Privacy Policy — Moments

1. Scope and contact

This policy explains how the operator of Moments ("Moments", "we", "us") handles personal data in the Moments mobile app, this website, support, and moderation. For privacy questions or requests, email hello.themomentsapp@gmail.com.

2. Data we handle

Account and profile: email address, authentication records, display name, profile image, account identifiers, and settings.
Private journal content: photos, videos, captions, dates, places, and other details you add to a Moment. Journal content is private unless you choose to share that Moment with a Circle.
Circles: Circle membership, invitations, Moments you share or unshare, reactions, and related activity needed to show a Circle to its members.
Location: a place or location attached when you choose to add one. We do not use location for advertising or tracking.
Notifications: device push token, notification preferences, and delivery-related information.
Safety and support: reports, report category, the reported content and context needed to review it, moderation decisions, appeals, and messages you send to support.
Technical data: app version, device and operating-system information, timestamps, and privacy-filtered error and performance diagnostics.

3. How and why we use data

We use data to create and secure accounts; store and display your journal; deliver Circle sharing, invitations, reactions, notifications, and maps; answer support requests; investigate reports; enforce our Terms and Community Guidelines; prevent abuse; restore eligible accounts; and maintain app reliability. Depending on where you live, we rely on performing our contract with you, your consent, compliance with law, and our legitimate interests in operating a safe and reliable service.

We do not sell or broker personal data. Moments has no third-party advertising, cross-app tracking, or behavioral advertising.

Circle members can see content you choose to share with that Circle, associated reactions, and the identity connected to that activity. They cannot see Moments that you have not shared with them. Anyone with an invitation link may attempt to open it, so treat invitation links as private; the website does not display invitation credentials, member lists, or Circle content.

We use service providers only to operate Moments:

Supabase for authentication, database, and media storage infrastructure.
Resend for transactional emails such as account or service messages.
Expo Push to deliver push notifications to devices.
MapTiler to provide map tiles and place-related features when you use them.
Grafana for privacy-filtered operational diagnostics. Diagnostics are configured to exclude journal media and captions, Circle content, invitation links, and precise location.

Providers process data under our instructions and their own applicable privacy terms. We may also disclose information when legally required, to protect people and the service, or as part of a business reorganization subject to appropriate safeguards. We do not publish private content as part of moderation.

5. Reports, moderation, and retention

Circle members can report content or conduct. Our operator may review the report, the reported Moment or interaction, relevant Circle context, and account history; take no action; remove or restrict content; suspend an account; or restore an account after review or appeal. Reporters and reported users may receive a limited outcome notice, but not another person’s private data.

We retain evidence associated with a safety report for 90 days after the case is resolved, then delete or de-identify it unless a longer period is reasonably necessary to comply with law, respond to an active dispute, or protect the service or a person from a credible threat. This evidence retention can temporarily outlast unsharing, Circle departure, or an account-deletion request.

6. Other retention and deletion

We keep account and content data while your account is active and as needed to provide Moments. You can delete individual Moments or request account deletion. Account deletion removes or de-identifies your account and content from active systems, subject to reasonable processing time, backups that expire on their normal cycle, the 90-day post-resolution moderation period above, and limited records we must keep for legal, security, fraud-prevention, or dispute purposes.

Deleting an account does not control copies another Circle member exported or captured outside Moments before deletion. Unsharing stops the Moment from being available in that Circle through the service, subject to moderation evidence retention.

7. Your choices and rights

You can edit profile and journal information, control Circle sharing, unshare Moments, manage notifications in the app or device settings, leave a Circle, and request account deletion. Depending on your location, you may have rights to access, correct, delete, or receive a copy of your data; object to or restrict processing; withdraw consent; and complain to your local data-protection authority.

Email hello.themomentsapp@gmail.com from your account email. We may need to verify your identity. We will not discriminate against you for exercising a privacy right.

8. Security and international processing

We use access controls, transport encryption, restricted operational access, and other reasonable safeguards. No service can guarantee absolute security, so keep your device and invitation links secure. Our providers may process data outside your country; where required, we use appropriate contractual or legal safeguards for those transfers.

9. Children

Moments is not intended for anyone who cannot legally consent to the service or whose use requires parental consent that has not been provided. Contact us if you believe a child’s data has been submitted improperly.

10. Changes

We may update this policy as Moments changes. We will post the revised policy here, update the effective date, and provide additional notice in the app when a change is material.