개인정보처리방침Privacy Policy

Controller & contact

Controller: the operator of the Momenty app (“we” / “us”). If no separate legal entity is named for the Service, the contact below is the primary channel for privacy inquiries and complaints.

• Email: nakzi.lab@gmail.com

This Policy is written to reflect transparency expectations for Apple App Store and Google (Sign-In / Google APIs) review.

1. Scope

This Policy applies to the Momenty iOS app, App Store privacy disclosures, and information practices described on this website. Partner services — including Google Account, Google Drive, and Google advertising (AdMob) — are also governed by those providers’ policies.

• Google Privacy Policy
• Google Partners (ads)
• Google API Services User Data Policy

2. Categories of information & purposes

We process information only as needed for the purposes below. We do not store your photo or video originals on Momenty-operated servers. Media you add through the app is kept in your Google Drive (your Google account).

• Account & cloud: Sign in with Google (OAuth), session, Drive access
• Shared albums: listing folders/files, upload, download, delete, and related metadata for sharing and permissions
• On-device media (optional): media you pick in the system picker to upload; add-only photo library access when you save to your camera roll where the app offers that feature
• Local notifications & background work: if you turn this on, the app may query Google Drive within limits iOS allows to detect “new media” and show local notifications — we do not send that content to Momenty-operated servers
• Ads & measurement: ads via Google AdMob and partner networks, delivery & response measurement, Apple’s App Tracking Transparency (ATT) choice, SKAdNetwork and similar aggregated attribution

We do not integrate a separate remote crash/analytics SDK that continuously ships diagnostic data to our own backend (partner ads and Google services follow their own policies).

3. Google account, Drive & OAuth scope

The app uses Google Sign-In and Google Drive APIs. To join folders shared via invite links and let participants upload and browse shared albums, we request consent as described by Google and may request this scope:

At sign-in, Google’s SDK may provide identifiers needed for your session plus email and basic profile fields as offered by Google.

Google Drive connectivity & errors

Core features depend on Google Account, Google Drive, and related APIs provided by Google. Sign-in failures, Drive API errors, network issues, Google service outages or policy changes, and account, permission, or quota problems may limit or prevent uploads, sync, or browsing temporarily or on an ongoing basis when connectivity or access errors originate from Google or your network environment. We do not control Google’s service availability or responses and, to the extent permitted by law, are not liable for data loss, delays, or inability to use the Service caused by such errors. Please check your Google account, permissions, and network; if issues persist, consult Google support or other partner guidance.

4. Limited use of Google user data

We use information from Google APIs and Google Sign-In in line with the Google API Services User Data Policy, including Allowed Use limits. In particular, we do not sell or rent Google user data from these sources, or use it for unrelated profiling across products in ways users would not reasonably expect. (Ad identifiers and AdMob processing follow Google’s advertising rules; this section concerns Google account / Drive API data.)

5. Retention

• Files & metadata on Google Drive: governed by your Google account; deletion or revoking access may be irreversible.
• On-device app data (settings, last viewed times, notification/background state): generally removed when you delete the app or app data.
• Ad-related data: per Google AdMob and partner policies.

6. Disclosure to third parties

We do not sell your albums or charge third parties for your photos/videos, or freely hand them to unrelated marketers. Google and ad partners process data to deliver authentication, cloud storage, and ads, as described under international transfers and processors below.

7. International transfers

We use cloud, authentication, and advertising systems operated by companies such as Google LLC that may process data in countries outside your own (including the United States). See Google’s Privacy Policy for how Google describes transfers and safeguards.

8. Processors & partner services

We rely on processors (or comparable partner infrastructure) such as:

• Google LLC (Alphabet Inc.): Google Account sign-in, Google Drive storage and Drive API processing
• Google AdMob and ad/measurement partners: ad serving, measurement, fraud prevention, SKAdNetwork, etc.

Details may evolve; where required by law we will provide notice or obtain consent.

9. Your rights & controls

Depending on your region, you may have rights to access, correct, delete, restrict, or object to certain processing. You can also:

• Revoke Google access in your Google Account security / third-party app settings
• Delete & sign out in-app: use Settings > Delete All Data & Logout (or similarly named) to remove uploaded media per in-app guidance and end the local session
• Tracking & ads: use iOS Settings → Privacy & Security → Tracking and partner ad settings described in their policies
• Contact us at the email above for privacy requests (response subject to applicable law)

10. Deletion

We delete information we hold when it is no longer needed for the purposes above. Drive files follow your and Google’s actions; on-device data can be erased by removing the app or its data. Legal retention requirements may apply in limited cases.

11. Security

We use appropriate technical and organizational measures (such as encryption in transit where applicable, careful use of OS and SDK security practices) to protect information. No method is 100% secure; please protect your Google account and device passcode.

12. Tracking, ATT & ads

For personalized ads we may request App Tracking Transparency permission on iOS. If you decline or limit tracking, you may still see non-personalized or limited ads. Ad partners may process identifiers, IP address, and ad interaction signals per their policies and your device settings.

13. Children

The Service is not directed to young children, and we do not knowingly collect personal information from children below the minimum age required in your region (for example, under 13 in the U.S. under COPPA, or the age set in Korean law for domestic users). If you believe a child has provided data, contact us using the email above.

14. Remedies & supervisory authorities

Republic of Korea: you may contact the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center (118), the Personal Information Dispute Mediation Committee, or law enforcement cyber units as listed in the Korean version of this Policy.

EEA, UK, and other regions: you may lodge a complaint with your local data protection authority.

15. Changes

We may update this Policy for legal, regulatory, or product reasons. We will post the revised Policy on this page and adjust the effective date. Platform rules (Apple, Google) may require additional disclosures elsewhere.

16. Other (deep links & site)

Invite flows may use the custom URL scheme momenty://. Only parameters needed to complete invites and app features are processed. This static site does not use cookies to keep you logged in to Momenty in the browser.

If an older copy (for example on Notion) conflicts with this page, the latest text here prevails.