Privacy Policy

Moments: Daily Reflections (“the app”) is a private, single-person micro-journal developed by Tamas Bereczki (“we”, “us”, “our”). The app is built so that we do not collect personal data, we do not operate any servers, and we do not use analytics, advertising, or tracking SDKs of any kind. Your moments are yours. This page explains the limited data the app stores on your device and the Apple and Google platform services it relies on. Where something applies to only one platform, the section says so.

1. Data stored on your device

Everything you create in Moments is stored locally on your device. On iOS the app uses Apple’s on-device frameworks (SwiftData and UserDefaults); on Android it uses an on-device database (Room) and Android’s app preferences (SharedPreferences). This includes:

• Your moments — each check-in’s timestamp, the chosen activity, the chosen mood, and an optional note.
• Custom activities you create (a name and an icon).
• Habits and experiments you set up, and the days you log them.
• App settings — notification frequency, quiet-hours window, appearance, the preferences you choose during onboarding, and, on iOS, whether face check is on.
• Local statistics — your streak and simple counts used to draw the Insights screen.
• Face check measurements, if you use face check on iOS (see section 4).

This data stays on your device, apart from the optional sync and backups described in sections 2 and 3, which are held in your own Apple or Google account. It is removed from the device when you delete the app. We have no copy of it and no way to access it.

On iOS, the app also hands a small summary (your recent mood, streak, habits and latest moments, including a short snippet of any note) to its Home Screen and Lock Screen widgets through storage shared only between the app and its widgets on your device. If you use the Apple Watch app, moments you log on your watch and a similar summary are passed between your iPhone and your Apple Watch with Apple’s WatchConnectivity. Neither involves us or any server.

If you export your data (as a PDF, CSV or JSON file), the file is created on your device and goes only where you choose to save or share it.

2. iCloud (iOS)

On iOS, iCloud sync between your iPhone and iPad is an optional Moments Plus feature, and it is off until you turn it on in the app’s Settings. When it is on, your data is stored in the private iCloud container associated with your Apple Account. It is governed by your iCloud settings, and we cannot read, retrieve, or share it. You can turn sync off at any time in the app’s Settings, or disable iCloud for Moments in Settings → Apple Account → iCloud. If Moments Plus ends, sync switches off and the data on your device stays where it is.

Face check measurements are the exception: they are kept in a separate store on your iPhone that is never synced to iCloud and is excluded from iCloud and device backups.

Apple’s privacy policy: apple.com/legal/privacy.

3. Android backup (Google)

On Android, Moments uses Android’s standard backup service. If backup is turned on for your device, Android may include the app’s data described in section 1 in the backup stored in your Google Account, and restore it when you set up a new device or reinstall the app. This backup is created and managed by Android and Google, not by us, and we cannot read, retrieve, or share it. Data read from Health Connect is not stored by Moments, so it is never part of this backup (see section 6).

You can manage or turn off backup in your device’s backup settings (their location varies by device manufacturer and Android version).

Google’s privacy policy: policies.google.com/privacy.

4. Face check and face data (beta, iOS only)

Face check is an optional, beta feature on the Check-In screen of the iOS app. It is not available on Android. It is off the main path, and check-ins work the same without it. It runs only when you start it. When you do, Moments uses the front camera and Apple’s ARKit face tracking (with the TrueDepth camera, on iPhones that have one) for about 20 seconds to notice how you look compared with your own usual. It never decides how you feel.

• What is read. While a check runs, ARKit gives the app numbers describing your face in each camera frame: facial expression values (for example how closed each eye is, and brow and mouth movement), the angle of your head, and an estimate of the room’s light. The app does not use or keep camera images, depth maps, or the 3D shape of your face.
• All processing happens on your iPhone. No photos, video, or face images are saved, and nothing is sent to us or anyone else. The camera preview you see during a check is shown live and never recorded.
• What is kept. From each check the app keeps only a few derived numbers (for example how often you blinked and how open your eyes were on average), the time of the check, the observation it showed you, and the mood you chose, if you chose one. These are used only to learn your own usual and show you an observation such as “You look a little tired today.”
• Where it is stored. Face check data is stored only on this iPhone, in a separate store that is excluded from iCloud sync and from iCloud and device backups. It is not shared with widgets or the Apple Watch app, not written to Apple Health, and not included in data exports.
• Not shared, not used for anything else. Face check is not Face ID and is not used to identify or authenticate you. Face data is never used for advertising, marketing, tracking, or profiling, never used to train AI models, and never sold or shared with any third party, including RevenueCat.
• Retention and deletion. Face check data is kept on your iPhone until you delete it. You can turn face check off, or delete all face check data, at any time in the app’s Settings → Face check. Deleting the app also removes it. You can revoke camera access in iOS Settings → Privacy & Security → Camera.

