Privacy Policy

The data controller is MOMEON. Contact: momeon.contact@gmail.com.

MOMEON does not allow users to upload images, videos, or files. A Momeon contains only a text message of up to 150 characters, a timestamp, and optional metadata.

• Account data: email address and authentication data when you create an account.
• Momeon content: the text message, timestamp, timezone, visibility setting, and optional recipient name you provide.
• Technical data: standard server logs (IP address, browser type) processed for security and operational purposes.

We do not collect: phone numbers, postal addresses, exact geolocation, date of birth, photos, or files.

• Providing the service (contract): creating and displaying your Momeons.
• Security and fraud prevention (legitimate interest): protecting against abuse, duplicate claims, and automated attacks.
• Legal compliance (legal obligation): responding to lawful requests and retaining necessary records.
• Waitlist (consent): if you join the waitlist, we use your email solely to notify you of access. You can withdraw at any time.

Public Momeons are visible to anyone in Explore, search, and on their permanent page. Private Momeons are visible only to you. Privacy is enforced server-side — private Momeons never appear in public listings, search results, API responses, or sitemaps.

Warning: A public message may contain personal data if you choose to include information identifying yourself or another person. Think carefully before publishing identifying information.

Momeons are preserved for the lifetime of the service, subject to deletion requests and legal obligations. Account data is retained while your account is active. Waitlist data is retained until you are granted access or request removal. Server logs are retained for a limited period for security purposes.

Your data is processed by MOMEON and its hosting and infrastructure provider, Base44, which delivers the platform on which MOMEON runs. We do not sell your data or share it with third parties for advertising purposes.

Your data may be processed in countries outside your own, including by our infrastructure provider. Where data is transferred outside the European Economic Area, appropriate safeguards such as Standard Contractual Clauses are in place as required by applicable law.

We implement reasonable technical and organizational measures: encrypted authentication, server-side validation, input sanitization, and access controls. No system is perfectly secure.

Under applicable data protection law (including GDPR), you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict processing.
• Object to processing.
• Data portability where applicable.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact momeon.contact@gmail.com. See our Your Rights page for more details.

If you believe your rights have been violated, you may lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés) or your local data protection authority.

MOMEON is not intended for children under 15. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us and we will delete it.

We may update this policy. We will notify users of significant changes. The latest version is always available on this page.

For privacy requests, GDPR requests, or questions: momeon.contact@gmail.com.