The short version
- You control your records. Your Moments and profile information belong to you.
- We do not sell your personal information or use it for advertising, data brokerage, or cross-app tracking.
- Care Circle sharing requires approval. You approve each supporter and control their permissions.
- You can export or delete your data. Account deletion is available in both the mobile app and browser workspace.
Information you provide
Depending on how you use MOMENTS, we collect:
- Account details, including username, display name and other name fields you provide, email address, and a password stored only in securely hashed form.
- Optional profile and safety details, such as your phone number, emergency contacts, allergies, current medications, and medications that should not be administered.
- Moment entries, which are health information. An entry may include the condition type, date and time, severity, precise or range-based duration, symptoms, possible triggers, a location or situation you type, and free-text notes.
- Care Circle information, including invitations, access requests, approvals, relationships, and the permissions you assign to each supporter.
- Supporter contributions, such as a Moment logged on someone else's behalf where that feature and permission are available, or an attributed note added to an existing Moment.
- Messages you send us, such as support emails or website contact-form messages. Please do not include health details in a support message unless they are necessary for us to help you.
Information collected automatically
- Notification information, including a device push token used to deliver notifications you enable.
- App and device information, such as app version, platform, operating-system version, and the last time the app was seen by the Service.
- Browser-session information needed to keep you signed in securely to the browser workspace. Authentication uses a secure, HttpOnly session cookie. Health information is not stored in browser local storage.
- Operational and security records, such as request logs, authentication events, and limited diagnostic information needed to operate, troubleshoot, and protect the Service.
MOMENTS does not collect your precise GPS location. A location attached to a Moment is text you or an authorized supporter chooses to enter.
How we use information
- To create and secure your account and keep your information synchronized between the mobile app and browser workspace.
- To save, organize, display, and export your records by condition.
- To provide calendar, timeline, pattern, PDF-report, and CSV-export features.
- To provide the Care Circle permissions and notifications you choose.
- To verify Lifetime Access purchases and restore access to purchased features.
- To answer support requests, prevent abuse, diagnose problems, and maintain the Service.
We do not use health information for advertising or automated decisions about you. MOMENTS does not diagnose, predict, prevent, or treat any condition.
Care Circle sharing
A supporter does not receive access merely by entering an invitation code. The supporter requests access, you approve or decline the request, and you control the permissions for that relationship. Depending on the permissions you grant, an approved supporter may be able to view Moments and patterns, view selected profile and safety details, receive notifications, add attributed notes, create reports, or log a supported condition on your behalf.
Capabilities can differ by condition. At present, supporter logging is available for seizures when permitted; migraines are logged by the primary account holder. An approved supporter with note permission may add an attributed note to a Moment after it is logged. You can change permissions or remove a supporter at any time. Removing access prevents future access but does not retract information the supporter already saw or exported while authorized.
Service providers and other disclosures
We use a limited number of providers to operate MOMENTS:
- Apple and Google distribute the app, process store purchases, and provide their platform services, including push-notification delivery.
- Expo assists with technical delivery of push notifications.
- RevenueCat verifies the one-time Lifetime Access purchase and associates its status with your MOMENTS account. RevenueCat does not receive your Moment entries or profile medical details.
- Our email delivery provider sends account and support-related emails, such as password-reset messages.
- Hosting and infrastructure providers process encrypted traffic and store Service data so MOMENTS can operate.
We may disclose information when required by law, to protect the rights and safety of users or others, or in connection with a business transfer subject to appropriate safeguards. We do not sell personal information or share health information with advertisers or data brokers.
Lifetime Access purchases
MOMENTS offers an optional Lifetime Access unlock as a one-time purchase, not a subscription. Apple or Google processes the payment, so we do not receive or store your payment-card details. We and RevenueCat retain the purchase and entitlement information needed to verify or restore access. Store providers may retain transaction information under their own policies and legal obligations.
Data retention and deletion
We keep your account and records while your account is active. When you delete a primary account, its profile, Moment records, Care Circle relationships, and associated Service data are removed from active systems. When you delete a supporter account, that supporter's profile, relationships, account access, and authored notes are removed; Moments belonging to a primary account remain with that primary.
Limited transaction or security records may be retained where required for fraud prevention, accounting, legal compliance, or dispute resolution. Residual copies may remain in routine encrypted backups for up to 30 days before they are purged through normal backup rotation. Store providers and RevenueCat may retain purchase records under their own policies.
Your choices
- Review and correct information in the mobile app or browser workspace, or contact us for help.
- Export records as available PDF reports or CSV data before deleting your account.
- Control Care Circle access by approving requests, changing individual permissions, or removing supporters.
- Control notifications through MOMENTS and your device settings.
- Delete your account in Settings in the mobile app or browser workspace, or follow the instructions on our Account Deletion page.
Website privacy
The public marketing website has separate practices for its contact form and cookieless audience measurement. See the Website Privacy Notice. That notice does not replace this policy for the authenticated mobile app or browser workspace.
Security
We use reasonable administrative and technical safeguards, including encrypted connections, hashed passwords, access controls, and secure browser-session cookies. No system can guarantee absolute security, so protect your password and contact us if you believe your account has been accessed without permission.
Children's privacy
MOMENTS is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13. A parent or legal guardian may create and manage an account for a minor or another person in their care and is responsible for the information entered and any Care Circle access granted.
Not medical advice or emergency monitoring
MOMENTS is a personal record-keeping and communication tool. It is not a medical device, emergency-response service, or substitute for professional care. It does not provide medical advice, diagnosis, treatment, monitoring, or prediction. In an emergency, contact local emergency services immediately.
Changes to this policy
We may update this policy as MOMENTS evolves. The effective date above identifies the current version. Where required, we will request acceptance of materially updated terms or provide additional notice.
Contact
Questions about this policy or your data can be sent to chris@phoenixfiretechnology.com.