Momint Privacy Policy

• Momint is for planning hangouts, keeping memories and sharing moments with your people. To do that, we handle your account details, what you post, who you're connected to and, when you choose, where you are.
• Advertising, and how we limit it. Momint shows advertising through Google AdMob. If you're under 18, ads are never personalised to you: your activity is not used to choose them, and that cannot be switched on. If you're 18 or over, ads are only personalised if you say yes on our consent screen, and you can withdraw that at any time. Momint+ removes advertising.
• You decide who sees your stuff. Several settings start at "Everyone", so it's worth a look at Settings > Visibility.
• Chats are encrypted, but not end-to-end. Hangout chat messages are encrypted on your phone, but Momint also holds the keys. Section 6 explains exactly what that means.
• You can download your data and delete your account. A deleted account is gone for good after 14 days.
• Our servers are in Poland.
• Questions or complaints? privacy@momintapp.com

Momint is run by MOMINT LTD, a private limited company registered in England and Wales.

We are the controller of your personal data: we decide how and why it's used, and we're responsible for looking after it.

What this policy covers: the Momint app on iPhone and Android, the web pages that open when you tap a Momint link, and the emails we send you. It covers you whether or not you have a Momint account: for example, if you appear in someone's photo or send us a report.

What it doesn't cover: Apple's App Store and Google Play, which have their own privacy policies, and Google's own use of data for advertising (see section 7). The momintapp.com website is covered by this same policy.

What you have to give us. Your email address, date of birth and a username are needed to create an account: we can't sign you in without an email address, and the law requires us to check your age. If you don't want to give them, you can't create an account. Your name, profile details and everything else are up to you.

Your profile photo, banner, bio and location (a place you type in, like a city). Your privacy settings, notification preferences and best-friends list.

Your profile photo, banner and bio are visible to everyone on Momint. Your profile also shows how many friends and followers you have, how many people you follow, and how many hangouts you've been to; by default everyone can see those numbers, and you can hide each of them. Your profile location is visible to everyone by default. If you have Momint+, a badge shows that on your profile and next to your name. You can change these in Settings > Visibility, except the Momint+ badge.

• Photos and videos you add to memories, hangouts, posts or your profile, along with basic file details (name, type, size, dimensions, upload time) and any filter settings you used.
  • Photos are resized and re-saved on your phone before they're uploaded, which removes hidden details such as where the photo was taken. On top of that, every photo anyone else sees is re-made by our image server before it reaches them, and that process removes those hidden details too. So even if a photo reached us with them still attached (for example, if it was uploaded through our API rather than through the app), other people still don't receive them. The only copy of the original file you can get back is your own, in your data download.
  • Videos are different, and we'd rather say so plainly. They are uploaded and played as they are: they aren't re-saved on your phone first, and we don't re-make them the way we do photos. A video you add from your phone's gallery may therefore still contain hidden details recorded by your camera, such as where and when it was filmed, and anyone you allow to see or download the video can read them. Videos recorded with Momint's own camera aren't tagged with your location. If it matters to you, check your phone camera's location setting before filming.
• Posts: the photos and videos, caption, and who can see it (everyone or friends).
• Memories: your albums, their titles, and who you share them with (including whether they can share or post them further).
• Comments and replies, likes and bookmarks.
• Hangouts: title, description, date and time, place (address, place name and map coordinates), cover image, who's invited, RSVPs, invite messages, co-hosts, and settings like whether chat is on.
• Hangout chats: messages, replies, reactions, pinned messages, and polls and votes. Chats don't carry photos or videos. See section 6 for how chats are protected.
• Reports you send us about other people or content.

Your friends and friend requests, who you follow and who follows you, follow requests, the people you've blocked or muted, and the hangouts you're part of.

Momint only uses your phone's location if you give permission, and only while you're using the app.

