Privacy policy
Last updated: 18 October 2026
Momentos is a private place for families to share photos with each other. Your photos are for your family, not for us, and we don’t sell your information. This page explains what we keep, why, who helps us look after it, and what you can do about it.
The short version
- Only members of your family can see your photos.
- We don’t show adverts, sell your information or track you around the internet.
- The app and website don’t use tracking cookies or analytics.
- We remove location data from your photos on your phone, before they’re uploaded.
- You can ask to see, correct or delete your information at any time.
Who we are
Momentos is run by Dale Rushin, trading as Runewick, a sole trader based in the United Kingdom. We’re the “controller” of your information under data protection law, which means we decide how it’s used.
Address: 32 Valley Road, Kimberley, Nottingham, NG16 2HL
Email: privacy@momentos-app.com
What we collect, and why
| What | Why we need it | Our legal reason |
|---|---|---|
| Your account: name, email address, password (kept scrambled, so we can’t read it), and when you confirmed you’re 18 or over | To create your account, sign you in and check you’re old enough to use Momentos | To provide the service you asked for (contract) |
| Families and invitations: family names, who belongs to each family, what each person is allowed to do, and the email address an invitation was sent to | To run your families and let you invite people | Contract |
| Your photos: the photos you upload, in three sizes, with the albums, comments and reactions around them, and who added them and when | To store and show your photos to your family | Contract |
| Sign-in details: your device type, IP address and the time you signed in, plus the number of recent sign-in attempts from an IP address | To keep your account secure and stop people guessing passwords | Our legitimate interest in keeping the service secure |
| Emails we send you: to verify your address, reset your password, deliver invitations and tell you about changes to a family you belong to | To make the service work. We don’t send marketing emails without asking you first | Contract |
| Error reports: technical details when the app or our servers go wrong, such as the app version, phone model and the part of the code that failed | To find and fix problems | Our legitimate interest in keeping the service working |
| Messages you send us: problems or ideas you send from the app, the reply address you give, and, if you choose, your app version and phone model | To reply to you and to find and fix problems | Our legitimate interest in keeping the service working |
| Reports about content: what was reported, who reported it, and what we decided | To keep Momentos safe and meet our legal duties | Legal obligation and our legitimate interest in safety |
We try to collect as little as we can. We don’t ask for your location, contacts or microphone, and we remove location information (and other camera details) from photos on your phone before they leave it.
Subscriptions and the shop
If you pay for extra storage, Apple or Google takes the payment and tells us whether a family’s plan is active. We never see your card details. We use a service called RevenueCat to manage subscriptions, and we keep a record of each family’s plan.
If you order prints, frames or photo books, we take payment through Stripe and pass your name, delivery address and the photos you chose to the company that prints and posts them. We keep the order record for as long as the law requires us to keep accounts.
These services only apply once they’re available in the app. When they are, they work as described here.
Photos of other people, and children
Family photos often show other people, including children. You’re responsible for only sharing photos you’re happy to share with your family. We don’t use your photos to train artificial intelligence, to recognise faces, or for advertising.
Momentos accounts are for people aged 18 and over. We don’t knowingly collect information directly from children. If you think a child has made an account, please tell us and we’ll remove it.
We’re putting checks in place to detect known child sexual abuse material in uploaded photos, and we’ll report anything we find to the authorities. Otherwise, we don’t look at your photos unless someone reports one, or the law requires it.
Who looks after your information for us
We use a small number of companies to run Momentos. They only handle your information to provide their service to us.
| Company | What they do | Where |
|---|---|---|
| Cloudflare | Runs our servers and website, and stores your photos privately | Photos are stored in the EU. Requests pass through Cloudflare’s global network |
| Neon | Our database (accounts, families, albums) | London, UK |
| Resend | Sends our emails | Ireland, EU |
| Sentry | Collects error reports | Germany, EU |
| Apple and Google | Provide the app stores and take subscription payments | Worldwide |
| RevenueCat, Stripe and our print company | Manage subscriptions, take shop payments and make and post your orders | Chosen when these features launch. We’ll update this page first |
Some of these companies are based outside the UK and EU, or can access information from there. Where that happens we rely on safeguards approved under UK and EU law, such as standard contractual clauses. We may also share information if the law or a court requires it, or to protect someone’s safety.
How long we keep it
- Your account: until you delete it.
- Photos you delete: they go to a bin for 30 days, in case you change your mind, then they’re permanently removed.
- When you leave a family or delete your account: your account details are removed. Photos you added stay with the family by default, because they belong to the whole family, and you’re asked whether you’d like to delete them instead.
- Inactive families: if nobody in a family signs in or views it for two years, we delete it. We email every member 18 months and 23 months in, with a link to download everything. Families with an active subscription are never deleted for being inactive.
- Backups: deleted information can stay in our backups for up to 30 days before it’s overwritten.
- Error reports: up to 30 days.
- Messages you send us: until you delete your account. A copy emailed to our support inbox may be kept a little longer, and we delete those when we’ve dealt with them.
- Orders and payments: as long as the law requires us to keep accounting records (currently six years).
Your rights
You can ask us to:
- tell you what information we hold about you, and give you a copy
- correct anything that’s wrong
- delete your information (you can delete your account in the app at any time)
- limit how we use it, or stop using it, in some cases
- give you your information in a format you can move elsewhere
- stop using information we rely on our legitimate interests for
Email privacy@momentos-app.com and we’ll reply within a month. We may need to check it’s really you first.
If you’re not happy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ico.org.uk), or to the data protection authority in the country where you live.
If you live outside the UK
We’re based in the UK and follow UK data protection law. We give people in the EU and European Economic Area the same protections and rights described on this page.
Keeping your information safe
Your photos are stored privately and are only shown to signed-in members of the family they belong to, using links that expire after a few minutes. Information is encrypted when it travels between your phone and our servers, and our hosting providers encrypt it where it’s stored. Even so, no system is perfectly secure. If something goes wrong that puts your information at risk, we’ll tell you and the ICO as the law requires.
On your phone, and on this website
The app keeps a sign-in token on your phone so you stay signed in, and temporarily saves photos waiting to upload. It needs these to work, and they never leave your phone except to upload your photos. This website doesn’t use cookies, analytics or third-party tracking. Invitation links are never shared with other sites.
Changes to this page
If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
Contact us
Questions about your privacy? Email privacy@momentos-app.com.