Privacy Policy
Last updated: January 2025
Moment Apps Ltd.
Company No. 15926946
Registered office: 44 Carlton Avenue West, London HA0 3QU, United Kingdom
Contact: contact@momentapps.co.uk
1. Who We Are
Moment Apps Ltd. ("Shroomy", "we", "our", "us") develops the Shroomy mobile application, which helps users build a daily mental-wellness practice. We act as the controller of the personal data described below.
2. What Data We Collect and Why
Wellness Content You Provide
- Examples: Vent text you type, voice-to-text transcripts, answers to onboarding questions about stress, anxiety, triggers, or prior treatments.
- Purpose: To generate personalised exercises and insights via AI.
- Lawful basis: Explicit consent – you choose to provide this information.
- Retention: Sent to AI providers and kept by them for up to 30 days; not stored on our servers.
On-Device Wellness Data
- Examples: Daily self-care score, historical entries, exercise picks.
- Purpose: Display your history and trends locally in the app.
- Storage: Saved only on your device; never uploaded.
- Retention: Until you delete the data or uninstall the app.
Usage and Event Data
- Examples: Anonymous Firebase Analytics events, crash logs, in-app actions.
- Purpose: Measure performance and improve features.
- Lawful basis: Legitimate interests (product analytics).
- Retention: Up to 14 months (Firebase default).
Device and Attribution Identifiers
- Examples: IDFA/AAID, AppsFlyer ID, notification-permission status.
- Purpose: Marketing attribution and fraud prevention.
- Lawful basis: Consent (gathered via Apple ATT / Google Play prompts).
- Retention: Up to 24 months (AppsFlyer default).
Payment and Subscription Data
- Examples: Transaction ID, subscription status reported by RevenueCat.
- Purpose: Provide paid features and billing support.
- Lawful basis: Performance of contract.
- Retention: While your subscription is active plus six years for accounting.
We do not collect names, email addresses, precise location data, or health-care identifiers.
3. How and Where Your Data Is Processed
Our trusted processors (all engaged under UK GDPR-compliant contracts) are:
| Provider | Purpose | Location & Safeguards |
|---|---|---|
| Anthropic | Generate AI responses | USA; UK-US Data Privacy Framework & SCCs |
| ElevenLabs | Text-to-speech audio generation | USA; DPF & SCCs |
| Google Firebase | Analytics, crash reports, Cloud Functions | EU & USA; DPF & SCCs |
| RevenueCat | Subscription fulfilment | EU & USA; DPF & SCCs |
| Apple / Google | App distribution & payments | EU & USA; DPF & SCCs |
| AppsFlyer | Marketing attribution | USA; DPF & SCCs |
All traffic is encrypted in transit (TLS). Firebase automatically encrypts data at rest.
4. Your Choices and Rights
Under UK GDPR, you have the following rights:
Simply stop entering vent text or uninstall the app.
We do not hold any data that identifies you directly; transient data held by our processors is deleted automatically after the periods listed above.
Disable tracking via your device's ATT/AAID settings.
Email contact@momentapps.co.uk
5. Children
Shroomy is intended only for users aged 13 years or older. We do not knowingly collect data from children under 13. If you believe that a child has provided data, please contact us so we can delete it.
6. International Transfers
Personal data may be processed in countries outside the UK. Transfers rely on:
- UK-US Data Privacy Framework certifications, and/or
- The UK addendum to the EU Standard Contractual Clauses.
7. Security
We apply industry best practices, including encryption in transit and at rest, least-privilege access controls, and periodic security reviews. No method is 100 percent secure, but we take reasonable steps to protect your data.
8. Changes
We may update this Privacy Policy from time to time. We will post any revisions in-app; continued use after changes are posted constitutes your acceptance of the revised notice.
Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Moment Apps Ltd.
44 Carlton Avenue West
London HA0 3QU
United Kingdom
Email: contact@momentapps.co.uk