Privacy Policy

Effective September 4, 2026

The short version: the Moment app collects nothing. There is no account, no analytics, no advertising, no third-party code, and no server of ours. What you write stays on your phone, and we have no way to read it. This website collects only what you type into its forms.

This policy covers two things: the Moment app for iPhone, and this website, withmoment.app. They work differently, so they are described separately below.

The app: what we collect

Nothing. Moment has no sign-up, no login, and no server. The app makes no network requests of its own; the only network activity is Apple's own App Store purchase system. We never receive your name, email, entries, health data, usage, or anything else. Our App Store privacy label reads Data Not Collected, and that is literal: we could not sell or leak your data even if we wanted to, because we never have it.

The app: what stays on your device

Everything Moment knows about you lives in a local database on your phone, protected by iOS's built-in encryption at rest. That includes:

Your habits, daily intentions, and whether they happened.
Check-ins, reflection tags, and any notes you write.
Derived data such as your habit score, daily rollups, and the patterns computed from your own history.
Your in-app preferences (appearance, reminders, app lock, and the on-device intelligence setting).

You can export everything at any time (Settings → Data → Export data produces a ZIP of spreadsheets with your full history) or erase everything (Settings → Data → Reset all data). Neither requires a purchase. Deleting the app deletes its local data.

iCloud Backup

Like most apps, Moment's data is included in your device backup if you have iCloud Backup turned on. That backup is encrypted and stored by Apple under Apple's Privacy Policy; we have no access to it. With standard iCloud Backup, Apple holds the encryption keys. If you turn on Apple's Advanced Data Protection, your backup becomes end-to-end encrypted and Apple cannot read it either. You can also exclude Moment from iCloud Backup in your iPhone's iCloud settings; if you do, your journal will not carry over to a new phone.

Apple Health

If you choose to connect Apple Health, Moment reads only the categories you approve (such as steps, sleep, or exercise), read-only and on-device, solely to show them alongside your own entries and to look for patterns within your own history. Moment never writes to Health, never transmits Health data anywhere, and never uses it for advertising or marketing, sells it, or shares it with anyone. You can revoke access at any time in iOS Settings → Privacy & Security → Health.

On-device intelligence

Moment's insights, including any language analysis of what you write, are computed entirely on your device using Apple's on-device frameworks (the NaturalLanguage framework, and Apple Intelligence's on-device models on iPhones that support them). Your words are never sent to a server, ours or anyone else's. You can turn these features off in Settings → Privacy.

Dictation

Moment does not have microphone access. If you use the dictation key on the iOS keyboard to enter text, dictation is performed by iOS, not by Moment, and is governed by Apple's dictation privacy terms. Depending on your device and language, Apple may process dictation on its servers. The text that results is stored on your phone like anything else you type.

Face ID and app lock

If you turn on the app lock, Moment asks iOS to confirm your identity with Face ID or your passcode. Moment only receives a yes or no. Your biometric data never leaves your phone's Secure Enclave and is never available to Moment.

Notifications

Reminders are scheduled locally on your device. No push servers are involved, and nothing about your reminders leaves the phone.

Purchases

Subscriptions and one-time purchases are processed entirely by Apple through your Apple ID. Moment receives no payment details and no personal information about you from the transaction. Apple provides us with aggregate sales reports that contain no personal identifiers. Refunds are handled by Apple. Apple's handling of your purchase is governed by Apple's Privacy Policy.

Crash and diagnostic data

If you have opted in to sharing analytics with app developers in iOS settings, Apple may share anonymized, aggregated crash reports with us through Apple's own systems. These contain no journal content and no identity, and the setting is controlled entirely by iOS, not by Moment.

This website

Hosting. withmoment.app is hosted by Netlify. Like any web host, Netlify keeps standard server logs (your IP address, browser type, the pages you visit, and timestamps) for a limited period, under Netlify's Privacy Policy. We do not use these logs to identify you.

No tracking. This site sets no cookies and uses no analytics, advertising, tracking pixels, or embedded third-party content. Fonts and scripts are served from this domain.

Forms. The site has two forms, both processed by Netlify:

Launch notification — your email address. We use it only to tell you when Moment launches or changes materially, and we never share it. Ask us through the contact form to remove it at any time.
Contact — your email address, your message, and an optional screenshot. We use them only to respond to you. We delete submissions once your request is resolved.

A screenshot of Moment may show your own journal entries. Include only what you are comfortable sharing with us; we treat anything you send as confidential and delete it as described above.

Children

Moment is not directed at children under 13 and does not knowingly collect information from anyone, including children. If you believe a child has sent us information through this website, contact us and we will delete it.

Your rights

Because the app holds no data about you on any server, there is nothing for us to access, correct, port, or delete on your behalf: every one of those actions is available to you directly on your phone, as described above. For anything you have sent through this website, you can ask us to delete it at any time using the contact form. We do not sell personal information, and we do not share it with third parties, in any jurisdiction. Where local law (such as the GDPR or the CCPA) gives you additional rights, you can exercise them by contacting us.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date. Because the app collects nothing, we expect changes to be rare.

Contact

Questions about this policy? Send them here: