Privacy Policy – MomentMal App

Last updated: October 2026

This policy explains which personal data the MomentMal app (available for Android and iOS) processes and how we handle it.

1. Controller

The controller responsible for data processing in the MomentMal app is:

If you have any questions about data protection, you can reach us at this email address.

2. What data we process

• Account data: the name and email address you provide when signing up (managed by our login provider Clerk).
• Content: your bucket lists and items (titles, descriptions, status, memories, optional photos and places).
• Optional location data: places you assign to an item yourself so it can be shown on the map, and – only if you agree – your approximate location for weather tips (see section 6). There is no continuous location tracking in the background.
• Optional photos: only images you add yourself to items or as your profile picture.
• Usage data: events about how the app's features are used (see section 7).

3. Purpose of processing

We process this data solely to provide the app's features: signing in, saving and syncing your lists across your devices, sharing lists with people you invite yourself and – if you turn them on – weather tips. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR) or our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR); for weather tips and optional emails, it is your consent (Art. 6(1)(a) GDPR, see sections 5 and 6).

4. Shared lists

When you share a list, the people you invite can see and edit the contents of that list. Invitees are matched only by their email address; an invitation can only be seen by the person with exactly that email address. If someone deletes their account, the lists they own disappear for all members, and their items and memories are also removed from shared lists – including the memories others have added to those items.

5. Services we use (processors)

• Clerk – authentication and account management.
• Neon / Render – hosting of the database and the server (EU region, Frankfurt).
• Cloudinary – storage of the photos you upload yourself. Cloudinary may process data in the USA; such transfers are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
• Expo / Google Firebase Cloud Messaging – delivery of push notifications, if you allow them in the app. You can turn notifications off at any time in your profile settings or in your device's system settings.
• Resend – sending emails: to us, when you report content or a person (containing the details needed to handle the report); to you, a one-time welcome email after you sign up (Art. 6(1)(b) GDPR) and, only if you agree under Profile → Emails, no more than three emails a year about seasonal list templates and a personal year in review (calculated from your items: number of moments lived, countries, cities, categories, memories; Art. 6(1)(a) GDPR). You can withdraw your consent at any time in the app or via the unsubscribe link in every email. Addresses that can't be delivered to are excluded from further emails.
• OpenStreetMap / Photon – turning place names into map points when you search for a place.
• Open-Meteo (open-meteo.com) – fetching the weather forecast for weather tips, only if you turn this feature on (see section 6).

We don't sell your data and don't pass it on for advertising purposes. The app contains no advertising.

6. Weather tips (optional)

Weather tips are voluntary. Only if you agree and allow the app to access your location does the app determine your approximate location – rounded to about 1 km and only while you're using the app (no tracking in the background).

To fetch the weather forecast, the app sends only these rounded coordinates to the weather service Open-Meteo (open-meteo.com); your name, email address and other account data are not transmitted. As with any request over the internet, Open-Meteo technically receives your device's IP address in the process.

Your location is not stored on MomentMal's servers and is not linked to your account; the rounded coordinates and the forecast are only cached briefly on your device (coordinates for no more than 24 hours) and are deleted when you turn weather tips off in your profile.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can turn weather tips off at any time in your profile, or revoke the app's location access in your device's system settings; doing so withdraws your consent with effect for the future.

7. Usage analytics (PostHog)

To improve the app, we record usage events (e.g. which features are used) with PostHog. Processing takes place on servers in the EU (PostHog EU Cloud) and is linked to your account. The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). There is no tracking across other apps or websites, and no data is passed on for advertising purposes.

8. Storage period and deletion

Your data is stored for as long as your account exists. If you delete individual content or photos, we also remove the photos from our photo service Cloudinary.

If you delete your account in the app (Profile → Delete account), the following is permanently removed right away: your login, your lists, items, memories and photos (including in other people's lists), memberships, invitations and invite links, 💛 reactions, wishes and votes in “Wishes & ideas”, your devices for push notifications, and your notification and email settings. Where other people's lists record you as having been there or as the person who ticked something off, that note is removed. At the same time, we instruct Cloudinary to delete your photos and PostHog to delete your usage data.

Exceptions: we keep reports of content or people for 12 months from receipt for moderation and to defend legal claims (Art. 6(1)(f), Art. 17(3)(e) GDPR); reports you filed yourself are detached from your account. With our service providers and in backups, remnants may technically remain for up to 90 days until they are automatically deleted or overwritten.

Alternatively, you can request deletion by email to office@momentmal.net.

9. Your rights

You have the right at any time to:

• obtain information about the data stored about you (Art. 15 GDPR),
• request the correction of inaccurate data (Art. 16 GDPR),
• request the erasure of your data (Art. 17 GDPR),
• request the restriction of processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to the processing (Art. 21 GDPR).

You can delete your account and all associated data yourself at any time via “Profile → Delete account”. You also have the right to lodge a complaint with the competent supervisory authority (in Austria: the Data Protection Authority, www.dsb.gv.at). For any other requests, contact us at office@momentmal.net.

10. Changes

We may update this privacy policy when features or legal requirements change. You'll always find the current version on this page and in the app under Profile → Privacy policy.