Last updated: 2 September 2026
Leave & PTO Tracker is an app for monday.com that records requests for time off, the decision taken on each one, and the leave balance that follows from them. This page explains exactly what the app stores, where it stores it, who can read it, and the two ways to erase all of it.
The app keeps one record per monday.com account, held in the app's own storage inside monday.com's cloud, in the European Union region. That record holds the time off your people ask for, what was decided, the display names shown on the screens, and the company's settings. It holds no email addresses, no phone numbers and no monday.com account name. There is no server of ours anywhere, no database of ours, and no way for us to look at your data.
Each request is one line in your company's record, and holds:
Sick leave, said plainly. "Sick leave" is one of the four leave types, so a record that says a named person was on sick leave from one date to another is information about their health. It is there because an absence app that cannot tell sick days from holidays cannot work out a balance. Two things follow, and they are built into the app rather than promised here:
So that the approval queue shows names instead of numbers, the app stores, for each person who has opened it: their monday.com user ID and the display name monday.com gives for them. Nothing else about them is asked for or kept — not their email address, not their photo, not their job title, not their team.
The record also has room for a per-person leave profile — their own yearly entitlement, days carried over, start date and holiday country. In this version the screens set those values for the whole company rather than per person, so those per-person fields stay empty; they are listed here because the record can hold them.
Set on the Setup tab by someone who can approve leave: the country whose public holidays apply, the days of leave per year, the carry-over rule, any per-type limits, and the list of monday.com user IDs allowed to approve. A company that sets nothing still works — the app needs no configuration to run.
So that the app knows whether your subscription is running — which monday.com requires every app to check for itself — it keeps what monday.com tells it about your plan: the plan identifier, whether it is a trial, the date it runs to, monthly or yearly, the pricing version, the seat limit, and which notice it last received. No payment details of any kind — no card, no billing address, no invoice, no amount. Those never reach the app: monday.com handles all payment.
When your account installs or uninstalls the app, or changes its subscription, monday.com sends the app a notice. That notice contains the email address, name and country of the person who clicked, along with your account's name and web address.
The app reads two things from it — what kind of notice it is, and the numeric account ID — and discards everything else. It is not written to storage and it is not written to a log line either, because a log is exactly where a leak goes unnoticed. This is a property of the code, not an intention: the file that handles those notices says so at the top, and the automated test suite fails if it starts keeping more.
The app runs on monday code, monday.com's own hosting for marketplace apps, in the EU region, and it stores your company's record in the storage that platform gives it. That is the whole of it:
Both of these delete the file; neither marks it as deleted and keeps it.
DELETE, and the server checks that word again before doing
anything.After either one, the app is empty and starts over from the next time somebody opens it. We keep no copy to restore from, because we never had one. If you need the record, export it first: the Report tab downloads the year as a spreadsheet, or copies it as text.
For as long as the app is installed. The app does not thin out or delete old requests on its own — a leave record that silently drops last year is worse than no record — so what is there is what your company put there, until your company erases it by one of the two routes above.
If you are in the European Union or the United Kingdom, the GDPR gives you the right to access, correct, export or delete your personal data. The company that installed the app is the data controller; we are its processor. In practice everything the app holds about you is inside your own employer's leave record, so the quickest route for any request is your own monday.com administrator, who can see it, export it and erase it without us. You can also write to us at the address below.
For your legal team, the Data Processing Agreement sets out the same facts in the form the GDPR asks for (Article 28), and applies automatically from installation.
If this policy changes, the date at the top changes with it and the new version is published here before it takes effect.
Leave & PTO Tracker is supplied by Kauê Natan Gonçalves Bidim, trading as Saoirse Software, in Ireland. Questions about this policy — or a request to see or delete data — go to help@saoirsesoftware.com.