails you send us.
• Google: only if you choose to sign in with Google.

Some of them are US companies, so data may leave Serbia and the EU. They're bound by data-protection agreements with standard contractual safeguards.

6. Cookies

We only use the cookies the site needs: one keeps you signed in, one remembers your language. Your browser may also store small things on your device, like which patches you've already seen. No analytics, no advertising cookies, no third-party trackers.

Some of our emails load fonts from Google Fonts, which lets Google see your IP address when you open them.

7. How long we keep it

We keep your data while you have an account. You can delete your account yourself in Settings. We then remove your photo, birthday, medical notes, emergency contact, social links and public page straight away. Your name, phone, email and walk and payment history stay visible only to your guide and the admin for 12 months, so an unpaid walk can still be settled and the books add up. After that they are blanked. Anything the law makes us keep longer (for example for accounting) is kept only for as long as it requires.

8. Your rights

You can:

• see and correct most of your data yourself on your profile;
• ask for a copy of everything we hold about you;
• ask us to correct, delete or stop using your data;
• withdraw consent at any time, for example by clearing your medical notes or switching your public profile off;
• complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or to your data-protection authority in the EU.

Write to branko@themonkeytribe.com and we'll answer within 30 days.

9. Changes

If we change this policy in a way that matters, we'll update the date at the top and tell you by email.