Privacy Policy for Moments

Introduction

Moments ("we," "our," or "the app") is a personal journaling application that helps you capture and reflect on meaningful moments in your life. We are committed to protecting your privacy and being transparent about how we handle your personal information.

Data We Collect

Health Data (via HealthKit)

When you grant permission, Moments accesses the following types of health data:

• Sleep analysis and sleep patterns
• Workout and exercise data
• Step count and activity levels
• Heart rate data (if available)
• Other wellness metrics you choose to share

Purpose: We use this data to automatically create journal entries about your health and wellness activities, helping you track patterns and insights in your health journey.

Location Data

When you grant permission, we collect:

• Your current location when creating journal entries
• Location accuracy and timestamp information

Purpose: Location data is used to tag where meaningful moments happened, helping you remember important places in your life.

Voice and Speech Data

When you use voice recording features:

• Voice recordings for creating journal entries
• Speech-to-text conversion data

Purpose: We convert your voice recordings to text to create journal entries. All speech recognition is processed locally on your device.

Journal Content

• Text entries you manually create
• AI-generated insights and themes from your journal content
• Tags and categories assigned to your moments

How We Use Your Data

Local Processing

• All your personal data is stored locally on your device in encrypted format
• Health data analysis and pattern recognition happens on your device
• Your journal entries and personal information never leave your device except for AI processing (see below)

AI Analysis

• We use OpenAI's API through a secure proxy server to analyze your journal content for insights and themes
• Only anonymized, non-identifiable journal content is sent for AI analysis
• No health data, location data, or personally identifiable information is sent to AI services
• AI analysis helps provide personalized insights about your journaling patterns and themes

No Cloud Storage

• We do not store your personal data on our servers or in the cloud
• All data remains on your device unless explicitly processed for AI insights
• You maintain complete control over your personal information

Data Sharing and Third Parties

We Do Not Share:

• Your health data with any third parties
• Your location information with any external services
• Your personal journal content with advertisers or marketers
• Any personally identifiable information for commercial purposes

Limited Third-Party Processing:

• OpenAI API: Anonymous journal content may be processed for AI insights (no personal identifiers included)
• Apple HealthKit: Health data is accessed through Apple's secure HealthKit framework
• Apple Speech Recognition: Voice-to-text conversion is processed using Apple's on-device speech recognition

Service Providers:

We use a secure proxy server to communicate with AI services, which helps protect your data during processing. This proxy does not store or log your personal information.

Data Security

We implement several security measures to protect your information:

• All local data is stored in encrypted format
• API communications use secure HTTPS connections
• No sensitive data is transmitted in plain text
• Regular security updates and monitoring

Your Rights and Controls

You Can:

• Access: View all your stored data within the app
• Delete: Remove individual journal entries or all data through the app
• Export: Export your journal data from the app
• Control Permissions: Revoke access to HealthKit, location, or microphone at any time through iOS Settings
• Opt Out: Stop using AI analysis features while keeping other app functionality

Data Retention:

• Data is kept on your device until you choose to delete it
• Uninstalling the app removes all local data
• We do not retain copies of your data on external servers

Health Data Specific Disclosures

HealthKit Integration:

• We comply with Apple's HealthKit Review Guidelines
• Health data is never used for advertising or sold to third parties
• We do not make medical claims or provide medical advice
• Health insights are for informational and journaling purposes only

Children's Privacy

Moments is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Users

If you use Moments outside the United States, you understand that your data will be processed according to U.S. privacy laws and this privacy policy.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes through the app or other appropriate means. Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Information

Legal Basis for Processing (GDPR)

For users in the EU/UK, we process your data based on:

• Consent: For health data, location data, and voice recordings
• Legitimate Interest: For providing app functionality and improvements
• Contract: For delivering the journaling services you requested

Your GDPR Rights

If you're in the EU/UK, you have additional rights:

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data
• Right to restrict processing
• Right to data portability
• Right to withdraw consent