5. Apple Health (iOS)

If you allow it, Moments on iOS reads a few Apple Health metrics (heart rate variability, resting heart rate, steps, exercise minutes, sleep, and mindful minutes, plus State of Mind) to show whether your habits line up with feeling better. With your permission it can also save your check-ins to Health as State of Mind entries. Health data is read and used only on your device; it is not sent to us or any third party, and it is never used for advertising or marketing. You can change or revoke access at any time in the Health app.

6. Health Connect (Android)

If you allow it, Moments on Android reads the following data types from Health Connect, and only these:

• Heart rate variability
• Sleep
• Steps

Moments only reads this data. It never writes to, changes, or deletes any data in Health Connect.

• How it is used. Health Connect data is used only for features you can see in the app: to show whether your habits line up with how you feel and how you sleep (for example, comparing heart rate variability and sleep on days you kept a habit with days you did not), and to support health-based habits such as a daily step goal.
• Storage and retention. Moments does not store Health Connect data. It reads the data it needs when you open a screen that uses it, processes it in memory on your device to calculate what is shown, and then discards it. It is not saved in the app’s database and is not included in the Android backup described in section 3.
• Sharing. Health Connect data never leaves your device. It is not sent to us, to RevenueCat, or to any other third party. It is never used for advertising, never sold, and never transferred to anyone.
• Security. Because the data is processed only on your device and never transmitted, it stays within the protection of Android’s app sandbox and Health Connect’s own permission system.
• Your control. Access is requested only when you choose to connect Health Connect, and the app works fully without it. You can grant or revoke access to each data type at any time in Health Connect’s settings. Deleting the app also removes its access.

The use of information received from Health Connect by Moments adheres to the Health Connect Permissions policy, including its Limited Use requirements.

7. Notifications

With your permission, Moments schedules quiet check-in reminders. These are local notifications scheduled and delivered on your device by the operating system (Apple’s UserNotifications framework on iOS, and Android’s notification system on Android). No server is involved, and no data about you is sent anywhere. You can change the frequency, set quiet hours, or turn reminders off entirely in the app’s Settings, or revoke the permission at any time in your device’s system settings.

8. Purchases and RevenueCat

Moments is free to use. The optional Moments Plus upgrade is sold as a subscription or a one-time lifetime purchase, through Apple’s App Store on iOS and Google Play on Android. Purchases are processed by Apple or Google; we never see your payment method, billing address, or Apple Account or Google Account details.

We use RevenueCat, Inc. as a processor to validate those purchases and to tell the app whether Moments Plus is active. When you open the upgrade screen, buy, or restore a purchase, the following is exchanged with RevenueCat:

• Purchase and subscription data — the App Store transaction receipt or the Google Play purchase token, the product bought, purchase and expiry dates, and renewal status.
• An anonymous customer identifier generated by RevenueCat. We do not provide RevenueCat with an account, email address, name, or any identifier of our own, because the app has no accounts.
• Basic technical context — app version, device platform and OS version, and store country, used to return the correct pricing and validate the purchase.

None of your moments, habits, notes, Apple Health or Health Connect data, or face check data is ever sent to RevenueCat. This data is used solely to run purchases, and it is not used for advertising or to track you across other apps or websites.

RevenueCat’s privacy policy: revenuecat.com/privacy.

9. What we do not do

• No analytics, attribution, advertising, or crash-reporting SDKs.
• No advertising, and no use of Apple’s Advertising Identifier (IDFA) or the Android advertising ID.
• No developer-operated servers. The only third-party service is RevenueCat, for purchases (section 8).
• No accounts, sign-in, or user profiles.
• No tracking across other apps or websites.
• No use of anything you log to train AI models.
• No sale or sharing of personal data — we have none to sell.

10. Children

Moments is intended for a general audience and does not knowingly collect personal data from anyone, including children.

11. Your rights

Because we do not store or process your data on any server, there is nothing on our side to access, export, correct, or delete (RevenueCat holds only the anonymous purchase records described in section 8). You remain in full control on your device:

• Delete individual moments from the Timeline at any time.
• Delete all face check data from the app’s Settings (iOS).
• Delete the app to remove all of its local data from the device.
• Manage any iCloud data through your Apple Account settings (iOS).
• Manage or delete the Android backup through your device and Google Account settings (Android).
• Revoke Apple Health or Health Connect access at any time in the Health app (iOS) or in Health Connect (Android).

If you are in the EEA or UK, laws such as the GDPR and UK GDPR may grant you rights including access, rectification, erasure, and portability. Because your data lives only on your device and in your own iCloud or Google Account backup, these are exercised directly through your device and Apple’s or Google’s services.

12. Changes

We may update this Privacy Policy as the app evolves. Material changes will be reflected by updating the effective date at the top of this page.

13. Governing law

This Privacy Policy is governed by the laws of Romania, without regard to conflict of law principles.

14. Contact

Questions, requests, or anything else: support@appsbytommy.com.