Privacy Policy

What we collect

Account data: your email, name, and (if you sign in with a password) a salted, hashed copy of it — never the password itself. If you sign in with Google, Microsoft or Apple, we receive the email and name your provider chooses to share, and a stable identifier for your account with them; we never see your password with that provider.

The content you create: projects, KPIs and their recorded values, milestones, tasks, rewards, wins, blockers, and your daily/weekly/monthly reviews. This is the data the product exists to hold — it's yours, and this policy's "your rights" section below covers it.

Technical data needed to keep your account secure: session identifiers, the IP address and browser/app identifier used to create a session, and short-lived counters used to rate-limit login attempts.

Cookies: one to keep you signed in (httpOnly, never readable by page scripts), one to remember your language, and one, temporary, used only during a Google/Microsoft/Apple sign-in. None of them are used for advertising.

Mobile app only, if you allow notifications: a push token for your phone (an identifier issued by Apple or Google that lets us send it a notification), its platform (iOS or Android) and the language to write notifications in. It is deleted when you sign out on that phone or delete your account.

Why we collect it

To provide the service you asked for: create your account, save your projects and track your progress, and keep you signed in.

To keep the service secure: detect and slow down credential-stuffing and brute-force attempts, and investigate abuse.

To send you account-related email: verify your address and let you reset your password. We don't send marketing email.

Who we share it with

We don't sell your data, and we don't share it for advertising. A small number of providers process it on our behalf, strictly to run the service:

— Neon (database hosting, EU) stores all of the data above.

— Vercel (application hosting) runs the app and its API.

— Upstash (rate limiting) briefly stores counters keyed by IP address to slow down abusive login attempts; these expire automatically within minutes.

— Resend (email delivery) sends verification and password-reset email on our behalf.

— Stripe (payments), only if you subscribe to Momentum Pro on the website: processes your payment and card details under its own privacy policy. We keep only a Stripe customer reference and the state of your subscription (plan, status, renewal date).

— Expo (push relay), then Apple Push Notification service or Firebase Cloud Messaging (Google), deliver the reminders you allowed to your phone; they receive the push token and the notification text.

— If you choose to sign in with Google, Microsoft or Apple, that provider processes what's needed to authenticate you, under its own privacy policy.

How long we keep it

For as long as your account is active.

When you delete your account (Settings → Delete account, or the equivalent in the mobile app), the effect is immediate: every sign-in method and session is revoked, your email, name and password are replaced with anonymous placeholders, and every project, KPI, milestone, task, reward and win you own is marked deleted and made permanently inaccessible through the app — all at once, the moment you confirm.

The rows themselves are then permanently and irreversibly erased on a routine schedule, within 30 days of deletion. We keep them briefly rather than instantly so a mistaken deletion can still be investigated if you contact us right away; nothing about your account is usable or visible to anyone, including us, once you've confirmed the deletion.

Your rights

Access and portability: download a copy of your data at any time from Settings → Download my data (web); the same data is available on request by writing to us if you're using the mobile app before this ships there too.

Correction: your name and email can be changed directly from Settings.

Erasure: delete your account at any time from Settings (web) or the equivalent screen in the mobile app — see "How long we keep it" above for exactly what that does.

Objection and restriction: write to us and we'll act on it; some requests (for example, deleting data we need to keep briefly for security or legal reasons) may take a short, explained delay.

You can reach us at any time to exercise any of these rights, or if anything above is unclear.

Security

Passwords are hashed with Argon2id and never stored or logged in plain text. All traffic is encrypted in transit. Sessions live in an httpOnly cookie a page script can never read, every request that changes data is checked against cross-site forgery, and login attempts are rate-limited per account and per address.

International transfers

Our database is hosted in the EU. Some of the providers listed above operate globally; where they process data outside the EU, they do so under their own published safeguards (standard contractual clauses or an equivalent mechanism).

Children

Momentum OS is not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, where required, tell you directly.

Contact us

Questions, requests, or anything about your data: write to privacy@robust-code.com.