Privacy Policy

Last updated: September 26, 2026

This policy explains what we collect when you use Moment, who receives it, and how to delete your account or ask about your data.

What we collect and why

• Account details. Your phone number is used to sign in, verify your account, and help keep it secure. We do not display it to other users or use it for marketing. We store your chosen name, optional profile photo and bio, avatar color, and any nickname saved in an earlier version.
• Photos and social activity. We store the photos you upload, comments, likes, and friendships so you can share and revisit Moments. Photos are also saved locally on the phones that take part.
• Location. If you allow location access, we store coordinates and a place name with your Moment. Coordinates may be precise, depending on your iPhone settings. You can use Moment without this permission.
• Notifications. If you enable notifications, we register a push token and app installation identifier to send alerts to your device.
• Reports. We store the reported content or account, the reporter's account, the reason, and review records to handle reports and prevent abuse.

Your name and profile details help others recognize you, including during nearby discovery. Published Moments and their location tags are visible to the participants and their friends, subject to blocking and moderation.

We do not access your address book or scan your photo library. When you choose a profile photo, we access the photo you select. We do not collect browsing history or advertising identifiers. We do not sell or rent your personal information, or share it for another company's marketing.

Analytics and diagnostics

We use Mixpanel to understand which features people use. It receives app interaction events, internal account and device identifiers, device and operating-system details, and app versions. Events can include Moment identifiers and technical errors. Mixpanel also derives an approximate location from your IP address. This is separate from the location permission used to tag Moments.

Current versions identify analytics accounts by internal ID. Older versions sent display names, which may remain in historical records. We do not deliberately include photo files or comment text in analytics events.

We use Sentry for crash reports, performance monitoring, and technical logs. These records can include account and Moment identifiers, display names, device details, app versions, and information about actions, connections, and requests. Analytics and diagnostic records may be linked to your account.

Photo screening and moderation

New Moment photos and profile photos are screened automatically in the background. Posting does not wait for screening. We send a resized copy to AWS Rekognition in the United States, without embedded image metadata or separate name, phone number, or account ID fields. We have disabled Amazon's use of your photos to improve its services.

Flagged content is hidden and sent to a moderator for review. It may be visible before screening finishes. Approved content can return; rejected content stays hidden. A moderator reviewing a flagged Moment can see its two photos. For a flagged profile photo, they can see that photo. We store screening results and review decisions. Automated screening can make mistakes, and you can contact us about a decision.

You can report a Moment, comment, or account in the app. For a reported Moment or comment, a reviewer can see the Moment and its conversation. For an account report, they can see the profile and its posted Moments. We record review actions and review reports within 48 hours.

Blocking removes the friendship and permanently deletes your shared Moments. Blocked accounts cannot view each other's profiles or Moments containing the other person through the app's feed and profile features. Unblocking does not restore the friendship or deleted Moments. Photos already saved or cached on a device cannot be recalled.

Services we use

• Twilio: your phone number and verification information for sign-in codes. Privacy policy.
• Mixpanel: the analytics data described above. Privacy policy.
• Sentry: the diagnostic data described above. Privacy policy.
• AWS Rekognition: image copies for screening. Privacy notice.
• Cloudflare R2 and Railway: photo storage and hosting for account, social, and moderation records.

Storage and security

Moment transfers photos directly between nearby phones during a capture session and uploads them for cloud sharing. Connections to our servers are encrypted. Access to stored data is limited by account permissions and staff access controls. Our private moderation website uses a cookie to keep reviewers signed in.

Deletion and retention

We keep account and shared content while your account is active, unless you delete it or it is removed through moderation. You can delete your account in Profile > Settings > Delete Account.

Account deletion removes your active profile, account records, friendships, and shared Moments you participated in, including from the other participant's account. Removing stored photo files may take longer. Deletion does not remove copies someone has saved or exported.

We start removing unfinished uploads after one day. Photos still awaiting review after 30 days remain hidden and are removed from storage. Approved photos are kept until the Moment or account is deleted.

We retain limited deletion records and technical identifiers to finish cleanup and prevent deleted content from being uploaded again. Moderation action records may remain for accountability and abuse prevention.

Account deletion does not automatically erase historical Mixpanel or Sentry records. Their retention depends on the provider settings. Contact us to request access to or deletion of retained personal data.

Your choices

You can edit your profile or delete your account in the app. You can change camera, local network, location, and notification permissions in iPhone Settings. Camera and local network access are needed to take Moments together; location and notifications are optional. Turning off location permission does not stop IP-based approximate location in analytics.

For a copy of your data, corrections, or a deletion request, email the address below. We may need to verify that the account belongs to you.

Children

Moment is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it.

Policy updates and contact

We update the date on this page when the policy changes. Check this page for the current policy.

Moment is operated by Tristan Saucedo.

For privacy questions or requests, email tristansaucedobusiness@gmail.com.