Privacy Policy

Information you provide

Account. When you sign up we collect your email address, your name, and optionally a profile photo. If you sign in with Google or Apple, we receive basic profile information from that provider.

Your moments. The content you create — memory titles, notes and private notes, dates, photos, tags, links, and the people you tag — is stored so you can return to it and, if you choose, share it.

People you add. The names and details you record about the people in your life, including any photos or contact details you choose to enter.

Places. When you attach a place to a moment, we store the place name, address, and its precise map coordinates so the moment can be shown on a map. We treat these coordinates as sensitive information, do not track your location in the background, and store only the places you deliberately add.

Sharing. When you share a moment or contribute to one, we store who it is shared with (by email) and the contributions involved, so the right people can see it.

Information collected automatically

Usage and device data. To keep the app reliable, we collect basic analytics about which features are used and crash and error diagnostics, along with general device information such as device model and app version.

Notifications. If you enable push notifications, we store a device push token so we can deliver them.

How we use your information

We use your information to provide and sync the app, deliver the moments and reminders you ask for, enable sharing with people you choose, respond to support requests, keep the service secure, and understand and improve how Moments works. We do not sell your personal information.

Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information on these legal bases: to perform our contract with you by providing Moments and the features you use; our legitimate interests in keeping the app secure, reliable, and improved, where those interests are not overridden by your rights; your consent where we ask for it, such as for push notifications or optional analytics, which you can withdraw at any time; and compliance with our legal obligations.

How we share information

With people you choose. Moments you share are visible to the people you share them with. You control what is shared and with whom.

With service providers. We rely on trusted providers to run the app: Supabase (database, authentication, and file storage), Google Maps Platform (place search and maps), Expo (push notification delivery), and PostHog and Sentry (analytics and error monitoring). They process data only to provide their service to us.

For legal reasons. We may disclose information if required by law or to protect the rights, safety, or property of our users, the public, or Engoa.

Business transfers. If Engoa is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Where we store and process your information

Moments is operated from the United States, and our service providers may store and process your information in the United States and the European Union — our primary database is currently hosted in the EU. When your information is transferred across borders, we rely on appropriate safeguards, such as standard contractual clauses, where the law requires them.

Data retention

We keep your information for as long as your account is active. You can delete your account at any time from Settings → About & Help → Delete account, which removes your moments, people, and profile from our systems. Some records may be retained where required by law or for legitimate purposes such as security and fraud prevention.

Your choices and rights

You can review and edit your moments, people, and profile in the app at any time, and delete your account to remove your data.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. EU/EEA and UK residents have these rights under the GDPR. To make a request, contact us at the address below; we may need to verify your identity first.

California privacy rights

If you are a California resident, the CCPA and CPRA give you specific rights regarding your personal information.

Categories we collect: identifiers such as your name and email; your user content such as photos, notes, and the people and places you add; precise geolocation (the coordinates of places you attach to moments); internet and app activity such as which features you use; and device information. We collect these from you and from your device.

We use this information to provide, secure, and improve Moments as described above, and we disclose it only to the service providers listed under “How we share information,” for those purposes. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Your rights include the right to know, access, correct, and delete your personal information; to limit the use of sensitive personal information such as precise location; and not to be treated differently for exercising these rights. To exercise them, contact us at the address below.

Security

We protect your information with encryption in transit, access controls, and row-level security, so that your private content is accessible only to you and the people you share it with. No method of storage or transmission is completely secure, but we work to protect your data.

Children

Moments is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will update the date above and, for significant changes, provide notice in the app.

Contact us

Questions about your privacy? Reach us at huedreamshop@gmail.com. Engoa LLC is the controller responsible for your information.