Moment - Privacy Policy

Last updated: 20th August 2026

Your privacy is paramount. We will never sell your data.

This Privacy Policy explains how we collect, use, and protect your information when you use Moment and related services (collectively, the “Service”) provided by Of the Coven Ltd (“we,” “us,” “our”). 

By downloading, registering with, or using the Moment app, you consent to the terms outlined in this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

a. Personal Information

• Name, email address, and password
  
  

• Date of birth
  
  

• Health and wellness information (e.g., menstrual cycle data, symptoms, moods, basal body temperature etc)
  
  

b. Device & Usage Data

• IP address
  
  

• Device type and operating system
  
  

• App usage and feature interaction
  
  

c. Other Information

• Location data (if permission granted)
  
  

• Notes or journal entries
  
  

2. How We Use Your Information

We use your information to:

• Create your account
  
  

• Provide personalised insights, content and suggestions (based on the data you input)
  
  

• Track and analyse cycle patterns.
  
  

• Improve our app and user experience.
  
  

• Send notifications.
  
  

• Respond to support requests.
  
  

• Comply with legal obligations (e.g., when responding to lawful requests)
  
  

We will never sell your data.

3. Data Sharing & Transfer

We will never sell your data.

Essential third parties

Your data will only be shared with essential third parties who we deem to have suitable privacy policies in place. 

• Firebase
  Purpose: Secure storage of your data in the course of providing the core features and functionality of the app. 

Firebase Analytics
Purpose: To improve the user experience and overall service. 

Privacy policy: https://firebase.google.com/support/privacy 

• Squarespace
  Purpose: Email marketing, if you have opted in.
  
  Privacy policy: https://www.squarespace.com/privacy 

• Google Analytics
  Purpose: To improve our service.
  
  Google (sign up / login)
  Purpose: If you choose to sign up and log in with Google. In that case, certain information will be exchanged with us and Google (such as your name, email address, and other information you provided to Google during the creation of your Google account).
  
  Privacy policy: https://policies.google.com/privacy

• Apple Inc
  Purpose:  If you choose to sign up and log in with your Apple credentials, then certain information will be exchanged with Apple, such as device data, IP address and other information you provided Apple with during the creation of your Apple account.
  
  Privacy policy: https://www.apple.com/uk/legal/privacy/en-ww/
  
  
  

Your data may be shared:

• When required by law, or legal process
  
  

• To protect the rights and safety of users and the public
  
  

Data Transfer

Your information may be transferred to and processed in countries outside of your residence (for the purposes outlined in Part 3, above e.g. secure storage of your data in Firebase database, located in the EU). In this instance, we will ensure that adequate data protection standards are in place to safeguard the confidentiality of the information.

4. Data Storage & Security

Data Security

We take the security of your data seriously and implement strong security measures to protect your data.

Our app is built using Firebase, including Firestore for data storage. All data transmitted between your device and our servers is encrypted using industry-standard HTTPS (TLS) protocols. Data stored in our backend is encrypted at rest using secure, Google-managed encryption. We implement authentication to help ensure that only authorised users can access their data. Additionally, we utilise Firestore security rules to prevent unauthorised access and modifications. While we strive to protect your information, we encourage users to maintain strong passwords and safeguard their login credentials.

If we learn of a security system breach, we will attempt to notify you by email and/or notice in the app or on our website.  We will take reasonable steps to remedy the breach appropriately, performing any other reasonably necessary activities.

If you want to report a security incident related to the Services, please email us at  jade@themomentjournal.app    

5. Your Rights and Choices

You have the right to:

• Access and correct your data.
  
  

• Delete your account and associated data.
  
  

• Withdraw consent for data processing.
  
  

• Export your data.

To exercise these rights, email us at  jade@themomentjournal.app 

6. Children's Privacy

Moment is not intended for users under the age of 16 (or applicable age of consent in your country). We do not knowingly collect data from children.

7. Data Retention

We retain your data only for as long as necessary to provide our services or as required by law. 

You can delete your account at any time through the app settings by visiting your profile section in the app.

8. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. When we do, we will notify you via the app or email.

9. Cookies and Tracking

You can read more about the cookies and tracking we use on the https://www.themomentjournal.app/ website, here: https://www.themomentjournal.app/cookie-policy 

We use Firebase Analytics for in-app tracking to help us improve the user experience and optimise our advertising (technical and usage data, only. Your health data will never be shared with advertisers). 

You’ll be asked whether you wish to opt in or out of this via an in-app pop-up. You can change this at any time in the Privacy Tracking settings of your device. 

10. Contact Us

For questions, concerns, or data requests, contact us at:

Of the Coven Ltd
Email: jade@themomentjournal.app
Website: https://www.themomentjournal.app/ 

Registered address: Denny View, Portishead, Bristol, BS20 8BS.