MMoment

Privacy Policy

Last updated: 27 July 2026 · Effective: 27 July 2026

Moment Labs Ltd (“Moment”, “we”, “us”, “our”) is a company registered in England and Wales. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have. For anything in here, contact us at [email protected].

For the purposes of the UK/EU GDPR, we are the data controller for the information described below.

1. Who can use Moment

Moment is for people aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18 (see §9).

2. What we collect

You give us directly:

• Phone number — to create and verify your account (via an SMS code).
• Name and, optionally, a profile photo — shown to your friends.
• Your content (“Moments”) — the text, photos or doodles, optional place, and replies you post. Moments are ephemeral: they expire after a few hours and are then deleted.
• Your availability status — when you flip “Free now” or “Free later”, so friends know you’re around. This is short-lived: it expires automatically and is deleted.

Only with your permission, and only for a specific purpose:

• Coarse location — only if you attach a place to a Moment. We store a place name, never precise GPS coordinates, and only while that Moment is live.
• Contacts — only if you choose to import them, and only to match against people already on Moment so you can add them. We do not store your contacts and do not message anyone on your behalf.

Collected automatically to make the app work:

• A push notification token — so we can send you notifications. Removed when you sign out.
• Basic technical data — e.g. device/app version and error information needed to operate and secure the service. We do not use advertising identifiers or any cross-app/website tracking.

We do not run ads, and we do not currently use third-party analytics or crash-reporting SDKs. If that ever changes, we will update this policy and, where required, ask for your consent first.

3. How we use your information, and our legal bases

We use your information only to run Moment: to sign you in, show your friends what you’re up to, let people join and reply, surface who’s free, and send notifications. Under GDPR our legal bases are:

• Performance of a contract — to provide the core service you signed up for.
• Your consent — for contacts matching and attaching a location (you can withdraw at any time in your device settings).
• Legitimate interests — to keep the service secure, prevent abuse, and respond to reports.

We do not sell your personal information and do not use it for advertising or profiling.

4. Who can see your content

Only your mutual friends. There is no public feed, no followers, and no way for strangers to see your Moments, your location, or your availability. Reported content may be reviewed by us (see our Terms of Use).

5. Service providers we use

We rely on trusted providers who process data on our behalf under their own terms:

• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Messaging) — stores your account, content, and delivers notifications. See Google’s Privacy Policy.
• Apple (Apple Push Notification service) — delivers notifications to your device. See Apple’s Privacy Policy.

These providers act as our data processors and are not permitted to use your data for their own purposes.

6. International transfers

Our providers may store and process data on servers outside your country (including the United States). Where data is transferred internationally, it is protected by appropriate safeguards (such as Standard Contractual Clauses) as required by law.

7. How long we keep it

• Moments and availability status — auto-expire within hours and are then deleted.
• Account data (phone, name, photo, friendships) — kept while your account is active.
• Reports — kept as long as needed to review and act on them, and to keep the service safe.
• Deletion — you can delete your entire account and all associated data at any time from Settings → Delete Account. This is permanent and irreversible. Residual copies may persist briefly in encrypted backups before being overwritten in the ordinary course.

8. Security

Data is encrypted in transit (HTTPS/TLS) and access is restricted by server-side security rules so you can only see what your friends have chosen to share with you. No system is perfectly secure, but we take reasonable measures to protect your information.

9. Children

Moment is strictly for users 18 and over. If we learn that someone under 18 has created an account, we will delete it. If you believe a minor is using Moment, contact [email protected].

10. Your rights

Depending on where you live (e.g. UK/EU under GDPR, California under CCPA/CPRA), you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these directly in the app (edit your profile; Settings → Delete Account). For anything else, email [email protected] and we will respond within the time required by law. UK/EU users also have the right to complain to their local data protection authority (in the UK, the ICO).

We do not “sell” or “share” personal information as those terms are defined under California law.

11. Changes to this policy

We may update this policy; material changes will be reflected here with a new “Last updated” date and, where appropriate, in-app notice.

12. Contact

Moment Labs Ltd — [email protected]. A postal address is available on request and on the Companies House public register.