Privacy
Momento is an iPhone app for keeping small moments as postcards. This policy explains what we collect when you use the app and momentoplus.app, why, who helps us run it, and what you can do about it. The short version: your postcards are yours, we only use them to run Momento for you, and we never sell them or use them for advertising.
Who we are
Momento is made and run by Vincent Pestana in South Africa, referred to here as "Momento", "we" or "us". You can reach us at support@momentoplus.app.
What we collect
- Your account: your email address, the one-time sign-in codes we send to it, and an account ID.
- Your postcards: what you write, the photos you add, the date and time, which postcards you keep, and the short notes and weekly letters Momento writes back to you.
- Voice notes: when you use voice to text, the recording is sent to be transcribed and the text is saved with your postcard. We do not keep the recording on our servers.
- Purchases: whether you have Momento+, and the purchase records Apple shares with us. We never see your card details.
- App usage: a small set of events linked to your account ID, such as opening the app, signing in, creating a postcard, viewing the Momento+ screen and the outcome of a purchase, together with your device model, iOS version and app version. These events never include what you wrote or your photos.
- Messages to us: anything you send to support@momentoplus.app.
Some things stay only on your iPhone: unfinished drafts and your reminder settings. Reminders are notifications your phone schedules for itself.
The website uses Vercel Web Analytics and Speed Insights to count visits and measure page speed. They do not use cookies.
How we use it
- To sign you in and keep your postcards in sync across your devices.
- To turn voice notes into text, and to write the short P.S. notes and weekly letters, when those features are on.
- To check what you have unlocked and restore purchases.
- To understand, in aggregate, how Momento is used, so we can fix problems and make it better.
- To answer you when you write to us, and to send important notices about your account.
We do not sell your information, show you ads, or use your postcards to train AI models.
Who helps us run Momento
We use a few service providers. Each one only gets what it needs to do its job for us:
- InstantDB stores your account and postcards and handles sign-in codes.
- Cloudflare R2 stores your photos.
- OpenAI transcribes voice notes and writes the P.S. notes, photo descriptions and weekly letters. It receives the text, photos or audio needed for each request through our own server. Under OpenAI’s API terms this data is not used to train its models; OpenAI may keep it for a limited time to prevent abuse.
- RevenueCat keeps track of Momento+ purchases and restores.
- AppsFlyer receives the app usage events described above.
- Vercel hosts our server and this website.
- Apple processes App Store payments and delivers the app.
We may also share information if the law requires it, or to protect people from harm. If Momento is ever sold or merged, this policy will continue to apply to your information.
How long we keep it
We keep your postcards for as long as you have an account. Delete a postcard and it is gone from your journal. Delete your account (You, then Delete my account) and we remove your postcards, photos and account. Copies held by our providers for backups or abuse prevention are removed on their own schedules.
Your choices and rights
- Export everything with You, then Export my journal.
- Delete your account at any time from You, then Delete my account.
- Turn reminders, the microphone or photo access off in the app or in iPhone Settings.
- Ask us for a copy of your information, to correct it, or to delete it, by writing to support@momentoplus.app.
South Africa’s Protection of Personal Information Act (POPIA) gives you further rights, including to object to how we use your information and to complain to the Information Regulator (inforegulator.org.za). If you live elsewhere, for example in the EU or UK, your local data protection law may give you similar rights.
Security
Information is encrypted on its way between the app, our server and our providers, and our server checks that every request comes from a signed-in account. No system is perfectly secure, so please keep your email account safe: anyone who can read your email can sign in to Momento.
Children
Momento is not meant for children under 13. If you think a child has given us their information, write to us and we will delete it.
Where your information is stored
Our providers store and process information in the United States and other countries. They are bound to protect it wherever it is.
Changes to this policy
If we change this policy we will update the date at the top. If a change matters, we will tell you in the app or by email before it takes effect.
Contact
Questions or requests: support@momentoplus.app.