Your data

Privacy policy

Operator: LEO CHEN, Shenzhen, Guangdong, China. Contact: scisop@gmail.com.

This policy describes the current limited release of Moment.

Information used to provide Moment

We process the Apple sign-in identifier and name you choose to share, your nickname, profile photo, gender, date of birth, manually entered city and bio. We do not receive your Apple ID password. Full birth date is visible to you; age and profile details can be shown to conversation partners.

We process the text, photos and voice recordings you submit, conversation and friendship relationships, friend requests, private contact remarks, read and photo-view states, reactions, stars and level events, reports and blocking choices. If notifications are enabled, we process the APNs device token. Access logs can contain IP addresses, request routes and response status for operation and security. If you contact support, we receive the information you include.

Who can see content

Moments are distributed to other users through Discover. Discover cards initially show content, city and time, without the sender’s name or avatar. Replying establishes a conversation and reveals the corresponding profile. Private messages are available to participants and to our systems as necessary to deliver the service and address safety concerns. We do not claim end-to-end encryption.

AI companions and providers

Ayu and Xiaoman are labeled official AI companions. To generate a reply, Moment sends your message, relevant recent conversation text and any enabled saved memories for that companion to DeepSeek. Avoid entering confidential or sensitive information in AI conversations. Ordinary conversations between people are separate from the official AI companion chats.

Apple provides sign-in and the device notification service. Tencent Cloud hosts the Moment service in its Silicon Valley region in the United States. We do not sell personal data or use advertising tracking SDKs in the current app.

Permissions and local processing

Camera and microphone are requested for features you initiate. Photos for an avatar or private chat are selected through the system picker. A Moment requires in-app capture. Redaction is flattened into the image on the device before upload; original camera bytes and editable brush strokes are not uploaded as that post. Re-encoding removes original photo location metadata. City is manually entered; the current version does not request GPS or phone address-book access.

Active sign-in credentials are stored in Keychain. If you sign out offline, an old credential may remain in Keychain solely to revoke that server session later. Cached metadata and avatars can be cleared. One-time original media is displayed from memory. Local photo-consumption identifiers and timestamps are stored separately from the cache, partitioned by account and service, with old entries eligible for removal after 30 days. Review-request flags remain on the device; they do not tell us whether you rated the app.

Retention and deletion

Ordinary messages, Moments and non-avatar attachments expire 24 hours after sending. Access checks enforce expiry; physical removal follows the service’s scheduled sweep. A recipient can open a photo once for up to 10 seconds; a closed or backgrounded view cannot reopen. Audio is repeatable within its 24-hour lifetime. Delivery interruptions may consume a photo opening. These protections cannot prevent another device or modified software from preserving viewed content.

Profiles and avatars remain while the account is active. AI histories and saved memories on Moment remain until cleared or the account is deleted. Deletion removes the profile, sent content, credentials, device registrations and associated AI data from the active service. Necessary complaint, security and non-content accounting records may remain for resolving incidents or meeting applicable obligations. Historical service backups may retain copies until the backups are removed. Deleting an account cannot undo a copy someone else independently preserved.

Your choices

Change profile information, block or report contacts, clear your view of a conversation, manage notifications, sign out, or choose 我的 → 注销账号 to delete the account. Clearing a conversation affects your view; it does not clear the other participant’s view. Contact us to request access, correction or deletion assistance. We may request the minimum information needed to verify account ownership, never your Apple ID password.

Where data is processed

Moment operates from China and hosts the service in the United States. Apple and DeepSeek may process data in the locations where they operate.

中文说明

运营者为 LEO CHEN，联系邮箱 scisop@gmail.com。服务托管在腾讯云美国硅谷区域。处理信息包括 Apple 用户标识、本人提供的资料、城市、照片、文字、语音、好友与会话关系、互动状态、投诉、推送令牌及必要运行日志。普通内容发送 24 小时后过期；图片每账号一次、最多 10 秒。与官方 AI 好友聊天时，为生成回复，当前消息、相关对话和已启用的专属记忆会发送给 DeepSeek，请勿输入敏感信息。Moment 保存的 AI 对话和记忆可在应用内清空。打码在手机上完成。此刻会分发给其他用户，回复后展示对应资料。注销入口为「我的 → 注销账号」，成功注销后会删除在线账号和相关数据，必要的投诉、安全及账务记录与历史备份可能另行保留。