1. What we process

• Account data: a Supabase user identifier and identifiers, email address, or display name that Apple/Google sign-in may provide. MomentArt does not offer public email sign-in.
• Your private museum data: saved artworks, exhibitions and artists; private collection names, artwork membership and order.
• Pass data: current entitlement, store, product and expiration state. Apple or Google handles payment credentials; MomentArt does not receive them.
• Local viewing data: recent views, image and browsing caches, and preferences stored on your device.
• Operational data: limited service request and security logs, including requested artwork or search endpoints, IP addresses, device/network information, approximate regions inferred from network addresses, and error records. These logs support service operation, security, and troubleshooting; the app does not request device location access.

MomentArt does not currently use advertising or cross-app tracking SDKs. It has no public social profile, comments, followers, or user artwork upload.

2. Why we use it

To authenticate you; sync saved items and private collections; recognize and restore a Pass; deliver artwork images; retain previously loaded content; prevent abuse; troubleshoot failures; and respond to support or deletion requests.

3. Service providers

• Supabase — authentication and PostgreSQL account data.
• Cloudflare — website hosting and private R2 artwork image delivery.
• RevenueCat — subscription entitlement management and purchase statistics.
• Apple and Google — sign-in and store billing when you choose their services.

These providers may process data outside your country or region under their policies, service arrangements, and applicable safeguards.

4. Retention and deletion

Active account data is kept while your account is open and as needed to provide the service. In-app deletion removes the MomentArt account and associated data from the active database and requests deletion of the linked RevenueCat customer. Supabase backup and operational log copies may remain for up to 7 days before automatic expiry. Apple and Google may retain purchase records under their policies.

The initiating device clears recent views and account-bound saved and browsing snapshots. Shared artwork image caches contain public artwork images and may remain until cleared by the system or the app is uninstalled. Other devices remove account-bound data when they recognize the deleted session or when the app is uninstalled.

5. Your choices

• Browse without an account.
• Manage saved items and private collections, sign out, or delete the account from Me > your signed-in account.
• Manage or cancel subscriptions in the App Store or Google Play. Deleting MomentArt does not cancel store billing.
• Use the web deletion page if you cannot access the app.

6. Security, children, and changes

We use access controls, private media storage, database row-level security and short-lived image URLs. No system is perfectly secure. MomentArt is a general-audience art service and is not directed to children under 13. Material changes will be reflected here with a revised date.

7. Contact

Email psychangstudio@gmail.com.