m
moment

Privacy Policy

Last updated: May 4, 2026

1. Information We Collect

Account Information: Email address (via AWS Cognito) or phone number (via Twilio Verify) used to authenticate. We store the fact that your phone is verified, not the verification code itself.

Profile Content: Name, bio, age, gender (optional), photos, prompts, and preferences you choose to share.

Location: We collect your precise geolocation when you grant the permission, used to surface nearby Moments. Location is stored as latitude/longitude on your user record and is updated only while you actively use the app.

User Content: Moments you host, applications you submit, messages you send, and reviews you write.

Device & Usage: Device model, OS, IP address, push-notification token (for delivering match and chat alerts), and basic usage logs.

Payments: If you purchase a subscription or consumables, payment is handled by Apple (App Store) or Stripe. We receive a transaction reference and the items purchased — never your card number.

2. How We Use Your Information

  • To authenticate you and verify your phone number.
  • To match you with nearby Moments and surface compatible hosts/guests.
  • To deliver chat messages and notifications.
  • To process payments and entitlements.
  • To investigate reports, prevent abuse, and enforce our Terms.
  • To comply with legal obligations.

3. Service Providers (Subprocessors)

We share data with the following processors strictly to operate Moment:

  • AWS — hosting, database (RDS), authentication (Cognito), file storage (S3).
  • Twilio — SMS one-time codes for phone verification.
  • Ably — real-time chat delivery.
  • Stripe — payment processing for the web flow.
  • Apple — payment processing and push notifications for iOS.
  • Resend — transactional email delivery.
  • Mapbox — geocoding venue search input.

We do not sell your personal data. We do not share data with advertisers or data brokers.

4. Disclosure for Legal Reasons

We may disclose information if compelled by valid legal process (subpoena, court order) or in good faith to prevent imminent harm.

5. Your Rights

Regardless of jurisdiction, you may:

  • Access and download your data — email hello@jointhemoment.app.
  • Delete your account at any time from Settings → Delete Account. Deletion purges your profile, photos, messages, and personal identifiers from our active database within 30 days. Anonymous aggregate logs and records we are required to retain (e.g., financial records) may persist.
  • Object to or restrict specific processing.

California residents have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect and to request correction. We do not sell personal information.

6. Children

Moment is for users 18 and over. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

7. Data Retention

We retain your account information while your account is active and for up to 30 days after deletion, except where law requires longer retention (e.g., financial records). Reports and moderation actions may be retained longer to enforce our Terms.

8. Contact

Questions or privacy requests: hello@jointhemoment.app.