Moments is a voice-first journal that runs entirely on your iPhone. This page describes what data the app touches, where it lives, and what we, the developer, can and can't see.

The whole thing in one line. Every entry, recording, photo, and AI-derived theme lives only on your iPhone. We operate no servers that could store your journal. We can't read it because there's no copy to read.

What stays on your device

Every journal entry, audio recording, photo, AI-generated structure (titles, themes, people, follow-ups, tone), and your baseline introduction is stored exclusively on your iPhone. None of it is transmitted to any server we operate, because we operate none.

  • Voice recordings are saved as audio files in the app's private storage area.
  • Transcripts are produced on-device by a local speech recognition model (Whisper).
  • Structured entries (cleaned-up text, themes, people, tone) are generated by an on-device language model running through Apple's MLX framework.
  • Photos you attach are stored locally and never uploaded.
  • The baseline profile you set up during onboarding is local-only.

What we don't collect

Moments does not collect, transmit, or have access to:

  • Your name, email, phone number, or any account information.
  • Your location.
  • Your contacts.
  • Your journal entries, audio, photos, or any derived metadata.
  • Usage analytics, telemetry, crash reports, or behavioral data.
  • Device identifiers like IDFA or IDFV.

The app has no analytics SDKs, no crash reporting services, no advertising integrations, and no third-party trackers of any kind.

Network activity

The app makes one type of outbound network request, and only on first use:

  • Downloading the on-device language model from the open-source Hugging Face repository, the first time you save an entry. The download is the model weights only, a public file that anyone can fetch. No account, no identifier, and no user data is sent with the request. We pin the exact revision so the bytes are reproducible.

The speech-to-text model is shipped inside the app bundle and never touches the network at all.

After the language model is on your phone, the app does not require network access to function. You can journal in airplane mode indefinitely.

Subscriptions and Apple's role

Moments Premium is a subscription processed entirely by Apple through the App Store. When you subscribe:

  • Apple handles payment, billing, renewal, cancellation, and refunds. We never see your payment information.
  • We receive an anonymous transaction receipt from Apple confirming that your subscription is active. The receipt does not contain your name, email, or any identifying information.
  • Apple's own privacy policy governs the payment side. See Apple's Privacy Policy.

Backups and exports

The app offers a "Full backup" feature so you can move your moments to a new iPhone. The backup is a file containing your entries, audio, and photos. When you generate one, it's saved to wherever you choose (Files app, AirDrop, your own iCloud Drive, etc.). What happens to that file after you create it is up to you.

iOS's standard device backup (iCloud Backup or encrypted local backup via Finder) may include the app's data, depending on your settings. That data, if backed up, is encrypted and governed by Apple's iCloud privacy terms. Some app components, like the downloaded AI model, are explicitly excluded from iCloud backup to save space.

Deleting your data

Because everything is on your device, deletion is simple:

  • Reset all data in the app's Profile tab clears all entries, recordings, photos, and your introduction.
  • Uninstalling the app removes everything else, including the downloaded AI model.

There is no server-side data to request deletion of, because there is no server.

Children

Moments is not directed to children under 13 and does not knowingly collect any information from anyone. Since the app collects no personal data, there is nothing to protect or delete in this context.

Changes to this policy

If we ever update this policy, the date at the top of this page will change. Material changes will also be noted in app release notes so you can see them without opening this page.

Contact

Questions, concerns, or feedback: hello@keepmoments.app. Replies usually come within a day or two from a human who actually wrote the code.