Privacy Policy

Draft of 18 October 2026. It must be reviewed by a lawyer before anyone relies on it.

What is stored

Your username, name, profile details, the moments, photos, videos, comments and reactions you post, your friendships and settings, and the public keys of your passkeys. There are no passwords. Sign-in links and session tokens are stored only as one-way hashes.

Location

If you turn on Arrived, your phone sends a location rounded to about 1 km each time you open the app. The server turns it into a city and discards it; only the city is kept. Check-in coordinates are stored rounded to about 100 m. Place search sends a position rounded to about 1 km to the places provider.

Who can see it

Only the friends in the audience you choose. Someone who loses access to a moment may keep loading media they already had open for up to 60 minutes.

Security

Data is encrypted at rest by the hosting provider, but it is not end-to-end encrypted: the service's own systems can read it to show it to your friends. Admins can issue account recovery links.

Sharing

Your data is never sold or shared for advertising, and there are no third-party trackers. Searches for songs, books, movies, TV shows, podcasts and places are sent to those catalogs' providers, whose data is credited where it appears.

Export and deletion

You can download your data in Settings. Deleting your account erases your data immediately; backups age out within 7 days.

Contact

Ask the person who invited you, or any admin.