Last updated 6 October 2026. Effective 6 October 2026.
Moment Labs Ltd ("Moment", "we", "us", "our") is a company registered in England and Wales.
This policy explains what we collect, why, who we share it with, how long we keep it, and the
rights you have. For anything in here, contact us at
[email protected].
For the purposes of the UK/EU GDPR, we are the data controller for the information described
below.
1. Who can use Moment
Moment is for people aged 18 and over. It is not directed at children, and we do not knowingly
collect data from anyone under 18. See section 9.
2. What we collect
You give us directly:
Your phone number, to create and verify your account with an SMS code.
Your name, and a profile photo if you add one. These are how people recognise you, so
they are shown to your friends, to others taking part in a Moment you join, to anyone on
Moment who adds you using your phone number, and to anyone you send an invite or share link
to. See section 4.
Your content, meaning the text, photos or doodles, optional place, and replies you post.
Moments are ephemeral for the people who see them: a Moment leaves your friends' feeds when it
expires, a few hours after you post it, and its replies are deleted with it. A copy of the
Moments you posted is then kept in your own private History, which only you can see,
until you clear it from Settings or delete your account.
Your availability status, set when you flip "Free now" or "Free later" so friends know
you're around. This is short-lived. It expires automatically and is then deleted.
Only with your permission, and only for a specific purpose:
Coarse location, only if you attach a place to a Moment. We never store your precise
position: coordinates are rounded to roughly 100 metres before they are saved, alongside the
name of the place. Your friends see it while the Moment is live, and it stays on that Moment's
entry in your own private History afterwards, until you clear it or delete your account. We do
not track your location in the background or when you are not posting.
Contacts, only if you choose to import them, and only to match against people already on
Moment so you can add them. The phone numbers from your address book are sent to our server to
be matched and are discarded straight afterwards. We do not keep your address book, and we do
not message anyone on your behalf.
A phone number you invite. If you invite someone who is not on Moment yet, we store that
one number against your account so that we can connect the two of you if they later sign up.
It is never shown to anyone else, you can cancel the invite at any time from your Friends
screen, and it is deleted automatically after 30 days.
Collected automatically to make the app work:
A push notification token, so we can send you notifications. It is removed when you sign
out.
Basic technical data, such as device and app version and error information needed to
operate and secure the service, and a check that requests come from the genuine Moment app on
a real device. We do not use advertising identifiers or any cross-app or cross-site
tracking.
A private weekly summary of your own activity, worked out from your History (for
example, how many Moments you shared that week). It is shown only to you, in the app and on
your widget, and is replaced daily.
We do not run ads, and we do not currently use third-party analytics or crash-reporting SDKs.
If that ever changes, we will update this policy and, where required, ask for your consent
first.
3. How we use your information, and our legal bases
We use your information only to run Moment: to sign you in, show your friends what you're up
to, let people join and reply, surface who's free, and send notifications. Under GDPR our legal
bases are:
Performance of a contract, to provide the core service you signed up for.
Your consent, for contacts matching and for attaching a location. You can withdraw it at
any time in your device settings.
Legitimate interests, to keep the service secure, prevent abuse, and respond to reports,
including keeping a copy of reported content (see section 7).
We do not sell your personal information, do not use it for advertising, and do not profile
you. The only analysis of your activity is the private weekly summary described above, which
only you see.
4. Who can see what
Moment is friends-only. There is no public feed, no followers, and no search by name.
Moments you post, including their place and replies, are seen by your
friends (or, if you post to a group, the members of that group) until they expire.
Moments you join. When you join a friend's Moment or reply in its chat,
everyone that Moment was shared with can see your name, photo and replies. Some of them may be
your friend's friends rather than yours.
Your availability ("Free now" or "Free later") is seen only by your
friends.
Your name and photo can also be seen by anyone on Moment who adds you
using your phone number, and by anyone you send an invite link to.
