Privacy Policy
This Privacy Policy explains how MomentPass processes personal data when you use the MomentPass iOS app and related backend services.
1. Information we process
Account and authentication data
MomentPass currently supports Sign in with Apple, Google Sign-In, and email sign-in. Depending on the method you choose, we may process an internal MomentPass account identifier, an Apple or Google provider identifier, a verified email address, linked sign-in provider status, authentication challenges, session records, and related timestamps.
MomentPass does not receive or store your Apple or Google password.
Digital souvenir and claim data
When you obtain an eligible digital souvenir, we may store your MomentPass account identifier, the relevant canonical location or souvenir identifier, the time and method of acquisition, and records needed to verify the claim and prevent duplicate claims.
Location data
MomentPass uses location for features connected to real places, including location-based claims, nearby-place functionality, and optional arrival reminders.
When you attempt an ordinary location-based claim, the app may send your current latitude, longitude, and location accuracy to the MomentPass backend to verify eligibility. Under the currently verified implementation, those submitted exact coordinates and accuracy values are used for verification and are not permanently stored in the backend claim record. The backend retains the resulting canonical location, claim outcome, and acquisition information.
Location may also be processed locally on your device. For example, MomentPass may read location metadata from a photo you selected to associate a memory with a place, or store exact coordinates for a private personal place on your device.
Photos, notes, and personal memories
You choose which photos to add to MomentPass. MomentPass does not intentionally upload your entire photo library.
Your personal Memory photos, notes, Boards, Board layouts, Passport information, and similar private content are stored locally and may sync through your private Apple iCloud/CloudKit storage when iCloud Sync is active.
MomentPass does not currently upload personal Memory photos to the MomentPass backend or to MomentPass public Cloudflare R2 storage.
When MomentPass saves an imported photo, it creates an optimized image and does not intentionally copy the source EXIF or GPS metadata into that saved JPEG. Information derived from the selected photo, such as capture date or associated city, may be stored separately to support the memory.
Technical and security data
We process limited technical information needed to operate and protect the service. This may include request identifiers, API route, response status, latency, authentication records, timestamps, and security-related events.
The backend may temporarily process an IP address for rate limiting and abuse prevention. In the current application-level rate limiter, the IP address is converted to a short-lived protected value rather than being stored as a persistent raw IP address by MomentPass application code. Hosting and network providers may separately process IP addresses and request metadata as part of their infrastructure.
2. Why we process data
Where the GDPR applies, we process personal data only when we have a legal basis to do so.
- Performance of the service: to create and authenticate your account, maintain your server-side collection, verify claims, and provide features you request.
- Legitimate interests: to secure MomentPass, prevent abuse and fraud, maintain service reliability, and troubleshoot technical problems, provided those interests are not overridden by your rights and interests.
- Consent: where applicable for optional device permissions or other processing that legally requires consent. iOS permissions can be changed in Settings.
- Legal obligations: where processing is necessary to comply with applicable law or valid legal requests.
3. iCloud Sync and local storage
iCloud Sync is included with MomentPass and is enabled by default in the current app configuration.
When active, supported MomentPass data can be synchronized through the private CloudKit database associated with your Apple account. This may include Memory records and photos, notes, Boards, Board layouts, Passport information, and related private app data.
Changing the iCloud Sync preference may not automatically migrate all existing information between local-only and iCloud-backed storage. Apple processes iCloud data under Apple's own terms and privacy practices.
4. Notifications
MomentPass may use local notifications for optional features such as arrival reminders. The current MomentPass backend does not operate a remote marketing push-notification system and does not currently store APNs device tokens.
You can manage notification permissions in iOS Settings.
5. Service providers and recipients
MomentPass relies on a limited number of service providers to operate the app and backend:
- Apple: iOS platform services, Sign in with Apple, private iCloud/CloudKit, Photos, and device location frameworks.
- Google: Google Sign-In. Its SDK disclosures include account and contact information, identifiers, coarse location and usage information for app functionality and analytics. Google processes information under its own privacy practices.
- Cloudflare: email delivery for authentication and account linking, and public static assets such as official artwork, catalog assets, and legal pages.
- DigitalOcean: backend application hosting and PostgreSQL database infrastructure.
If you intentionally share a MomentPass image, video, or other content through the iOS share sheet, the recipient or service you choose receives the content you selected to share.
6. Advertising, tracking, analytics, and AI
MomentPass does not currently contain advertising SDKs, use IDFA for advertising, or perform cross-app advertising tracking.
MomentPass does not currently use a third-party product analytics platform.
MomentPass does not currently send your personal memories, photos, or notes to an AI service.
If these practices materially change, we will update this Privacy Policy and any required App Store disclosures before or when the new processing becomes applicable.
7. International processing
Some service providers used by MomentPass operate internationally. As a result, personal data may be processed in countries outside your country of residence or outside the European Economic Area, depending on the service used and your location.
Where required, we will rely on appropriate safeguards for international transfers of personal data.
8. Data retention
Account information and your server-side collection are generally retained while your MomentPass account remains active.
Authentication challenges and verification codes expire automatically after limited periods. MomentPass authentication sessions are currently configured with limited validity periods.
Private local and iCloud memory information remains until you delete it using the app or applicable Apple and iCloud controls, or the private-data cleanup following confirmed deletion of your MomentPass account is completed. Unavailable iCloud or offline devices can delay completion.
Operational hosting logs and database backups may persist separately from active application records for limited periods required for security, troubleshooting, and service operation.
9. Deleting your account
MomentPass provides an in-app account deletion process.
Under the currently verified backend implementation, deleting your MomentPass account removes your backend account and associated server-side account information, including linked identities, sessions, server-side digital souvenir collection records, and claim records associated with that account.
Once deletion of your MomentPass account is confirmed, MomentPass automatically starts removing the personal memories, photos, notes, boards and custom places associated with that account from the app on your device and its private iCloud storage. If the required connection or iCloud account is unavailable, completion may be delayed. The app keeps unfinished cleanup pending so it can retry. Changes may also take time to reach devices that are offline.
Some information may remain for a limited period in infrastructure backups or logs according to applicable retention periods.
10. Clear Cache
The Clear Cache feature removes temporary cached application files. It does not delete your personal photos, notes, Boards, Passport information, digital souvenirs, or private iCloud data.
11. Your choices and rights
You can control access to Photos, Location, and Notifications through iOS Settings. You can manage the MomentPass iCloud Sync preference within the application. You can also delete your MomentPass backend account from Settings.
Depending on where you live, applicable law may give you rights to request access, correction, deletion, restriction, objection, or portability regarding personal information we control.
To make a privacy request, contact support@momentpass.app. We may need to verify your identity before processing certain requests.
You also have the right to lodge a complaint with a competent data protection authority. In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ).
12. Children
MomentPass is not designed to knowingly collect personal information from children in circumstances where parental or guardian consent is legally required.
If you believe a child has provided personal information improperly, contact us.
13. Security
MomentPass uses technical and organizational safeguards designed to protect information, including encrypted storage for certain account information, hashed authentication credentials, private CloudKit storage for personal memories, and authenticated backend requests.
No system can guarantee absolute security.
14. Changes to this Privacy Policy
We may update this Privacy Policy when MomentPass changes or when legal requirements change. If an update materially changes how we handle personal information, we will update the date above and provide any additional notice required by applicable law.
15. Contact
Data Controller
Moskalyuk Andrey
Czech Republic
support@momentpass.app