Privacy Policy

Effective 14 October 2026

Moment is a camera app that keeps your photos in a box on your phone. This policy explains what happens to your data.

In short

• Without an account, your photos and personal data never leave your phone. Moment only sends anonymous usage statistics and crash reports (you can turn both off), checks whether your version is still supported and, if you allow notifications, a notification token (see Notifications).
• Signing in is optional. If you sign in, Moment backs up your photos so they appear on all your devices.
• No advertising and no tracking: nothing links what you do in Moment to other apps or websites. Your data is never sold or shared for marketing.
• You can delete any photo, or your whole account, from inside the app. Deleting a photo removes it from all your devices; a copy stays in your backup until you delete your account. Deleting your account signs you out at once and is completed after 30 days.

What Moment stores on your phone

• Photos you take or add, and small previews of them.
• Where each photo rests in the box and your camera choices (on or off, front or back).
• The background you chose and the camera's style. A photo you picked as the background is kept as a separate copy.
• When you share a photo, Moment makes the shared image on your phone; nothing is uploaded. Saving a photo to Photos works the same way.

These stay on your phone, whether or not you sign in.

If you don't sign in

Moment never uploads your photos or any personal data. It sends only these small, anonymous things (plus a notification token, if you allow notifications; see Notifications):

• A version check when the app opens: the app version and platform, so Moment can tell you if an update is required. Like any internet request, it reaches our server with your IP address, which is kept only in short-lived technical logs.
• Crash reports, if Moment crashes or hits an error: technical details such as the error, the device model, the operating system version (iOS or Android) and the app version. They contain no photos, no account and no contact details.
• Usage statistics: which features are used, as simple events such as "photo taken", "grid opened" or "background changed", with the app version, the device type, the operating system version, your language and whether backup is on. They are tied only to a random id created when you install Moment, not to you or your account. They never include your photos, what is in them, your email or other account details, or your precise location; Moment does not look up your location from your IP address. They are not used for advertising and are not combined with data from other companies.

Usage statistics and crash reports share one switch: turn both off in Settings with the "Anonymous data" switch. Turning it off stops them at once.

Notifications

Moment can send notifications if you allow them: memories ("on this day"), a reminder when your Photo box has been quiet, a note when backup needs attention, and occasional news from us. You choose which ones in Settings, under Notifications, or in your phone's settings (on iPhone: Settings, then Notifications, then Moment; on Android: Settings, then Apps, then Moment, then Notifications).

• Memories, the reminder and backup alerts are scheduled on your phone. They use no server, and your photos never leave your phone for them.
• To deliver news, Moment sends your phone's notification token, your app language, your time zone and the app version to our server, and the token is delivered through Google Firebase Cloud Messaging, which passes it to Apple (on iPhone) or Google (on Android). This happens when you allow notifications, even if you do not sign in. On Android 12 and earlier there is no question to answer: notifications are on unless you turn them off in your phone's settings, so this happens when Moment first starts, as long as News is on in Settings.
• The token is linked to your account only while you are signed in. Signing out or deleting your account unlinks it; the token then stays as an anonymous record so you can still get news, until you turn notifications off, which deletes it.
• Notifications add no new usage statistics beyond a few simple events: whether you allowed or declined, which kind of notification you opened, and which kinds you switched on or off.

If you sign in

You can sign in with Apple or Google in Settings. Then Moment collects:

• Account: your email address, the user id that Apple or Google gives Moment, and a username. With Sign in with Apple you can hide your email; Apple then shares a private relay address instead. Google may also share your name and profile picture: both are stored with your account by our sign-in provider, the picture is shown to you in Settings, and the name may be used to suggest your username. They are deleted with your account. If you add a profile photo, it is stored with your account and deleted with it.
• Username: Moment picks one from your email or name, and you can change it once. It is stored with your account and appears on photos you share if you leave "Username on shared photos" on in Settings.
• Photos: the original file of each photo in your box.
• Photo details: an id for each photo, when it was taken, its shape, whether it was taken with the front camera, and its file type and size.
• Technical logs: our servers record basic request details, such as IP address and time, to keep the service running and secure. These are kept for a short time only.

Signing in does not change usage statistics: they stay anonymous and are never linked to your account or email. Changing your profile photo or username sends only whether it worked, never the photo or the name.

Moment uses this only to back up your photos and keep them the same on your devices. Not synced: where photos rest in the box, your background and camera style, and your settings.

Shared boxes

A shared box is a box you make with other people. It needs an account, and it is optional. Everything above still applies; this is what is added.