A Moment you share by link. Anyone holding that link can see its title,
its colour, whether it has a photo (never the photo itself), your first name, and how long it
has left, until it ends. Nothing else about the Moment, and nothing else about you, is
shown.
Reported content may be reviewed by us. See our Terms of Use.
5. Service providers we use
We rely on trusted providers who process data on our behalf under their own terms:
Google Firebase and Google Cloud (Authentication, Firestore, Cloud Storage, Cloud
Functions, Cloud Messaging and App Check), which sends your sign-in code, stores your account
and content, runs our server code, delivers notifications, and checks that requests come from
the genuine app. See Google's Privacy Policy.
Google reCAPTCHA, which may be used to confirm you're a real person during phone sign-in
if the usual silent check can't run. See Google's Privacy Policy.
Apple, for Apple Push Notification service (delivering notifications), App Attest
(confirming the app is genuine), and Apple Maps (searching for a place to attach to a Moment;
what you type and your approximate area are sent to Apple to find matches). See Apple's
Privacy Policy.
Cloudflare, which serves this website, including the preview shown for a shared Moment
link, and handles email sent to us. See Cloudflare's Privacy Policy.
These providers act as our data processors and are not permitted to use your data for their
own purposes.
6. Where your data is stored, and international transfers
Your account and content are stored in Google Cloud data centres in the European Union, your
photos in the United Kingdom, and our server code runs in the EU. Some of our providers (for example, those delivering
notifications or text messages) may process data in other countries, including the United
States. Where data is transferred internationally, it is protected by appropriate safeguards
such as Standard Contractual Clauses or the UK's International Data Transfer Addendum, as
required by law.
7. How long we keep it
Moments and availability status auto-expire within hours. At that point the Moment leaves
everyone's feed and its replies are deleted.
Your own History, which is the record of Moments you posted, is kept until you clear it
from Settings or delete your account. Only you can see it.
Photos attached to a Moment are deleted from storage 90 days after upload.
Account data, meaning your phone number, name, photo, and friendships, is kept while your
account is active.
Invited phone numbers are deleted after 30 days, or sooner if you cancel the invite.
Reports. When someone reports a Moment, a reply or a person, we keep a copy of what was
reported with the report, even after the Moment itself has expired, so that we can review it
and act. Reports and these copies are kept as long as needed to do that and to keep the
service safe.
You can delete your account at any time from Settings > Profile > Delete account.
This permanently deletes your account, profile, photos, History, friendships, availability,
invites and the Moments you posted. It is irreversible. A few things are not removed immediately:
replies you left on someone else's live Moment stay until that Moment ends (within hours);
reports filed about you, and their copies, are kept for safety; and copies may remain in our
encrypted backups for up to 7 days before being overwritten.
8. Security
Data is encrypted in transit with HTTPS/TLS, and access is restricted by server-side security
rules so you can only see what your friends have chosen to share with you. No system is
perfectly secure, but we take reasonable measures to protect your information.
9. Children
Moment is strictly for users 18 and over. If we learn that someone under 18 has created an
account, we will delete it. If you believe a minor is using Moment, contact
[email protected].
10. Your rights
Depending on where you live, for example the UK and EU under GDPR or California under
CCPA/CPRA, you may have the right to access, correct, delete, or export your data, to object to
or restrict certain processing, and to withdraw consent. You can exercise most of these directly
in the app by editing your profile, clearing your History, or using Settings > Profile >
Delete account. For anything else, email
[email protected] and we will respond within the
time required by law. UK and EU users also have the right to complain to their local data
protection authority, which in the UK is the ICO.
We do not "sell" or "share" personal information as those terms are defined under California
law.
11. Changes to this policy
We may update this policy. Material changes will be reflected here with a new "last updated"
date and, where appropriate, with in-app notice.
12. Contact
Moment Labs Ltd, registered in England and Wales. For privacy and data protection matters,
including any of the rights set out above, email
[email protected]. A postal address is
available on request and on the Companies House public register.