Privacy Policy

1. Information We Collect

Account Information

When you sign in with Apple, we receive your Apple user identifier and, optionally, your email address and name. We use this solely to create and authenticate your account.

Voice Recordings & Notes

When you use voice capture, your audio is recorded on your device and sent to our servers for transcription. We do not store raw audio files after transcription is complete. The resulting text notes are stored in your account.

Health Data

If you connect Apple Health, the app reads and writes health metrics (steps, workouts, sleep, etc.) you explicitly link to your habits. Health data is processed for habit tracking only. We never sell or share your health data with third parties for advertising or marketing purposes.

Calendar Data

If you grant calendar access, Momentum reads and writes calendar events to sync your action items and reminders with your device calendar. Calendar data is used solely for scheduling and task management within the app. We do not share, sell, or transmit your calendar data to any third parties.

Chat & AI Interactions

Your conversations with the AI companion are stored to provide contextual, personalized responses. Message content is sent to our AI provider for processing (see Third-Party Services below).

Subscription & Purchase Data

When you subscribe, transaction data is processed through Apple's App Store and managed by RevenueCat. We receive your subscription status and plan type but do not process or store payment card details.

Usage Data

We collect basic usage data (feature usage, session duration, error logs) to improve the app. We do not use third-party tracking SDKs for advertising.

2. How We Use AI

Momentum uses artificial intelligence (powered by OpenAI's API) for the following purposes:

• Voice Transcription: Converting your spoken words into text
• Content Processing: Classifying, tagging, and organizing your notes automatically
• Conversational Assistant: Providing an AI chat interface that can search, summarize, and help you interact with your knowledge base
• Note Enrichment: Suggesting metadata improvements, finding relationships between notes, and generating insights
• Check-ins & Reviews: Generating personalized daily, weekly, and periodic reflection prompts

Your data is sent to OpenAI's API for processing. We use API access (not ChatGPT consumer products), meaning your data is not used to train OpenAI's models. See OpenAI's Privacy Policy.

You can provide or withdraw your consent for AI processing at any time through Settings.

3. Third-Party Services

OpenAI

We use OpenAI's API for voice transcription, content processing, AI chat, and note enrichment as described above.

RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat receives your anonymous app user ID and purchase transaction data from Apple/Google. RevenueCat does not receive your notes, voice recordings, or personal content. See RevenueCat's Privacy Policy.

Apple (Sign in with Apple & HealthKit)

Authentication is handled via Sign in with Apple. If you connect HealthKit, data flows between the app and Apple Health according to Apple's HealthKit guidelines. We comply with Apple's requirement that health data is not used for advertising or sold to data brokers.

iCloud

If you enable iCloud sync, your notes may be backed up to your personal iCloud Drive container. This data is encrypted by Apple and governed by Apple's iCloud terms.

4. Data Storage and Security

Your data is stored in a secure database. We implement the following security measures:

• All data transmission uses HTTPS/TLS encryption
• Authentication tokens (JWT) are used for session management
• API keys for MCP server access are hashed before storage
• User data is isolated — you can only access your own notes and content
• Access to production data is restricted to essential personnel

5. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• AI Processing: Your content is sent to OpenAI's API for the features described above
• Payment Processing: Subscription data is handled by RevenueCat and Apple/Google
• Legal Requirements: If required by law or legal process
• Your API Keys: If you generate API keys and share them with third-party services, those services will have access to your data

6. Your Rights

• Access: You can view all your data within the app
• Deletion: You can delete your entire account and all associated data through Settings. This action is permanent and cannot be undone
• Portability: Your notes can be exported via iCloud sync
• Correction: You can edit your notes and profile information at any time
• Consent Management: You can grant or withdraw AI processing consent, disconnect Apple Health, and disable notifications at any time in Settings
• Subscription Management: You can manage or cancel your subscription through your device's native subscription settings

7. Data Retention

• Account data & notes: Retained as long as your account is active
• Voice recordings: Discarded immediately after transcription
• Chat history: Retained while your account is active; you can delete individual conversations
• Health data: Processed for habit tracking only; not stored beyond what is necessary
• Account deletion: When you delete your account, all data is permanently removed from our servers within 30 days

8. Children's Privacy

Momentum is not intended for use by children under 13 years of age. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the app. Continued use after changes constitutes acceptance of the updated policy.

10. Contact