Privacy Policy

Effective date: 29 July 2026

Momentito ("we", "us") makes the Momentito app. This policy explains what personal data the app collects, why, where it's stored, and what rights you have over it.

1. What we collect

When you create an account, we collect your email address and a password (handled by our authentication provider, Amazon Cognito — we never see or store your password in plain text).

Each day you check in, we store your mood score and impact score (1–5 each) and the date, so we can compute your streak, tier, and personal history, and contribute your scores anonymously to the community average.

If you set a daily reminder, we store your chosen reminder time, timezone, and reminder days so the app can schedule a local notification on your device.

We do not collect your written reflections. Your answers to the daily reflection questions stay on your device and are never sent to our servers — we have no way to read them.

We do not use analytics SDKs, advertising SDKs, or tracking pixels of any kind. Notifications are scheduled locally on your device — no push-notification token is collected.

2. Why we collect it

We use this data to operate your account: to authenticate you, run the daily check-in and streak/tier logic, show you your own history, and compute anonymous community averages. We do not use your data for advertising and do not build behavioural profiles for marketing.

3. Legal basis (GDPR)

If you are in the European Economic Area, the legal basis for processing your account and check-in data is the performance of a contract (i.e. providing you the app you signed up for). Optional data, like reminder preferences, is processed with your consent, which you can withdraw at any time by changing or clearing it in the app.

4. Who we share it with

We do not sell, rent, or trade your personal data. It is stored on infrastructure we operate on Amazon Web Services (AWS) in the EU (Frankfurt, Germany). AWS acts as our data processor and does not use your data for its own purposes. No third-party marketing or analytics platform receives it.

5. How long we keep it

We keep your account and check-in data for as long as your account exists. If you delete your account, your profile and check-in history are permanently deleted (see section 7). Aggregated community statistics (e.g. daily average mood across all users) are anonymous sums that cannot be traced back to you and are retained after deletion.

6. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion at any time
• Withdraw consent without penalty
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at teddified.dev@gmail.com. We will respond within 30 days.

7. Deleting your account

You can permanently delete your account and all associated data at any time from Settings in the app. This immediately and irreversibly removes your profile, check-in history, and login credentials from our systems. You can also request deletion by emailing teddified.dev@gmail.com.

8. Security

We use HTTPS/TLS for all data in transit, industry-standard authentication (Amazon Cognito) for your account, and restrict access to stored data to what the app needs to function. No system is perfectly secure, but we take reasonable precautions.

9. Children

Momentito is not directed at children under 16. If you are under 16, please do not create an account.

10. Changes to this policy

If we make material changes, we will update the effective date above.

11. Contact

Questions? Email us at teddified.dev@gmail.com.