• Sign-in codes. Stored only in scrambled (hashed) form, and they expire after 10 minutes.
• Sessions. When you sign in or your session refreshes, we store a scrambled version of the session token, when it was created and last used, when it expires, and the IP address it came from.
• Devices. A random device ID the app creates, your platform (iPhone or Android), operating system and app version, device model, and the device name your phone reports (which may include a name you've given it). We use this to show you where you're signed in, let you sign devices out, and alert your other phones the first time a new phone signs in to your account.
• Email address changes. While a change of sign-in email is in progress, and for 7 days afterwards, we keep the old and new addresses so the change can be undone from the old one.
• Push notification token, so we can send notifications to your phone. We store it encrypted.
• Security and spam signals. Short-lived counters of certain actions (such as friend requests sent, hangouts joined or created, and how much has been uploaded) and whether an account's friend requests are mostly declined. We use them to spot spam and abuse (see section 12). We also use IP addresses briefly to stop people hammering our sign-in system.
• Error logs. When something goes wrong on our servers, we log the time, the address requested, the IP address the request came from, and technical details of the error.
• Activity log. A record of important actions on your account, such as signing in, changing your email address, updating your profile, creating a post, or blocking someone. You can see recent entries under Settings > Screen time.
• Last seen. When you were last active. Your "Show online status" setting controls who can see it (friends, by default).

A record of the notifications we've sent you (who did what, and when; whether you've read or dismissed it), and a log of push notifications delivered to each of your devices.

Whether you've agreed to personalised advertising on our consent screen, how that answer reached us (the consent screen or Settings), and when. We keep this so we can show what you agreed to, and so ads can't be personalised for you without it. See section 3 for what Google's advertising software does on your phone.

If you subscribe, we get information from Apple or Google about your subscription: the product, transaction IDs, status, start and end dates, whether it will renew, and updates the store sends us. To link a purchase to your account, we give Apple or Google a random code that stands for your account; it doesn't tell them who you are. If you claim a Momint+ gift, we record the gift and when it ends. We never see your card or bank details. Apple or Google handle payment.

Other people can add information about you, for example when they invite you to a hangout, write about you in a comment or caption, share a memory with you, upload a photo you're in, or report you. Apple and Google also tell us whether your subscription is active and whether your push token still works.

We don't ask for sensitive information (such as your health, religion, sexuality or ethnicity). But photos, captions, bios and chats can reveal it. Please think about what you share and who can see it. We only use it to provide the features you're using, to keep Momint safe, and where the law requires.

Momint stores some information on your phone so the app works. The first table below lists it. Advertising is covered separately, after it.

Momint shows advertising through Google AdMob. Google's advertising software is built into the app, and Google decides how it uses the information it collects, as an independent controller (see section 7).

• To deliver any ad, even one that isn't personalised, Google's software receives technical information from your phone, such as your IP address and details about your device and the app. Google uses it to show the ad, to limit how often you see the same one, and to detect fraud. We ask Google to show only ads rated suitable for most audiences (Google's "PG" rating).
• Personalised ads use your phone's advertising identifier and your activity to choose ads for you. This only happens if you're 18 or over and you've said yes on our consent screen. If you haven't been asked, or you said no, ads are not personalised.
• The consent screen is shown after you sign in, to adults where the law requires consent first, such as in the UK and the EEA. It's run by Google's consent tool, which stores your answer on your phone, and we record your answer on our servers too (section 2.8). If you said yes, you can withdraw at any time in Settings > Advertisements > Ad choices, and personalisation stops straight away.
• On iPhone, if you're 18 or over you may also see Apple's prompt asking whether Momint can use your advertising identifier ("Ask App Not to Track"). If you say no, ads are not personalised with it, and nothing else in Momint changes: no feature stops working, because Momint has no other use for it.
• On Android, Google's software can also use the advertising features Android provides, such as the advertising ID and Android's ad-privacy features, within your phone's settings. You can reset or delete your advertising ID in your phone's settings.
• If you're under 18, ads are never personalised, whatever you answer anywhere, and we don't show you the consent screen or Apple's prompt at all, because your answer couldn't change anything. We also tell Google that you're under the age of consent.
• Momint+ removes advertising: no ads are requested or shown. Google's advertising software is still part of the app, and may still contact Google when the app starts.

