The short version
- You control your records. Your Moments and profile information belong to you.
- We do not sell your personal information or use it for advertising, data brokerage, or cross-app tracking.
- Care Circle sharing requires approval. You approve each supporter and control their permissions.
- You can export or delete your data. Account deletion is available in both the mobile app and browser workspace.
Information you provide
Depending on how you use MOMENTS, we collect:
- Account details, including username, display name and other name fields you provide, email address, and a password stored only in securely hashed form.
- Optional profile and safety details, such as your phone number, emergency contacts, allergies, current medications, and medications that should not be administered.
- Moment entries, which are health information. An entry may include the condition type, date and time, severity, precise or range-based duration, symptoms, possible triggers, a location or situation you type, and free-text notes.
- Care Circle information, including invitations, access requests, approvals, relationships, and the permissions you assign to each supporter.
- Supporter contributions, such as a Moment logged on someone else's behalf where that feature and permission are available, or an attributed note added to an existing Moment.
- Messages you send us, such as support emails or website contact-form messages. Please do not include health details in a support message unless they are necessary for us to help you.
Information collected automatically
- Notification information, including a device push token used to deliver notifications you enable.
- App and device information, such as app version, platform, operating-system version, and the last time the app was seen by the Service.
- Browser-session information needed to keep you signed in securely to the browser workspace. Authentication uses a secure, HttpOnly, SameSite session cookie, valid for up to 12 hours, with a 30-minute server inactivity limit. The portal also locks the visible workspace after inactivity. Health information is not stored in browser local storage.
- Operational and security records, such as request logs, authentication events, and limited diagnostic information needed to operate, troubleshoot, and protect the Service.
MOMENTS does not collect your precise GPS location. A location attached to a Moment is text you or an authorized supporter chooses to enter.
Browser storage and optional portal analytics
Essential browser storage supports secure sign-in and your choices. Local storage may remember the selected Care Circle identifier and your analytics preference; session storage may remember that a tab is locked and requires sign-in. The selected Care Circle is cleared when the session ends. We do not store Moment entries, medical details, or passwords in browser storage.
Optional portal usage measurement is off by default. If you enable it, our self-hosted Umami service counts portal opens using a fixed portal address and title. The event does not include your actual route, query strings, referring page, account identity, or health content. It uses no analytics cookies and does not measure navigation within the portal. As with other network requests, the receiving infrastructure can receive technical information such as your IP address and browser information.
You can enable or disable this measurement at Cookies & privacy, available from sign-in, the workspace navigation, and Settings. Your preference applies to that browser for up to 180 days. Do Not Track and Global Privacy Control signals keep this optional measurement off. Disabling it stops future events; it does not retract counts already sent. Optional analytics are not a condition of using MOMENTS. Payment providers have their own privacy and storage practices, which this portal preference does not control.
How we use information
- To create and secure your account and keep your information synchronized between the mobile app and browser workspace.
- To save, organize, display, and export your records by condition.
- To provide calendar, timeline, pattern, PDF-report, and CSV-export features.
- To provide the Care Circle permissions and notifications you choose.
- To verify Lifetime Access purchases and restore access to purchased features.
- To answer support requests, prevent abuse, diagnose problems, and maintain the Service.
We do not use health information for advertising or automated decisions about you. MOMENTS does not diagnose, predict, prevent, or treat any condition.
Care Circle sharing
A supporter does not receive access merely by entering an invitation code. The supporter requests access, you approve or decline the request, and you control the permissions for that relationship. Depending on the permissions you grant, an approved supporter may be able to view Moments and patterns, view selected profile and safety details, receive notifications, add attributed notes, create reports, or log a supported condition on your behalf.
Capabilities can differ by condition. At present, supporter logging is available for seizures when permitted; migraines are logged by the primary account holder. An approved supporter with note permission may add an attributed note to a Moment after it is logged. You can change permissions or remove a supporter at any time. Removing access prevents future access but does not retract information the supporter already saw or exported while authorized.
Service providers and other disclosures
We use a limited number of providers to operate MOMENTS:
- Apple and Google distribute the app, process store purchases, and provide their platform services, including push-notification delivery.
- Expo assists with technical delivery of push notifications.
- RevenueCat manages web checkout and verifies Lifetime Access purchases, associating access with your MOMENTS account. When you start web checkout, we provide your internal MOMENTS account identifier and account email to identify the purchaser and activate access on the correct account. RevenueCat does not receive your Moment entries or profile medical details.
- Stripe processes payments for web purchases through RevenueCat Billing. Payment and billing information you enter at checkout is handled by these providers under their own policies.
- Our email delivery provider sends account and support-related emails, such as password-reset messages.
- Hosting and infrastructure providers process encrypted traffic and store Service data so MOMENTS can operate.
We may disclose information when required by law, to protect the rights and safety of users or others, or in connection with a business transfer subject to appropriate safeguards. We do not sell personal information or share health information with advertisers or data brokers.
Lifetime Access purchases
MOMENTS offers an optional Lifetime Access unlock as a one-time purchase, not a subscription. Apple or Google processes mobile store payments; web payments are processed through RevenueCat Billing and Stripe. We do not receive or store your full payment-card details in the MOMENTS application. We and RevenueCat retain the purchase and entitlement information needed to verify or restore access. Apple, Google, RevenueCat, and Stripe may retain transaction and billing information under their own policies and legal obligations.
Data retention and deletion
We keep your account and records while your account is active. When you delete a primary account, its profile, Moment records, Care Circle relationships, and associated Service data are removed from active systems. When you delete a supporter account, that supporter's profile, relationships, account access, and authored notes are removed; Moments belonging to a primary account remain with that primary.
Limited transaction or security records may be retained where required for fraud prevention, accounting, legal compliance, or dispute resolution. Residual copies may remain in routine encrypted backups for up to 30 days before they are purged through normal backup rotation. Store providers, RevenueCat, and Stripe may retain purchase and billing records under their own policies.
Your choices
- Review and correct information in the mobile app or browser workspace, or contact us for help.
- Export records as available PDF reports or CSV data before deleting your account.
- Control Care Circle access by approving requests, changing individual permissions, or removing supporters.
- Control notifications through MOMENTS and your device settings.
- Delete your account in Settings in the mobile app or browser workspace, or follow the instructions on our Account Deletion page.
Website privacy
The public marketing website has separate practices for its contact form and cookieless audience measurement. See the Website Privacy Notice. That notice does not replace this policy for the authenticated mobile app or browser workspace.
Security
We use reasonable administrative and technical safeguards, including encrypted connections, hashed passwords, access controls, and secure browser-session cookies. No system can guarantee absolute security, so protect your password and contact us if you believe your account has been accessed without permission.
Children's privacy
MOMENTS is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13. A parent or legal guardian may create and manage an account for a minor or another person in their care and is responsible for the information entered and any Care Circle access granted.
Not medical advice or emergency monitoring
MOMENTS is a personal record-keeping and communication tool. It is not a medical device, emergency-response service, or substitute for professional care. It does not provide medical advice, diagnosis, treatment, monitoring, or prediction. In an emergency, contact local emergency services immediately.
Changes to this policy
We may update this policy as MOMENTS evolves. The effective date above identifies the current version. Where required, we will request acceptance of materially updated terms or provide additional notice.
Contact
Questions about this policy or your data can be sent to chris@phoenixfiretechnology.com.