Privacy policy

Moments finds photos of your friends by processing your photo library on your device. Face detection, face grouping, and all related analysis run locally. Your camera roll is never uploaded; photos leave your phone only when you review and send them to a specific person, and then only those photos.

When you identify yourself in your own photos, Moments computes a numeric representation of your face (a “face embedding”) on your device. With your consent, given when you create your account, this embedding is stored on our servers and shared only with people connected to you (your contacts and friends of friends) so their app can recognize which photos in their library are of you.

We never compute or store face embeddings of people who have not signed up and consented. Faces of non-members detected in your library are processed only on your device and never uploaded.

Your face embedding is deleted permanently when you delete your account. You can also remove it without deleting your account by contacting us. We never sell or license biometric information, never use it for advertising, and never disclose it except as described here or as required by law.

If you allow contact access, your contacts’ names and phone numbers are uploaded to our servers to find your friends on Moments, suggest people you may know (including friends of friends), and address the photos you send. We don’t message anyone unless you send them something. You can remove synced contacts by revoking contact access; we delete the synced copy.

When you send photos, we store the versions needed to deliver them (a thumbnail and a display copy) and show them only to the people you sent them to. There is no public feed. You can revoke a shared photo at any time; it disappears from the recipient’s app. Recipients who haven’t joined yet see a small preview on their private invite page.

When you send photos to someone who isn’t on Moments, we text them an invite on your behalf. Each text is initiated by a specific person’s send, and we keep a record of every message for compliance. Reply STOP to any message to stop receiving texts; delivery of future invites to your number is suppressed by our messaging provider.

We don’t sell your data. We don’t show ads. We don’t use your photos or face data to train models. We don’t look up strangers: Moments never matches faces against the public web.

Deleting your account removes your profile, your face embedding, your synced contacts, your invites, and the photos you shared. Photos other people shared with you belong to their accounts. Backups clear on a rolling basis within 30 days.

Moments is not directed to children under 13.

Questions or requests (including biometric-data deletion): privacy@moments.page.