Google explains how it uses information from apps that show its ads at policies.google.com/technologies/partner-sites.

Your phone asks your permission before Momint can use the camera, microphone, photo library, location or notifications. You can change these at any time in your phone's settings. Most of Momint still works without them; for example, without location you won't see yourself on the map.

When someone shares a Momint link (addresses containing /p/, /post/, /hangout/, /m/, /u/ or /gift/), the page you land on shows a short preview, if there is one, and then opens the Momint app.

What a preview shows is in section 5. If you paste a Momint link into a messaging app or social network, that service may fetch the preview itself, under its own privacy terms.

• Log out (Settings > Log out). This clears your sign-in details, chat keys, cached chats and images, sync position, widget content and push token from that device.
• Uninstall the app to remove everything Momint stored on your phone, including the device ID.
• Change permissions in your phone's settings at any time.
• Reset or delete your advertising identifier in your phone's settings (on Android), or turn off tracking for Momint (on iPhone), at any time.

Data protection law says we need a valid reason, called a lawful basis, for each thing we do with your data. These are the ones we rely on:

• Contract: we need it to give you the Momint service you signed up for.
• Legitimate interests: it's in our interests, or other people's, and those interests aren't outweighed by your rights. You can object to these; see your rights.
• Legal obligation: the law requires it.
• Consent: you've agreed. You can withdraw it at any time.
• Vital interests: to protect someone's life.

Phone permissions. Your phone asks your permission before Momint can use the camera, microphone, photos, location or notifications. We only use them for the features that need them.

More detail:

• Private accounts. If your account is private, only your friends and the people who follow you can see your posts. Making your account private doesn't remove people who already follow you; you can remove them under Settings > Followers. New followers need your approval.
• Public posts can be seen by anyone on Momint (except people you've blocked). If you share a public post's link, anyone with the link sees a preview (your username, the caption, and the first photo), including in messaging apps that show link previews. If your account is private, the link shows no preview.
• Friends-only posts only show to your friends. Their share-link preview doesn't show the content.
• Memory links. If you share a link to one of your memories, anyone with the link sees your username and profile photo. If some of that memory's photos are in your public posts, they also see one of those photos, the caption of your latest public post from it, and how many of its photos you've posted publicly. Nothing else in the memory is shown, including its title. If your account is private, a memory link shows nothing.
• Profile and gift links (/u/ and /gift/) show nothing about you; they just open the app.
• Hangouts come in three types:
  • Public: visible to Momint users aged 18 or over whose accounts are at least 30 days old, including on the map with the place. You need to be 18 or over to host one.
  • Friends: visible to the host's friends.
  • Invite-only: visible to the people invited.
  • Whatever the type, anyone who has a hangout's invite link can open it in the app and join it (except people under 18, for a public hangout). The host can replace the link at any time; people who already joined stay in. Anyone with the link also sees a preview (title, description and cover image) while the hangout is active.
• Who's going. Everyone who can see a hangout can see who's going, who said maybe and who can't go.
• Invites: only your friends can invite you to a hangout.
• Hangout memories (the shared album for a hangout) are visible to everyone who's going. They can download the photos, and they can post photos from it to their own profile. The photo stays yours: if you delete it, it disappears from their post too. Leaving a hangout (answering "not going") keeps what you added in its shared memory. If you remove yourself from the shared memory after the hangout, or the host or a co-host removes you from the hangout, the photos and videos you added there are deleted.
• Hangout chats are visible to the host and everyone who has answered going or maybe. Answering "not going", leaving or being removed ends your access to the chat. Everyone in the chat can see who voted for what in a poll.
• Comments: by default anyone can comment on your posts. You can limit this to friends or no one.
• Friend requests: by default anyone can send you one. You can limit this to friends of friends, or no one.
• People you may know: you can appear in other people's suggestions. You can turn this off.
• Search: people can find you by your username. When someone searches their own friends or followers, they can also find you by your real name, but only if they're allowed to see it.
• Blocking someone stops them seeing your content and interacting with you, and removes any friend or follow connection between you. Muting hides their posts from you without telling them.
• Suspended accounts and accounts being deleted. While an account is suspended, or waiting to be deleted, its profile, profile photo and posts are hidden from everyone else, and so are the photos and videos it added anywhere, including to a hangout's shared memory.

