Privacy

This page explains what Moments collects, why, who else handles it, how long we keep it, and the choices and rights you have. It covers the Moments iPhone app and this website. Vitae AI LLC runs Moments and decides how your information is used. Our name, postal address and support address are at the end of this page.

Moments is in testing. This page describes the app as it is today, and it changes when the app does.

No AI reads your responses.

We do not run an AI model over what you send: not on our servers, not in the app, and not through any other company. No transcription, no captions, no face detection, no object detection, no sentiment analysis, no embedding and no training, at any time, for any purpose, including moderation, safety, search, personalisation, analytics and product research. The storage that holds your videos, audio and photos is set up to refuse our hosting provider’s services for analysing images, video, speech and text.

What does handle what you send, and why:

• Your phone prepares a video, audio or photo Response before it leaves, and makes the still image shown in a Thread. Our servers do not decode it.
• Our servers store it, check that it arrived whole from its size and a checksum your phone sends, deliver it to the people you sent it to, put it in your own data download, and delete it.
• On the phone of the person you send it to, the app compares written Responses and Replies with a short list of words. A match is shown blurred until they tap. That is a comparison of words, not a model. It reads no video, audio or photo, and it sends nothing to us.
• If you add your own words to a Bond, our server sorts them into a relationship type with a fixed list of words and phrases. That is not a model either.

Features of iOS that a person turns on for themselves, such as VoiceOver, work on their own phone and are not part of Moments.

What you send is encrypted in transit and at rest. We control the keys, so the encryption keeps what you send from outsiders, not from Moments itself. What keeps people at Moments from looking is how our systems are built and the rules on this page: there is no routine way for anyone here to open a Response, and every time someone opens a reported one, it is recorded.

What we collect, and why

What	Why we use it	Legal basis, if you are in the UK or the EU
Your name, username, your profile photo if you add one, and the e-mail address from your sign-in with Apple, Google or an e-mail code	To run your account, sign you in, and let friends find and recognise you	Contract
Your date of birth and your gender	To choose Prompts for you. The choice reads the age worked out from your date of birth, and does not read your gender yet. The date is also what the 18-or-older rule is applied to	Contract. For the age rule, our legitimate interest in keeping Moments for adults
What you send: video, audio, photo and text Responses, Replies, Reactions, Prompts you write, and the note you add to an Invite	To deliver it to the people you chose, and to keep it for the periods below	Contract
Your friends, Friend Requests, Threads, Circles and the people you block	To run Threads and Circles, make Suggestions and start Journeys	Contract
What you do in the app: which Prompts you were shown and chose, who responded and when, Once views, Keep requests, your Streak, Daily Goal, Shared Moments counts and Trophies	To run each Moment, Unlock, the Streak and the Daily Goal, and to choose your next Prompts	Contract
Your Bond: the relationship types you choose for a Thread, and any words you add under Other	To choose Prompts for that Thread. No one in the Thread sees it	Contract
Your settings: reminder time, mutes, time zone, and who can see your photo, Streak and Trophies	To send Nudges at the right time and to apply your choices	Contract
Scrambled phone numbers and e-mail addresses from your contacts, if you turn contact sync on	To find friends who are already on Moments	Consent. You withdraw it by turning sync off
Device and connection details: a push token, the app version, the type of phone, sign-in tokens, and the IP address a connection comes from	To run the service, deliver what appears on your Lock Screen, and stop abuse	Contract, and our legitimate interest in running the service and stopping abuse
Reports you make or that name you, what was decided, and appeals	To protect people, enforce the Terms and meet legal duties	Our legitimate interest in protecting people, and legal obligation where a law applies
Analytics: that something happened and when, and the app version, under a code that does not name you. Never what anyone said, and never your name, date of birth, age or gender	To learn whether Moments works, for example whether people finish their first Moment	Our legitimate interest in improving Moments. You can object
The age check: the day you passed it, and whether Apple’s age range or your own date of birth let you in	To show that the 18-or-older rule was applied	Our legitimate interest in keeping Moments for adults
What you write to us at the support address	To reply and to help you	Contract, or our legitimate interest in helping you
Your e-mail address, if you join the waitlist on this website	To e-mail you when Moments is ready for you	Consent
While Moments is in testing: what Apple’s TestFlight shares with us about you as a tester, and any feedback, screenshots and crash reports you send through it	To test and fix the app	Our legitimate interest in testing Moments

If you allow it in your iPhone’s settings, Apple also shares crash reports and usage statistics about the app with us.

