Legal document

Privacy
Policy

Momentz gathers the photos from an event and gives each person their own. That involves photos, sometimes a selfie, and — if you agree to it — a face template. Here is exactly what we do with them.

Version 2.1 Updated: July 27, 2026 Data controller: Elie Allali (osek patour, Israel)

1 · How Momentz works

Momentz distinguishes between two roles:

  • Organizers — the person who creates and pays for the event. A Momentz account is required.
  • Guests — the people who join the event with a code or a QR code. They can choose between anonymous mode (no account) and account mode (a profile reusable from one event to the next).

2 · What we collect

From organizers

  • Name and email address
  • Event details: name, location, date and chosen settings
  • Payment information, processed by our payment provider — we never see your card number (section 6)

From guests in anonymous mode

  • First name (last name optional)
  • Email or phone number, only if you want to receive your album after the event
  • A selfie and a face template, only if you turn on facial recognition
  • A temporary session identifier

From guests with an account

  • First name, last name, email, optional phone number
  • Profile photo (selfie)
  • Optional social links (Instagram, etc.)
  • A persistent face template, only if you turn on facial recognition

Content created in the app

  • Photos and videos sent to the event
  • Captions, comments, reactions
  • Guestbook messages (text or video of 30 seconds maximum)
  • Answers to polls and challenges
  • Private messages sent in the app

Technical data

  • Device model, iOS version, app version
  • Aggregated and anonymized usage statistics
  • Crash reports

3 · Facial recognition

It is an option, never a requirement. If you do not turn it on, Momentz never processes your face. You can turn it off at any time from your profile.

When you arrive at an event, you are asked two independent questions:

  • "Do you want to automatically receive your photos from this event?" — if yes, your selfie is used to identify you in the event's photos, and you then receive your album.
  • "Do you want other guests to be able to find you?" — if yes, other participants can see your first name and your linked social media from the photos you appear in. If no, you remain completely invisible in this way.

You can answer yes to one and no to the other, or no to both.

In practice

Your selfie is used to generate a mathematical template: a series of numbers. It is not a photo, and it cannot be used to reconstruct your face. It is used solely to match you with the photos from the same event, and is never reused outside that purpose.

Facial recognition is disabled for people under 18, even with their consent. No biometric data of a minor is processed.

4 · What we do with your data

Your data is used strictly to make Momentz work:

  • Create and run events
  • Display photos, messages and profiles to the other guests of the same event
  • Identify you in the event's photos (only if you have turned it on)
  • Send you the album of photos you appear in (only if you have turned it on)
  • Let guests discover each other (only if both have turned it on)
  • Improve the service through anonymized statistics
  • Detect and prevent abuse, and comply with our legal obligations

What we do not do:

  • Sell your personal data to third parties
  • Pass your photos or your faces to AI models to train them
  • Use your data for advertising or third-party tracking
  • Use your face for anything other than matching the photos from your event

5 · Legal bases (GDPR)

If you are in the EU, the United Kingdom or a country with equivalent law, our legal bases are:

  • Explicit consent — for facial recognition and any biometric processing (required by article 9 of the GDPR)
  • Consent — for sending photos, videos and messages
  • Performance of the contract — to provide the service you signed up for
  • Legitimate interest — to improve the service and prevent fraud
  • Legal obligation — where the law requires it

6 · Who we share your data with

Only with the providers strictly necessary for Momentz to work:

ProviderRoleData shared
Hosting providersDatabase, authentication, file storageEvents, photos, videos, profiles, messages
Facial recognition providerFace matchingFace template only
AppleApp distribution, crash reportsAnonymized crash logs
Online payment providerEvent payments on the webBilling details
Apple In-App PurchasePayment from iOSTransaction identifier

Each provider is bound by a data processing agreement that prohibits it from using your data for any other purpose. A named list of our processors is available on request at the address given in section 15.

We may disclose data if the law requires it, upon a court order, or to protect the rights and safety of Momentz, its users or the public.

7 · Where your data is stored

Data is hosted on servers operated by our infrastructure providers, which may be located outside your country of residence, in particular in the United States. By using Momentz, you consent to these international transfers, which are governed by standard contractual clauses and appropriate safeguards.

8 · How long we keep it

Type of dataRetention period
Event content (photos, videos, messages, guestbook, polls)10 days after the end of the event, then permanent deletion
Data of guests without an account (first name, selfie, email)10 days after the end of the event
Face template — guest without an accountDeleted once the album has been delivered
Face template — user with an accountKept as long as the account is active; deleted on request or when the account is deleted
User accounts (organizer or guest)As long as the account is active; deleted on request, backups purged within 6 months
Payment records7 years (accounting obligation)

9 · Your rights

At any time, you can:

  • Access — request a copy of all the data concerning you
  • Rectify — correct inaccurate data
  • Erase — request complete deletion ("right to be forgotten")
  • Export — receive your data in a machine-readable format
  • Restrict the processing or object to it
  • Withdraw your consent — in particular for facial recognition — at any time, without affecting processing already carried out

To exercise a right, write to momentz.regaim@gmail.com. We respond within 30 days. If you are in the EU or the United Kingdom, you can also lodge a complaint with your data protection authority (in France, the CNIL).

10 · Deleting your account and your data

From the app: Profile → Settings → Delete my account. Deletion erases your profile, your selfie, your face template and your content, according to the periods set out in section 8.

If you no longer have access to the app, write to momentz.regaim@gmail.com from the email address associated with your account.

11 · Security

Exchanges between the app and our servers are encrypted with HTTPS. Access to data is protected by authentication and by server-side access controls. Face templates are stored with a specialised provider, separately from the rest of the profile data.

No system is infallible. In the event of a data breach concerning you, we will inform you as well as the competent authorities, as a rule within 72 hours.

12 · Minimum age

Momentz is intended for people aged 16 and over. Facial recognition is reserved for those 18 and over: 16- and 17-year-olds use the app normally, but the facial recognition features (photo matching and social discovery) are automatically disabled.

If we discover data from a user under 16, or biometric data from a user under 18, we delete it without delay.

13 · Cookies and tracking

Momentz uses neither advertising cookies nor third-party trackers. Only essential technical storage is used (session tokens, preferences) to make the app work.

Momentz may contain links to third-party services (for example the Instagram profile of a guest who has turned on social discovery). We are not responsible for the privacy practices of these third parties.

14 · Changes to this policy

We may update this policy. Any substantial change — in particular regarding biometric data — will be brought to your attention in the app or by email before it takes effect. The update date at the top of the page reflects the latest revision.

15 · Contact

A question about your data?

Data controller: Elie Allali (osek patour) — Israel
Email: momentz.regaim@gmail.com
Suggested subject: "Privacy — [your request]"
Response time: 30 days maximum.