We'd rather be clear than sound impressive.

• On the way to and from our servers: the app connects to Momint over encrypted connections (HTTPS and secure WebSockets).
• Hangout chat messages and polls are encrypted on your phone before they're sent, using a key shared by the hangout's members. Our database only stores the encrypted version.
• But this isn't end-to-end encryption. Momint's servers manage the chat keys: they create each chat's key, and when someone joins a hangout, our server hands them the key. Our servers also keep a copy of every user's private key, so you can read your chat history on a new phone. Those copies are themselves encrypted, with a separate key held on our application servers, so a copy of our database alone can't unlock them. But Momint could technically decrypt chats. We only ever do so in two situations:
  • A message someone in the chat reports. When someone reports a chat message, our server decrypts that one message, using the key of the person reporting it, who could already read it. It's kept with the report, encrypted, so our team can see what was reported. Not the conversation around it, and not the rest of the chat.
  • Where the law requires it, such as a valid legal request.

• Leaving a chat. When you leave or are removed, our server stops giving you the chat. Messages already on your phone stay there until you log out.
• What we can always see about chats: who is in which hangout, when messages are sent, the type of message, poll results and who voted for what, and the sender's name and hangout title shown in notifications.
• On your phone: chats are stored decrypted in the app's local database so you can read them, until you log out.
• Everything else (profiles, posts, photos, videos, comments, hangout places) is not end-to-end encrypted. It's stored on our servers and protected by access controls: every photo request is checked against who's allowed to see it, and the links we hand out expire.
• Also encrypted on our servers: push notification tokens, and the evidence we keep with reports.

• Other Momint users, as described in section 5.
• Our service providers, who handle data for us only on our instructions:
  • our hosting provider in Poland, which runs all of Momint's servers, including our database, photo and video storage, and our map and place-search service,
  • our email provider, which sends your sign-in codes and other service emails,
  • Apple's and Google's notification services, which deliver notifications to your phone. They receive your push token and the notification text, which can include another person's name, a hangout title and the start of a comment. For chat messages, the message itself is encrypted, but the sender's name and hangout title are not.
• Google AdMob, which serves the advertising in Momint. Google decides how it uses the information its advertising software collects, as an independent controller, under its own privacy policy. See section 3 for what it receives and the limits we put on it.
• Apple and Google as app stores, when you buy Momint+. They handle payment under their own terms and privacy policies.
• Authorities, where the law requires it. For example, we must report child sexual exploitation and abuse to the UK National Crime Agency. We may also share information with the police or others to protect someone from serious harm.
• Professional advisers, such as lawyers and accountants.
• A buyer or successor, if Momint is sold or reorganised. We'll tell you before your data is transferred.

Everyone we share your data with must protect it to the same standard as this policy.

• Our servers are in Poland, in the European Economic Area. UK law recognises the EEA as having adequate data protection, and the European Commission recognises the UK as adequate (a decision renewed in December 2025, until December 2031).
• Some of our providers, and Apple and Google, may process data in the United States and other countries. Where they do, the transfer is protected in the way UK and EU law require, for example by standard contractual clauses or the UK International Data Transfer Agreement.
• Our own people: access to production data is limited to Momint's founders, who are in the United Kingdom and Croatia. Croatia is in the EEA; for the United Kingdom, the European Commission recognises the UK as providing adequate protection.