Where it comes from: you give us most of it, and your phone gives us the device details. Apple or Google gives us your e-mail address, and your name if you share it, when you sign in with them. Your friends give us some of it, for example when they send you a Friend Request, add you to a Circle or make a report. On iOS 26 and later, Apple’s age range is read on your phone and is not sent to us.

What we do not collect:

• Your location. There is no location permission in the app.
• Advertising identifiers. There are no ads and no ad code in the app.
• Contact names, photos, notes, or any contact field other than the scrambled number and e-mail address.
• Anything from Facebook or Instagram. Those connections are not available in the current app.
• Information about you from data brokers or anyone else who sells it.

What we do not read

We do not read, watch or listen to your video, audio and photo Responses, your text Responses or your Replies, and nothing of ours does.

The one exception: if someone reports a Response, one person on our team looks at that Response, and only that one, to decide what to do. The same applies to a reported Reply, and to an item named in a copyright notice.

Most reports are decided without opening anything, from facts like how many people reported it, how old the account is, how the people involved are connected and what earlier cases decided. When a person does open what was reported, they also see who sent it and who reported it.

When a law or a court order requires it, we may have to hand over what you sent. The section on sharing below says when.

Once

A video, audio or photo Response is viewable once by each person, unless the sender lets it stay. Text is always visible.

In a Journey, a stage Response stays viewable until the Journey finishes, unless you choose Once or Keep. This changes how long it can be viewed, not the 3-year storage limit for media.

If a friend asks to keep your Response, you decide: Keep lets it stay, Once more grants that person one more view, and No thanks leaves it Once. An unanswered request expires after 7 days without granting access.

To play without waiting, the app may fetch a friend’s Response to your phone before you open it. It keeps it in a part of the app’s storage that iOS encrypts while your phone is locked and that is left out of your backups, and nothing in the app opens it before it unlocks for you. When you close a Once Response after its one view, the app deletes it from your phone, and our servers refuse another view unless the sender grants Once more or Keep. Support does not grant another view on anyone’s behalf.

Viewable once is a rule of the app. It does not stop someone from filming their screen with another device. The next section says what the app does and does not stop.

Screenshots and screen recordings

When a friend’s Response is open in the app, screenshots and screen recordings show it blank on iPhone, and a screen recording pauses it. This relies on how iOS treats the view the app draws it in. If a version of iOS stops honouring that, the Response can show in a screenshot.

If you take a screenshot while a friend’s Response is open, the sender is told. A screen recording is not reported to the sender.

Outside that view, the app does not blank anything and does not report a screenshot. A Thread shows text Responses, Replies, and still images of photos and videos that are not Once, and a screenshot of those is not reported.

Another camera or microphone pointed at a phone can’t be stopped by anyone, and we don’t pretend otherwise. The Terms forbid recording or passing on another person’s Response, and getting around the way a screenshot comes out blank.

Saving

You can save your own Responses to your phone. The app has no control to save, copy or send on anyone else’s Response or Reply.

Contacts

Contact sync is off until you turn it on. You can disconnect it in Settings, then Privacy. It scrambles phone numbers and e-mail addresses before they leave your phone, and sends no names, photos or notes. We compare them with scrambled addresses and numbers that people on Moments have confirmed as their own, and a contact Suggestion is shown only when the match is mutual. Turning sync off or removing the iOS permission deletes the scrambled values we hold from you within 30 days. Deleting your account deletes them when the deletion runs.

Facebook and Instagram connections are not available in the current app. If an older connection is listed in Settings, then Privacy, you can disconnect it there or contact support. Any stored Facebook connection or Instagram username is deleted within 30 days of disconnecting.

We never send an invitation, text message or e-mail to anyone in your contacts. You send an Invite link yourself.

Who can see you, and blocking

People can look you up by part of your name or username and send a Friend Request. A search shows your name, your username, your photo unless you turn that off, and the friends and Circles you share with the person searching. It never shows your Responses. A request must be accepted before you become friends. A Circle can include people who are not your friends.

In Settings, then Privacy, you can choose whether friends see your Streak and Trophies, and whether people who are not your friends see your profile photo.

Blocking someone ends the friendship and hides your profiles, search results and individual Thread from each other. The Thread is still stored. We do not tell the person you blocked them. In Circles you share, they can still see your Responses under the Circle’s usual unlock rules. The app reminds you before you respond in a Circle with someone you blocked.

Unblock someone in Settings, then Privacy, then Blocked people. Unblocking restores visibility; it does not restore the friendship. Blocking and reporting are separate actions.

