1 · How Momentz works
Momentz distinguishes between two roles:
- Organizers — the person who creates and pays for the event. A Momentz account is required.
- Guests — the people who join the event with a code or a QR code. They can choose between anonymous mode (no account) and account mode (a profile reusable from one event to the next).
2 · What we collect
From organizers
- Name and email address
- Event details: name, location, date and chosen settings
- Payment information, processed by our payment provider — we never see your card number (section 6)
From guests in anonymous mode
- First name (last name optional)
- Email or phone number, only if you want to receive your album after the event
- A selfie and a face template, only if you turn on facial recognition
- A temporary session identifier
From guests with an account
- First name, last name, email, optional phone number
- Profile photo (selfie)
- Optional social links (Instagram, etc.)
- A persistent face template, only if you turn on facial recognition
Content created in the app
- Photos and videos sent to the event
- Captions, comments, reactions
- Guestbook messages (text or video of 30 seconds maximum)
- Answers to polls and challenges
- Private messages sent in the app
Technical data
- Device model, iOS version, app version
- Aggregated and anonymized usage statistics
- Crash reports
3 · Facial recognition
It is an option, never a requirement. If you do not turn it on, Momentz never processes your face. You can turn it off at any time from your profile.
When you arrive at an event, you are asked two independent questions:
- "Do you want to automatically receive your photos from this event?" — if yes, your selfie is used to identify you in the event's photos, and you then receive your album.
- "Do you want other guests to be able to find you?" — if yes, other participants can see your first name and your linked social media from the photos you appear in. If no, you remain completely invisible in this way.
You can answer yes to one and no to the other, or no to both.
In practice
Your selfie is used to generate a mathematical template: a series of numbers. It is not a photo, and it cannot be used to reconstruct your face. It is used solely to match you with the photos from the same event, and is never reused outside that purpose.
Facial recognition is disabled for people under 18, even with their consent. No biometric data of a minor is processed.
4 · What we do with your data
Your data is used strictly to make Momentz work:
- Create and run events
- Display photos, messages and profiles to the other guests of the same event
- Identify you in the event's photos (only if you have turned it on)
- Send you the album of photos you appear in (only if you have turned it on)
- Let guests discover each other (only if both have turned it on)
- Improve the service through anonymized statistics
- Detect and prevent abuse, and comply with our legal obligations
What we do not do:
- Sell your personal data to third parties
- Pass your photos or your faces to AI models to train them
- Use your data for advertising or third-party tracking
- Use your face for anything other than matching the photos from your event
5 · Legal bases (GDPR)
If you are in the EU, the United Kingdom or a country with equivalent law, our legal bases are:
- Explicit consent — for facial recognition and any biometric processing (required by article 9 of the GDPR)
- Consent — for sending photos, videos and messages
- Performance of the contract — to provide the service you signed up for
- Legitimate interest — to improve the service and prevent fraud
- Legal obligation — where the law requires it
6 · Who we share your data with
Only with the providers strictly necessary for Momentz to work:
| Provider | Role | Data shared |
|---|---|---|
| Hosting providers | Database, authentication, file storage | Events, photos, videos, profiles, messages |
| Facial recognition provider | Face matching | Face template only |
| Apple | App distribution, crash reports | Anonymized crash logs |
| Online payment provider | Event payments on the web | Billing details |
| Apple In-App Purchase | Payment from iOS | Transaction identifier |
Each provider is bound by a data processing agreement that prohibits it from using your data for any other purpose. A named list of our processors is available on request at the address given in section 15.
We may disclose data if the law requires it, upon a court order, or to protect the rights and safety of Momentz, its users or the public.
7 · Where your data is stored
Data is hosted on servers operated by our infrastructure providers, which may be located outside your country of residence, in particular in the United States. By using Momentz, you consent to these international transfers, which are governed by standard contractual clauses and appropriate safeguards.
8 · How long we keep it
| Type of data | Retention period |
|---|---|
| Event content (photos, videos, messages, guestbook, polls) | 10 days after the end of the event, then permanent deletion |
| Data of guests without an account (first name, selfie, email) | 10 days after the end of the event |
| Face template — guest without an account | Deleted once the album has been delivered |
| Face template — user with an account | Kept as long as the account is active; deleted on request or when the account is deleted |
| User accounts (organizer or guest) | As long as the account is active; deleted on request, backups purged within 6 months |
| Payment records | 7 years (accounting obligation) |
9 · Your rights
At any time, you can:
- Access — request a copy of all the data concerning you
- Rectify — correct inaccurate data
- Erase — request complete deletion ("right to be forgotten")
- Export — receive your data in a machine-readable format
- Restrict the processing or object to it
- Withdraw your consent — in particular for facial recognition — at any time, without affecting processing already carried out
To exercise a right, write to momentz.regaim@gmail.com. We respond within 30 days. If you are in the EU or the United Kingdom, you can also lodge a complaint with your data protection authority (in France, the CNIL).
10 · Deleting your account and your data
From the app: Profile → Settings → Delete my account. Deletion erases your profile, your selfie, your face template and your content, according to the periods set out in section 8.
If you no longer have access to the app, write to momentz.regaim@gmail.com from the email address associated with your account.
11 · Security
Exchanges between the app and our servers are encrypted with HTTPS. Access to data is protected by authentication and by server-side access controls. Face templates are stored with a specialised provider, separately from the rest of the profile data.
No system is infallible. In the event of a data breach concerning you, we will inform you as well as the competent authorities, as a rule within 72 hours.
12 · Minimum age
Momentz is intended for people aged 16 and over. Facial recognition is reserved for those 18 and over: 16- and 17-year-olds use the app normally, but the facial recognition features (photo matching and social discovery) are automatically disabled.
If we discover data from a user under 16, or biometric data from a user under 18, we delete it without delay.
13 · Cookies and tracking
Momentz uses neither advertising cookies nor third-party trackers. Only essential technical storage is used (session tokens, preferences) to make the app work.
Momentz may contain links to third-party services (for example the Instagram profile of a guest who has turned on social discovery). We are not responsible for the privacy practices of these third parties.
14 · Changes to this policy
We may update this policy. Any substantial change — in particular regarding biometric data — will be brought to your attention in the app or by email before it takes effect. The update date at the top of the page reflects the latest revision.
15 · Contact
Data controller: Elie Allali (osek patour) — Israel
Email: momentz.regaim@gmail.com
Suggested subject: "Privacy — [your request]"
Response time: 30 days maximum.