Privacy Policy

Data we collect

• Account data: name, email address, and the Google or Apple sign-in identifier when you choose that option. We do not receive your password for those services.
• Content you provide: moment and invitation text, group contributions, replies, RSVP data, and media you choose to upload.
• Operations and security data: a random session identifier, platform type, creation/open timestamps, and limited logs needed to prevent abuse and diagnose failures.
• Reports and support: report reason and details, plus a follow-up email only when you provide one or are signed in.

How we use data

• Create, store, synchronize, and display experiences to people who have the link.
• Manage accounts, replies, attendance, media, and support requests.
• Prevent fraud and abuse, process reports, and enforce Community Guidelines.
• Improve stability and features without building an advertising profile.

Visibility and sharing

Moment links are unlisted by default, but they are not secret: anyone who receives a link can open and reshare it. Do not include highly sensitive information in shareable content.

We do not sell personal data, use it for targeted advertising, or track you across other companies’ apps and websites. Hosting and database providers process data for us; Google or Apple process sign-in data when selected. YouTube content appears only when a creator adds a YouTube link.

Artificial intelligence

Current generation uses built-in templates and does not send your text to an external AI provider. If an external service is enabled later, we will update this policy and store disclosures and obtain appropriate consent first.

Retention and deletion

• We retain accounts and content until you delete them or retention is legally or operationally required.
• Registered sessions normally expire after 90 days and guest sessions after 365 days; logout or deletion ends them sooner.
• Delete your account or guest data and associated content inside the app, or use the website account-deletion page. A limited copy may remain temporarily in rotating backups, or where evidence is required for a report or legal duty.
• Registered users can export a JSON copy from account settings.

Security and your rights

We use HTTPS, hashed session tokens, and secure device storage. No electronic method is guaranteed, so share links carefully.

To request access, correction, deletion, objection, or withdrawal of consent where applicable, contact [email protected]. The service is not directed to children under 13 and we do not ask them to create accounts.