Nudges, and your Lock Screen

A Nudge never carries what anyone said: not a Response, not a Reply, not a Prompt, not your Bond, and not who in a Circle has yet to respond. Other things that appear on your Lock Screen can name a friend, for example when they respond, but never carry a Response, a Reply or a Reaction. They reach your phone through Apple’s push service.

Who else handles your information

A few companies run parts of Moments for us. They handle your information to provide their service to us.

Company	What it does for us	What it handles
Amazon Web Services	Hosting, the database, file storage, delivery of media to phones, e-mail, backups and this website, in the United States	Everything this page says we store
Apple	Sign in with Apple if you use it, delivery of what appears on your Lock Screen, and TestFlight while Moments is in testing	Your sign-in, your push token and the words that appear on your Lock Screen, and your tester details and what you send through TestFlight
Google	Sign in with Google, if you use it	Your sign-in

Apple and Google also deal with you directly when you sign in with them, under their own privacy policies.

We use no analytics, advertising or crash-reporting service, and no data broker. Our analytics and our logs stay in our own hosting account.

When we share it otherwise

• With the people you choose. Your friends and the members of your Circles see what you send them, under the Once, Keep and Unlock rules.
• With the authorities, when a law, a court order or other legal process that binds us requires it. Where the law requires it, we report the sexual exploitation of children to the bodies that receive those reports.
• To protect someone, when we believe in good faith that a person’s life or physical safety is at risk.
• To establish, exercise or defend a legal claim.
• If another company takes over Moments. Your information would pass to it, and it would have to keep to this page. We tell you in the app before that happens, and you can delete your account first.

We do not sell your personal information, and we do not share it for advertising.

Where your information is stored

Moments is run from the United States. Your information is stored and processed there, by Amazon Web Services, in its us-east-1 region, with backups in its us-east-2 region. If you use Moments from the UK, the EU or anywhere else, what you send us goes to the United States, where the law that protects personal information can differ from the law where you live. We apply this page to your information wherever you are.

How long we keep things

We keep video, audio and photo Responses for 3 years from the day they were sent, then delete them, whether they were Once or Kept and whether or not anyone watched them. Prompts, text Responses, Replies, Reactions, Shared Moments counts and Trophies stay with the Thread. Thirty days before a Kept Response reaches 3 years, the Thread shows the date it will be deleted.

What	How long
Video, audio and photo Responses, and their still images	3 years from the day they were sent. Sooner if you delete them, or your account
Text Responses, Replies, Reactions and Prompts	With the Thread. Your Responses and Replies are deleted with your account
Your profile photo	While it is your photo. A replaced or removed photo is deleted within a day
Your account, profile, date of birth, gender, settings and Bonds	While your account exists, then deleted when an account deletion runs, 30 days after you ask
Scrambled contacts	While sync is on. Deleted within 30 days of turning it off
A Keep request	Until it is answered, or 7 days
Your data download	Ready within 30 days, then available for 7 days
Your username, after your account is deleted	Held for 90 days, so nobody can take it, then released
Technical logs	Up to 90 days
Analytics	25 months, then only totals that name nobody
Reports, decisions and appeals	As long as they are needed to protect people, to handle an appeal and to meet the law
Database backups, which hold no video, audio or photos	Up to 400 days, encrypted, used only to recover from a failure or to test that we can
Your waitlist e-mail address	Until you leave the list

We keep something longer only when a law requires it, or while it is needed for a legal claim, a report or an appeal.

How we protect it

We use reasonable technical and organisational measures to protect your information. What you send is encrypted in transit and at rest. We limit each part of our system to what it needs to reach. Nobody at Moments has a routine way to open what you send, and every look at a reported item is recorded.

No way of storing information on the internet is perfect, and we do not promise that yours will never be exposed. If a breach puts your information at risk, we tell you and the authorities as the law requires. If you find a weakness, write to the security address at the end of this page, and read how we handle a report.

Download your data

Settings, then Privacy, then “Download my data”. The archive is ready within 30 days and stays available for 7 days. When it is ready, tap “Save my export” to save or send your ZIP archive using the iPhone sharing sheet.

It holds your profile, with your date of birth and gender, your friends list, the Threads and Circles you are in, every Prompt you were shown and chose, every Response you sent with the Thread it went to, every Reply you wrote, your Reactions, your Streak history, your Trophies, your Bond choices and any words you added under Other, your reminder and mute settings, and the date you connected and disconnected each sync.

It does not hold other people’s Responses, Replies or Bonds, which are theirs, or your scrambled contact data, which we keep only in scrambled form.

Delete your account

Settings, then Privacy, then “Delete my account”. Your account is deleted after 30 days. Cancel by signing in. What deletion removes, and what your friends keep, in full.

