Moments privacy policy

Last updated: October 15, 2026.

Moments organizes your photo library into moments. It runs on iPhone and iPad.

In short

• No account and no servers of our own.
• No ads, and no third-party analytics or tracking tools.
• The app never sends your photos anywhere; they leave only when you share them yourself.
• iCloud is used only in your own account.
• Nothing is deleted without iOS's own confirmation.

What the app accesses

• Photo library. With your permission (full or limited access), the app reads photos, videos and screenshots, with their dates, locations and the albums in the Photos app. It also reads an album to turn it into a moment, trip or category, only when you ask. The app never copies photos to any server.
• Places. To name where a moment happened, the coordinates recorded in your photos are sent to Apple's map services. When you search for a place by name, the text you type also goes to Apple's map services. Both fall under Apple's privacy policy. The app never uses the device's current location.
• Faces. To group photos by person, the app detects faces and computes a numeric signature of each one, on the device, with a model that works offline. The signatures and the face index stay only on the device: they are not synced and not in the backup.

What stays on the device

The app stores on the device what you make in it: moment names, special moments, joins and splits, categories and classified photos, screenshot review decisions, names of people and places, typefaces, colors and backgrounds, special days and trips, edit presets and preferences.

iCloud sync

Sync is optional, and you can turn it off in the app's Settings. It uses the app's private CloudKit database in your iCloud account, so your iPhone and iPad see the same organization.

What travels: special days, trips, moments (name, star and look), categories, each photo's categories and screenshot review, edit presets, places (name and cover) and preferences (language and favorite styles). Photos are referred to only by their iCloud Photos identifier, never the image. People and faces are not synced. The developer has no access to this private database.

iCloud backup

The backup goes to iCloud Drive, in the app's private container in your account. It holds the organization described above, plus people (their names and which faces are theirs, without the face signatures), typefaces and preferences. It never holds the photos.

When something has changed, the app backs up as it goes to the background, in one file per day on each device, and keeps the 30 most recent. Restoring first backs up what is on the device, so a restore can be undone. In the app's Settings you can turn off automatic backups, back up now and restore. You can delete this data in iOS Settings (your name › iCloud › Manage Account Storage). The developer has no access.

On its first launch, the app copies once the three most recent backups of the earlier version of Moments (which used another iCloud container in your account) into its own, to offer restoring them. Nothing else is read from there.

What the app changes in Photos

Only when you ask:

• creates and keeps albums for special moments and categories;
• saves photo edits as reversible adjustments;
• deletes screenshots or photos, always with iOS's own confirmation (they go to Recently Deleted for 30 days).

When you tap Share, the photo goes wherever you choose in the iOS share sheet.

Notifications

They are optional, local and generated on the device: a reminder when kept screenshots are due for review again. We send no server push notifications.

Feedback

"Send feedback" opens an e-mail that you write and send yourself. We receive only what is in it.

In the TestFlight beta, feedback sent through TestFlight (screenshot, comment, device model, iOS version, crash reports and the name and e-mail you use in TestFlight) reaches the developer through Apple, under Apple's TestFlight terms.

What we don't do

We do not sell, share or rent data. The only external services involved are Apple's (Photos, iCloud, Maps, notifications and TestFlight).

Demo

The demo uses only illustrations bundled with the app, separate from your library. It doesn't read or change your photos.

Children

The app is not directed to children and doesn't knowingly collect data from them.

Your rights

Because the data lives on your device and in your own iCloud, you control it directly (LGPD and GDPR). Deleting the app deletes what it kept on the device. iCloud data is deleted in iOS Settings. Questions or requests: the.andrec.design@gmail.com.

Changes

This policy may change as the app gains features. The date at the top shows the last revision.

Who we are

Moments is developed by André Chou, in Brazil. Contact: the.andrec.design@gmail.com.