Privacy Policy

1. Overview

Momentmade is operated by Elliot Dong, an individual based in China (“Momentmade,” “we,” “us,” or “our”). This Privacy Policy applies to the Momentmade iOS application, this website, and related support services.

Momentmade lets you select a curated art direction, provide the short-text and image inputs requested by that Skill, and generate one artwork. We design the service to keep user content transient wherever practical.

2. Information we process

Account and authentication

• An opaque Sign in with Apple identifier used to recognize your account.
• A randomly generated internal user ID.
• An encrypted Apple authorization refresh token, when Apple provides one, so account deletion can revoke authorization.
• Hashed session credentials and session expiry information. Momentmade does not persist your Apple password.

Creation content

• The art Skill you select and the short-text inputs you enter.
• Image inputs and their technical properties, such as file type and dimensions.
• The generated artwork and generation prompt produced while fulfilling your request.

Purchases and usage

• Subscription product, entitlement status, purchase environment, renewal or expiry information, and related billing event metadata received from RevenueCat and Apple. We do not receive your full payment-card details.
• Generation allowance and minimal operational records: selected Skill ID, whether an image was used, output aspect ratio, success or failure status, model identifiers, token or image usage, latency, estimated cost, and safe error codes.

Technical and support information

Cloud infrastructure may process IP address, request timing, device and network information, and security signals to deliver the service, prevent abuse, and diagnose failures. If you contact support, we process your email address, message, and anything you choose to include.

3. How we use information

We process information to:

• authenticate you and keep your account secure;
• generate and return the artwork you request;
• verify memberships, restore purchases, and enforce creation allowances;
• operate, secure, troubleshoot, and improve Momentmade;
• respond to support, privacy, and account-deletion requests; and
• comply with law, enforce our Terms, and prevent fraud or misuse.

Depending on where you live, our legal bases may include performing our contract with you, your consent, our legitimate interests in operating and protecting the service, and compliance with legal obligations.

4. AI generation and image inputs

Before Momentmade sends personal data for the first AI creation on an account, the app identifies the data involved and the third-party AI service, then asks for explicit permission. You can decline without sending an AI request and can later withdraw permission from the Account screen.

Your selected Skill and short-text inputs are sent through Vercel AI Gateway to OpenAI services to compile an image-generation prompt and create the final artwork.

If you add images, Momentmade may resize them when their longest edge exceeds 2,048 pixels. Every image is sent to the vision-language step so the service can understand subjects, activities, palette, and mood. Some Skills also send the uploaded images to the final image-generation model as visual references; the creation screen tells you when this applies.

An image input may guide the result, but it is not guaranteed to preserve a person’s identity, exact composition, clothing, product, or original photographic pixels. Do not submit sensitive personal information or an image unless you have the necessary rights and permissions.

Momentmade does not use your content to train its own model and instructs Vercel AI Gateway not to route requests to providers that train on prompt data. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. OpenAI’s default abuse-monitoring logs may contain customer content and are retained for up to 30 days; longer retention may occur when required by law or reasonably necessary to protect its services or third parties. Image inputs flagged as potential child sexual abuse material may be retained for manual review.

5. Service providers and disclosures

We disclose only the information reasonably needed for these providers to perform services for Momentmade:

• Apple — Sign in with Apple, App Store distribution, payment processing, subscription management, and server notifications.
• RevenueCat — subscription status, purchase restoration, entitlement management, and billing events, using the internal user ID rather than an email address.
• Cloudflare — application hosting, database, network security, request delivery, and image-input resizing.
• Vercel — AI Gateway routing, usage measurement, and operational delivery of model requests.
• OpenAI — prompt compilation, image understanding, safety processing, and image generation.

We require service providers that process personal data for Momentmade to provide the same or equal protection described in this policy, use the data only to provide their contracted services, and apply appropriate security and confidentiality safeguards. They may not use Momentmade user content for their own advertising.

We may also disclose information when required by law, to protect users or the service, or in connection with a reorganization where the recipient must honor this policy. We do not sell personal information, serve behavioral advertising, or use third-party advertising trackers in the Momentmade app.

6. Retention and deletion

• Ideas, prompts, reference images, and generated images: not retained in Momentmade’s application database. They remain in memory only as needed to process and return a generation. External processors may retain request content under their own contractual security and abuse-monitoring periods.
• Sessions: expire after 30 days. Expired sessions and sessions revoked for at least 30 days are removed during routine session maintenance.
• Account and active subscription records: retained while your account exists and deleted when you complete in-app account deletion, except where retention is required by law.
• Free-allowance abuse prevention: after account deletion, we may retain an irreversible keyed identifier and the number of free creations already used for as long as Momentmade offers a lifetime free allowance or reasonably needs the record to prevent repeated claims. This record cannot restore your deleted account or content and is used only to prevent repeated free allowances.
• Operational generation and billing-event metadata: retained for up to 24 months for allowance enforcement, security, fraud prevention, cost control, and troubleshooting. After account deletion, retained records are deleted or made non-linkable to your Apple identity.
• Support correspondence: retained only as long as reasonably needed to resolve the request and meet legal obligations.

Deleting a Momentmade account also requests deletion of its RevenueCat customer record and revokes Sign in with Apple authorization where possible. Account deletion does not cancel an Apple subscription; subscriptions must be managed separately through Apple.

7. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, withdraw consent, or object to certain processing.

• Delete your account from the Account screen inside Momentmade.
• Manage or cancel a membership in Apple’s subscription settings.
• Request access, correction, or other privacy assistance by emailing art-help@artifact-kit.com.

We may need to verify that a request relates to your account. You may also have the right to complain to the data-protection authority where you live.

8. Children

Momentmade is not directed to children under 13. A minor may use the service only with permission and supervision from a parent or legal guardian where required. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information improperly, contact us so we can investigate and delete it.

9. International processing

Momentmade is operated from China, and its service providers may process information in China, the United States, Europe, and other locations. This means information may be transferred to a country whose privacy laws differ from those where you live. We use service-provider contracts and other safeguards appropriate to the services and applicable law.

10. Changes and contact

We may update this policy as Momentmade changes or legal requirements evolve. We will update the date above and provide additional notice when a change is material.