Effective September 21, 2026

Privacy, clearly.

Moments is operated by Itslux LLC. This policy explains how we handle information when you use Moments and how to contact us about it.

Information we process

• Your account: email address, account identifier, sign-in information, username, profile photo, and information you choose to add, such as your bio or school.
• Your content: photos, videos, audio, captions, comments, messages, group names/photos, and related timestamps. Device-local Keeps stay in the app’s local storage unless you take an action that uploads or shares them; some media may also be stored in private cloud storage.
• Your activity: follows, friendship and message requests, likes, comments, shares, video impressions, and watch activity used to operate and personalize the community feed.
• Location when enabled: coordinates for nearby discovery and an area for local feed relevance. Nearby discovery can transmit precise coordinates. Feed location and visibility to other people are separate controls.
• Age information when requested: birthday, country/region, policy acknowledgements, and age information Apple makes available for applicable requirements. Moments does not ask you to upload an ID document.
• Safety and reliability: reports, moderation decisions, consent records, support correspondence, request status and timing, and technical information handled by our hosting providers, which may include IP addresses.

Why we use it

We use account and content information to provide the features you request: signing in, publishing, playback, messaging, saving, and account management. Social and viewing activity helps choose and order posts, including friends’ posts and local content. We use reports and limited operational data to protect people, investigate misuse, troubleshoot problems, and keep the service working.

Where European or UK data-protection law applies, our purposes and legal bases are: providing requested account and communication services where necessary to perform our agreement; legitimate interests in service security, abuse prevention, and maintaining a working community, subject to your rights; consent for optional location processing and optional third-party AI review; and compliance with applicable legal obligations. Consent can be withdrawn without changing the lawfulness of earlier processing. You may object to processing based on legitimate interests.

Who can see your information

Your profile and content marked public can be seen by other people. Messages and private media use access controls for their intended participants; they are not represented as end-to-end encrypted. Recipients may save or share content independently. Authorized service personnel may access information when necessary for support, safety, security, or legal obligations.

We use Supabase for authentication, database, and hosted storage, Railway for media processing and service hosting, and Google Gemini for the limited optional review described below. Email delivery and the infrastructure used to serve this support site also process the information needed to deliver those services. We may disclose information when required by law, to protect rights and safety, or in a business transfer with appropriate notice and protections.

AI review is limited and optional

AI review is triggered by a report about public content, and only runs with the content owner’s current permission and applicable regional authorization. For that review, sampled video frames or images and relevant captions may be sent to Google Gemini. Private chats are excluded from this AI review flow. A report from someone else does not grant permission on your behalf. Reports without AI permission remain for human handling. You can withdraw optional AI permission in Settings; withdrawal stops future AI review requests but cannot undo a request already sent.

Location and younger users

Moments is intended for people aged at least 13 where permitted. Additional requirements can depend on location and the feature involved. When age setup is presented, it explains the applicable conditions before account creation. An age rating in the App Store does not replace Moments’ signup requirements.

You can control device location access in iOS Settings and nearby visibility in Moments. Turning off visibility stops publishing new nearby presence; location previously provided for feed relevance is handled separately. If you believe a child under the permitted age has an account, contact support so we can investigate.

Retention and deletion

We retain account and hosted content while needed to provide the account and features you use. You can remove content or request account deletion. Deletion starts cleanup of associated hosted media and account data, with retries if a service fails. Temporary signup tokens expire after 15 minutes. Discovery and feed-area records have expiration limits for their use; expiration is not a promise that every infrastructure copy is immediately erased.

Support, safety, consent, and security records may be kept as necessary to resolve requests and disputes, enforce decisions, prevent abuse, or meet legal obligations. Restricted backups and recovery copies may retain information beyond deletion from the active service. Copies already exported to Photos, downloaded by recipients, or shared outside Moments are not removed by deleting your account. Contact us for help with the scope of a deletion request.

Your choices and rights

You can edit profile information, manage device permissions, withdraw optional AI consent, block accounts, and request account deletion. Depending on your location, you may have rights to access, correct, erase, restrict, or receive a portable copy of your personal information, and to object to certain processing. Contact support to exercise these rights. We may need to verify account ownership without asking you to send a password or sign-in code.

If you are in the EEA or UK, you may also complain to your local data-protection authority. Service providers may process information outside your country. Contact us for information about the providers and transfer safeguards relevant to your account.

Updates and contact

We will update this page when our practices change and provide additional notice or seek permission where required. Contact Itslux LLC at support@momentsbylux.app about this policy or your information.