You can ask us for more information about these safeguards, and for a copy of them, at privacy@momintapp.com.

We may keep some data longer if the law requires it, or if it's needed for a legal claim or to protect someone's safety. An account under a legal hold is not erased until the hold ends.

These rights belong to anyone whose personal data we handle, not only people with a Momint account. That includes someone who appears in a photo another user posted, someone who received a hangout invite, and someone who sent us a report.

You have the right to:

• access your data and get a copy,
• correct it if it's wrong,
• delete it,
• restrict how we use it,
• object to how we use it (always for direct marketing),
• move it to another service (data portability),
• withdraw consent, where we rely on it, at any time and without affecting what we did before you withdrew it,
• not be subject to certain automated decisions,
• complain to us about how we handle your data, and complain to the regulator: see section 15.

Most of these you don't need to ask us for:

Email privacy@momintapp.com with the subject line "Privacy request". Tell us:

• which right you want to use,
• what it's about (all your data, or something specific),
• your Momint username, if you have one.

Please send it from the email address on your Momint account if you can. That's the quickest way for us to know it's you.

Deleting your account without the app. If you can't use the app, email privacy@momintapp.com from your account's email address with the subject line "Delete my account". We'll confirm it's you, then delete the account in the same way as the in-app option.

No account, or can't get into it? Tell us how we can find your data, for example the share link to a post that shows you.

Asking for someone else? We'll need their written permission, or proof you have legal authority to act for them. Rights over a young person's data belong to them, and we'll take their views into account.

Checking it's you. We need to be sure we're giving data to the right person. Usually we'll ask you to confirm the request from your account's email address, or send a one-time code to it. We'll only ask for more if we genuinely can't confirm who you are.

How long it takes

• We'll respond within one month of receiving your request.
• If we need to confirm your identity, or ask you to clarify what you're asking for, the clock pauses until you reply.
• For complex or multiple requests, we can extend by up to two further months. If we do, we'll tell you within the first month and explain why.
• We'll carry out reasonable and proportionate searches for your data.
• It's free. If a request is manifestly unfounded or excessive (for example, repeated requests for the same thing), we may charge a reasonable fee or refuse, and we'll explain why and remind you of your right to complain.

• You need to be 16 or older to use Momint. This applies everywhere Momint is available. We ask for your date of birth when you sign up and check it on our servers, not just in the app, so changing the app cannot get around it. On an iPhone, we also check it against the age range on your Apple Account, if you share it. If we learn that someone under 16 has an account, we'll delete it. If you think a child under 16 is using Momint, email us at safety@momintapp.com.
• If you're 16 or 17, you can use Momint, and the law gives you the same privacy rights as adults. Some things work differently for you:
  • Public hangouts are not available. You can't see them, search for them, find them on the map, join one, be invited to one, or host one. Hangouts with friends and invite-only hangouts work normally, and a hangout you're part of can't be turned into a public one.
  • Advertising is never personalised to you. Your activity is not used to choose which ads you see, and this cannot be switched on. We don't show you the advertising consent screen or Apple's tracking prompt at all, because your answer couldn't change anything.
  • Your account starts private. When you sign up under 18, we set your account up the careful way rather than the open way: your profile is private, only friends of your friends can send you a friend request, only friends can comment on your posts, and your friends and followers counts and your location are shown only to your friends. These are starting points, not locks: you can change any of them in Settings, the same as anyone else.
  • You're not suggested to adults. Adults won't see you in "People you may know". Other 16 and 17-year-olds still will, so you can find people your own age.
• We keep your date of birth only while we need it. If you sign up aged 18 or over, we don't store your date of birth at all, only the fact that you're an adult. If you sign up aged 16 or 17, we keep the date until your 18th birthday, because that's what tells us when you become an adult. On that day we delete it and simply record that you're an adult.
• You can't change your date of birth in the app. If it's wrong, email privacy@momintapp.com and we'll look into it.