Copies in our database backups, which hold no video, audio or photos, go when those backups expire, up to 400 days later. Until then we use them only to recover from a failure or to test that we can.

Age

Moments is for people 18 or older. Before an account exists, the app asks when you were born and your gender, and says why. If the date you give is under 18, no account is made and nothing about you is kept.

While Moments is in testing, an account made before 16 October 2026, when Moments was for people 16 or older, stays open.

We keep your date of birth and your gender with your account, and the day you first answered. We use them to choose Prompts for you, and your date of birth for the 18-or-older rule, which a new date in Settings has to meet too. We work your age out from your date of birth and do not store an age beside it. No other person using Moments sees your date of birth, your age or your gender, and none of them is in our analytics. Our admin tools show someone helping with an account only the age worked out from your date of birth, never the date, and each look is recorded. You can change them in Settings, then Account. They are in your data download and are deleted with your account. If you told the app your age before it asked for a date of birth, we keep that age until you enter a date of birth, which replaces it.

On iOS 26 and later the app first asks your Apple Account for your age range, and you can decline to share it. The app uses the range to decide the check and does not keep it or send it to us. We keep one more fact with the day: whether Apple’s range or your own statement let you in.

Moments is not for children. We do not knowingly collect personal information from anyone under 13, and we do not let anyone under 18 make an account. If we learn that an account belongs to someone under 18, we close it and delete what it holds, apart from the testing accounts described above. A parent or guardian can write to the support address at the end of this page.

The waitlist

If you join the waitlist on this website, we keep your e-mail address, whether you joined for Moments in general or for Android, and when you joined. We use it for one thing: to e-mail you when Moments is ready for you. It is stored in our own hosting account, never given to a mailing-list company or anyone else, and used for nothing else. Each e-mail we send has a way to leave the list, and leaving deletes your address. You can also write to us at the address at the end of this page and we will delete it.

Your rights

Wherever you live, you can ask us to:

• give you a copy of what we hold about you, in a form you can take elsewhere;
• correct what is wrong;
• delete it;
• stop or limit using it while a question about it is settled;
• stop using it for a purpose you object to, such as analytics.

Where we rely on your consent, you can withdraw it at any time: turn contact sync off, or leave the waitlist. That does not undo what we did before.

Two of these are a tap in the app: “Download my data” and “Delete my account”, above. For anything else, write to the support address at the end of this page, from the e-mail address on your account so we know the request is yours. If we are unable to match the request to an account, we may ask for one more detail, and never for more than we need. Someone you authorise can ask for you, with your written permission.

We act on a request within one month. If a request is complex, we may take up to two more months, and we tell you why within the first month. A request costs nothing. Asking will never change how Moments treats you.

If you are in the UK or the EU and you think we have got this wrong, you can complain to your national data protection authority: in the UK, the Information Commissioner’s Office.

If you live in the United States

In the last 12 months we collected these kinds of personal information, from the sources and for the reasons in the table above: identifiers, such as your name, username, e-mail address, account and device identifiers and IP address; your age, from your date of birth, and your gender; how you use the app; audio, video, photos and text you send; and the relationship type your Bond is sorted into. What you send to friends is sensitive personal information under California law. We use it only to provide Moments to you, which the law allows, so the right to limit its use does not change anything here.

We disclosed these kinds of information only to the companies listed above, to provide Moments. We have not sold or shared personal information, as California law uses those words, in the last 12 months, and we do not sell or share the information of anyone under 16. Because we do not sell or share, a browser signal such as Global Privacy Control has nothing to turn off.

You have the right to know what we collect, use and disclose, to get a copy, to correct it and to delete it, and we will not treat you differently for asking. We reply through the same steps as in the section above, within 45 days, or 90 days for a complex request after telling you why.

If you live in another state with a privacy law and we turn a request down, you can appeal by writing to the support address with “Appeal” as the subject. We decide within 45 days and tell you why. If you disagree with the result, you can contact your state’s attorney general.

Decisions made automatically

We do not make decisions about you that have legal or similarly significant effects by automated means alone. Prompts are chosen for you by rules, from the facts this page lists. On a report, the only decision made without a person is closing a report that plainly has nothing behind it, and nothing is ever done to a person, a Response or a Reply without a person deciding it. The age check is automatic: a date of birth under 18 means no account. If you think the check got your case wrong, write to the support address.

Changes to this page

When we change what we collect or how we use it, this page and the privacy note in the app change in the same release, and the date at the top of this page changes with them. If a change affects information you have already given us, we tell you in the app before it applies, and where the law requires your agreement, we ask for it.