• What a shared box stores: the photos people add to it, as Standard JPEG copies (not the originals); the box name, background and camera style; who is a member; and the reports and blocks made in it.
• What the other members see: those photos, your display name, your colour and your profile picture (the photo you added in Settings, else the one from Google), unless "Hide my photo" is on. Your email address is never shown.
• Copies: members can keep a copy of a photo (Save to my box, Save to Photos, Share). Moment can't take those copies back.
• Leaving: when you leave a box or are removed from it, the photos you added stay in the box for the group.
• Reports and blocks: you can report a photo or a person, and block a person, in the photo menu and the member list. A report is reviewed by us within 24 hours, and we can remove a photo or a person. You accept the Terms before you share.
• Deleting your account: when you request deletion you leave every shared box at once. A box you own passes to the member who has been there longest, and a box where you were alone is deleted. Your photos stay in the boxes while the account is scheduled, and restoring the account does not rejoin you. 30 days later, when the account is erased, your photos in every box, your shared profile and picture, your invites and your blocks are erased too. Reports you made stay, without your name.

Who handles your data

Moment uses six service providers, which process data only on our behalf:

• Supabase: sign-in and the database of photo details. Located in Singapore.
• Cloudflare R2: storage for photo files. Files are encrypted at rest and kept private; only you can open them, through short-lived links the app requests for you.
• Railway: hosts Moment's server, in Singapore.
• Sentry: receives the anonymous crash reports. Located in the United States.
• PostHog: receives the anonymous usage statistics. Located in the United States.
• Google Firebase Cloud Messaging: delivers notifications to your phone, as a processor on our behalf. Located in the United States.

All data travels over encrypted connections (HTTPS).

Where your data is stored

Moment's servers and storage are outside Vietnam: your account and photo details are stored with Supabase in Singapore, your photo files with Cloudflare R2 (Asia-Pacific), and Moment's server runs on Railway in Singapore. Anonymous crash reports, usage statistics and notification delivery go to providers in the United States (see above). By using Moment you accept that data is sent to and processed in these places: anonymous crash reports and usage statistics are sent from the start until you switch them off in Settings, the version check reaches our server on Railway, and the rest applies when you sign in or allow notifications. This is what Vietnam's Decree 13/2023/ND-CP on personal data protection requires us to tell you.

How long data is kept

Backed-up photos and their details are kept until you delete your account. Anonymous usage statistics and crash reports are kept for a limited time to spot problems and trends, and are then deleted. Deleting a photo removes it from all your devices; a copy stays in your backup until you delete your account, so your deletion reaches every device, even ones that were offline. It no longer appears anywhere in Moment, and Moment can't bring it back. When you delete your account, the deletion is scheduled: you are signed out at once, nothing syncs and your devices stop getting notifications for it; 30 days later your account, your backed-up photos (including the copies of photos you deleted) and their details, your username and your profile photo are erased. Sign in again within those 30 days to restore it. Copies in our providers' routine backups expire on their own within about a week. A notification token is deleted when you turn notifications off, and also when your phone has not checked in with our server for 90 days.

In short:

• Backed-up photos: until you delete your account (deleting a photo removes it from your devices at once, but its backed-up copy stays until the account is deleted, which is completed after 30 days). A photo in a shared box: until it is deleted from the box or your account is erased.
• Your username and profile (including the picture): until you change or delete them, or your account is erased.
• Notification token: until you turn notifications off, or 90 days after your phone last checked in with our server.
• Reports you make in a shared box: kept for as long as we need them to handle them, and without your name once your account is deleted (the 30-day deletion removes your name).

Deleting your data

• One photo: open it and choose Delete. If you are signed in, it is removed from all your devices; a copy stays in your backup until you delete your account.
• Your account: open Settings, then Profile, then Delete account. You are signed out at once and the account stops syncing. Sign in with Apple is revoked right away. 30 days later all your backed-up photos (including the copies of photos you deleted) and their details, your username and your profile photo are erased from our servers, and your account is deleted. Sign in again within those 30 days to restore it. Photos already on your phone stay on your phone.
• Signing out stops syncing. You choose whether to keep the photos on your phone or remove the backed-up ones from it (they stay in your backup); photos not backed up yet always stay. Your backup stays in your account until you delete it.
• On your phone: a photo used as the background is a separate copy; choose another background to remove it. Removing the app deletes everything Moment stored on that phone. Device backups you make may include your photos, under your own backup settings.

Permissions

• Camera: to take photos for your collection inside the app and, if you choose, your profile photo.
• Photos: to add a photo from your library when the camera is not available or camera access is off, to use one as the background, or, if you choose, as your profile photo. Moment only sees the photos you pick.
• Notifications: only if you allow them, for memories, reminders, backup alerts and news.
• Microphone: never used. Moment does not record audio.
• Motion: read only while Moment is on screen, to tilt the photos in the box with your phone. Nothing from it is stored or uploaded.

Children

Moment is not directed at children under 13 and does not knowingly collect their data. Under Vietnamese law (Decree 13/2023/ND-CP), people under 16 need a parent's or guardian's consent to use Moment with an account; see the Terms. Without signing in, Moment collects no personal data from anyone. If you believe a child has signed in, contact us and we will delete the account.

Changes

If this policy changes, the new version will be posted at https://momentcapture.me/privacy with a new effective date. If a change affects data already collected, we will say so in the app.

Contact

Moment is made by Twenty Labs Co. Ltd. Questions or requests about your data? Email contact@thetwentylabs.com.