There's a short guide for teens and parents at Teens on Momint.

Some things on Momint are done automatically:

• Your "For you" feed is ordered automatically (friends' posts and recent posts first).
• "People you may know" suggestions are made automatically. You can stop appearing in them. People under 18 are never suggested to adults.
• Recaps are put together automatically. You can turn them off.
• Spam limits: if an account sends an unusual number of friend requests, joins or creates an unusual number of hangouts, or has most of its friend requests declined, Momint may automatically limit it for up to 24 hours. While the limit lasts, the account can't do those things, and its profile, posts and hangouts are hidden from other people.
• Upload checks: if an account uploads an unusually large amount in a short time, it's automatically flagged for a person at Momint to look at. Nothing is removed or blocked automatically because of it.
• Whether ads can be personalised is worked out automatically from your age, whether you have Momint+, and your answer on the consent screen (see section 3).

None of these are decisions with legal or similarly significant effects. If an automatic limit affects you and you think it's wrong, contact us and a person will look at it. Decisions to suspend or close an account are always made by a person, never automatically.

• Service emails: we email you sign-in codes, a welcome message, hangout invites (when someone invites you), codes to confirm a change of your email address, an alert to your old address when it has changed, and your data download when you ask for it. If someone tries to move their Momint account to an email address that's already in use, we let that address know. These are part of running Momint, not marketing.
• Notifications: hangout reminders, new-sign-in alerts and everything else come as notifications in the app and on your phone, not by email. When a phone signs in to your account for the first time, your other phones get a notification.
• Push notifications: you choose which ones you get in Settings > Notifications, and you can turn them off in your phone's settings.
• Marketing: we only send marketing messages where the law allows (usually with your consent), and every one has a way to opt out.

What we do:

• Sign-in codes and session tokens are stored hashed.
• Sessions are tied to your device, and a stolen session token is detected and shut down.
• Your other phones are alerted when a new phone signs in, and you can sign out other devices (with a code sent to your email).
• Changing your email address needs a code from your current address as well as the new one, signs you out everywhere else, and sends your old address a link that undoes the change for 7 days.
• Sign-in and other sensitive actions are rate-limited.
• Every photo and video request is checked against who's allowed to see it, and the links we hand out expire.
• The copies of chat keys we hold are encrypted with a separate key, and so are push tokens and report evidence.
• Encryption as described in section 6.

No system is perfectly secure. If a breach puts your data at risk, we'll tell the Information Commission (the UK regulator, known as the ICO) within 72 hours where the law requires it, and we'll tell you without undue delay if it's likely to put you at high risk.

You have the right to complain to us about how we handle your data, and to complain to the regulator.

1. Complain to us: email privacy@momintapp.com with the subject line "Data protection complaint". We'll acknowledge it within 30 days, look into it without undue delay, keep you updated, and tell you the outcome.
2. Complain to the regulator: in the UK that's the Information Commission, which still uses the name ICO: ico.org.uk/make-a-complaint, or call 0303 123 1113. You don't have to complain to us first.
3. In the EU or EEA, you can also complain to your local data protection authority: list of EU authorities.

• EU and EEA: the EU GDPR also applies to how we handle your data. You have the rights described here, and you can complain to the data protection authority in the country where you live or work, or where you think the problem happened.
• Where Momint is available: the United Kingdom, the EU and EEA, and the United States. Momint is not offered in Australia.
• Everywhere else: you may have extra rights under your local laws. Email us and we'll help.

We'll update this policy when Momint changes. If a change is significant, we'll tell you in the app or by email before it takes effect. If we ever want to use your data for a purpose this policy doesn't describe, we'll tell you about it first. The date at the top shows when it was last updated.

MOMINT LTD, 2nd Floor Excel House, 84 Edgware Way, Edgware, England, HA8 8JS privacy@momintapp.com · hello@momintapp.com