Privacy Policy

Last updated: 15 October 2026

My Moment (“My Moment”, “we”, “us”) is built by Team ACMW. This policy explains what personal information the My Moment iOS app and this website collect, why we collect it, and what choices you have. We’ve kept it short and plain. If anything is unclear, email support@mymoment.site and we’ll explain.

1. The short version

• Your journal entries live on your device. We don’t read them.
• To sign you in we store the minimum needed: a user ID, your email, and which sign-in providers you used.
• What you post on our feedback board is public: your public name, posts and comments.
• We don’t sell your data. We don’t run advertising trackers.
• We count visits to this website ourselves, with no analytics company, and the counter never stores your IP address.
• You can delete your account from the app at any time, which permanently erases your account data on our servers. Posts and comments you made on the feedback board stay, shown as “Deleted user”.

2. Information we collect

Account information

When you sign in we receive a user identifier and your email address from your sign-in provider (Apple, Google, or our magic-link email). If you choose Sign in with Apple, Apple may give us a relayed email address that forwards to your real one — we never see your real address.

On this website you can sign in to the same account with Google, with your email and a password, or with a one-time code we email you. If you set a password, it’s stored only as a secure hash by Supabase, our sign-in provider — we can’t see it. To stop abuse, we log each sign-in attempt on this website with the IP address it came from and a one-way hash of the email address entered, not the address itself.

Journal entries (your “moments”)

Entries you create — text notes, timestamps, the moments you pin — are stored locally on your iPhone. If you have iCloud enabled in iOS, Apple may sync them to your other devices through your own iCloud account, encrypted by Apple. We do not store your journal entries on our servers.

Diagnostic data

If the app crashes, iOS may send Apple a diagnostic report which we receive in aggregated, anonymous form through the standard Xcode crash reporting pipeline. These reports do not contain the contents of your entries.

Website (mymoment.site)

If you join the beta waitlist on this site, we store the email address you submitted, the time you submitted it, the source page, the user-agent string of your browser, and how you first arrived at the site (see “Visit counting” below). The site is served over HTTPS.

We don’t use cookies for advertising or to follow you across other sites. We set only first-party cookies: cookies that keep you signed in, if you sign in on this site; one short-lived cookie (24 hours) after you confirm your beta email, so you can finish the signup survey; one cookie (mm_ft, 30 days) that remembers how you first arrived; and, if you turn visit counting off, one cookie (mm_notrack) that remembers that choice. We set no other cookies. We do not embed any third-party advertising scripts.

Visit counting

We count visits to this site with our own first-party counter, not an analytics company. For each page view, our server makes a one-way hash of your IP address and browser user-agent combined with a random value that changes every day. We store only that hash, the date, how you first arrived (below) and that day’s counts of pages viewed and App Store badge clicks. We never store your IP address. Each day’s random value is deleted when the next day’s counting starts; copies in our database backups go when those backups expire. We don’t use the hash, or how you first arrived, to identify you or to follow you from one day to the next. We delete these daily visit records after 13 months. We skip known bots.

The mm_ft cookie remembers for 30 days how you first arrived: the campaign tags in the link you followed (such as utm_source=instagram), the name of the site that linked you (such as instagram or google), or “direct”. It holds no ID and can’t be read by scripts. When you join the waitlist or create a feedback-board account on this site, we save that first-arrival source with your sign-up and keep it as long as the sign-up. If you delete your account, we keep only the sign-up’s date and time and first-arrival source, with no email or account ID, so our past daily totals don’t change.

We use this only to see, as daily totals per source, which of our posts and accounts bring visitors and sign-ups. We don’t use it for advertising or profiling, and we don’t share it. You can turn counting off (see “Your rights and choices”).

Feedback board

If you use the feedback board on this site, we store the public name you choose, your Google profile photo link (only if you sign in with Google), the posts and comments you write, your votes, and when you did each of these. If you report a post or comment, we store that you reported it, the reason and any note you add, so our team can review it. Reports are never shown publicly.

The board is public.Anyone can see your public name, photo, posts and comments and when you posted them, and search engines may index them. Votes are shown as totals, not by name. Please don’t post health details or other private information.

3. How we use this information

• To sign you in and keep you signed in across launches.
• To send you the beta invite if you joined the waitlist.
• To run the feedback board — showing what you post, counting votes, and emailing our team about new posts and comments so we can reply.
• To see which of our posts and accounts bring people to the site — daily totals of visits and sign-ups per source, from our own visit counter.
• To respond to your support emails.
• To keep the service secure — for example, blocking abusive sign-in attempts.

We do not use your information for advertising, profiling, or sale.

4. How your data is stored and protected

Account records are stored in Supabase, a managed Postgres provider. Supabase encrypts data at rest and in transit. Access to the production database is restricted to the maintainers of My Moment. Your journal content remains on your device and is not transmitted to Supabase.

5. Sharing

We share information only with the limited set of providers that make the app work:

• Supabase — account storage and authentication.
• Apple — Sign in with Apple, push notifications, and app distribution via the App Store / TestFlight.
• Google — only if you choose Sign in with Google.
• Vercel — hosting for this website.
• Resend — delivers our emails, such as waitlist messages, sign-in codes and new-post alerts to our team.

We do not share or sell your data with anyone else. We will only disclose information when legally required to do so. What you post on the feedback board is public by design (see “Feedback board” above).

6. Your rights and choices

• Access & export. Email support@mymoment.site and we’ll send you a copy of the account information we hold about you.
• Delete your account. Open the My Moment app → Settings → Delete Account, or email us to request deletion. This permanently removes your row from our database. If you used the feedback board, your votes are removed, but your posts and comments stay on the board with the author shown as “Deleted user”. To remove them too, delete them on the board first (deleting a comment erases its text), or email us and we’ll remove them.
• Unsubscribe from emails. Reply “unsubscribe” to any waitlist email or email us directly.
• Turn off visit counting. Visiting www.mymoment.site/api/notrack sets a cookie (mm_notrack, about 13 months) that stops us counting that browser’s visits and leaves its sign-ups out of our totals. www.mymoment.site/api/notrack?off turns counting back on.

If you live in the EEA, the UK, or California, you have additional rights under GDPR / UK GDPR / CCPA (access, rectification, erasure, restriction, portability, objection). To exercise them, email support@mymoment.site.

7. Children

My Moment is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect information from children. If you believe a child has signed up, contact us and we’ll delete the account.

8. International transfers

Our hosting providers may process data in regions outside your own. Where required, we rely on the Standard Contractual Clauses or equivalent safeguards published by our providers.

9. Changes to this policy

If we make material changes we’ll update the date at the top of this page and, where appropriate, notify you in-app or by email before the change takes effect.

10. Contact

Questions, requests, or complaints? Email support@mymoment.site.