1. What we process

• Account data: a Supabase user identifier and identifiers, email address, or display name that Apple/Google sign-in may provide. MomentArt does not offer public email sign-in.
• Your private museum data: saved artworks, exhibitions and artists; private collection names, artwork membership and order.
• Pass data: current entitlement, store, product and expiration state. Apple or Google handles payment credentials; MomentArt does not receive them.
• Local viewing data: recent views, image cache, preferences and offline artwork snapshots stored on your device.
• Operational data: limited request, security, device, network, crash and service logs processed when needed to operate and protect the service.

MomentArt does not currently use advertising or cross-app tracking SDKs. It has no public social profile, comments, followers, or user artwork upload.

2. Why we use it

To authenticate you; sync saved items and private collections; recognize and restore a Pass; deliver artwork images; provide requested offline viewing; prevent abuse; troubleshoot failures; and respond to support or deletion requests.

3. Service providers

• Supabase — authentication and PostgreSQL account data.
• Cloudflare — website hosting and private R2 artwork image delivery.
• RevenueCat — subscription entitlement management.
• Apple and Google — sign-in and store billing when you choose their services.

These providers may process data outside your country or region under their policies, service arrangements, and applicable safeguards.

4. Retention and deletion

Active account data is kept while your account is open and as needed to provide the service. In-app deletion removes the MomentArt account and associated data from the active database and requests deletion of the linked RevenueCat customer. Supabase backup and operational log copies may remain for up to 7 days before automatic expiry. Apple and Google may retain purchase records under their policies.

Recent views, offline snapshots and image cache on the initiating device are cleared by the app. Another offline device clears account-bound data when it signs out or synchronizes, or when you clear or uninstall the app.

5. Your choices

• Browse without an account.
• Clear offline content, sign out, or delete the account in Settings.
• Manage or cancel subscriptions in the App Store or Google Play. Deleting MomentArt does not cancel store billing.
• Use the web deletion page if you cannot access the app.

6. Security, children, and changes

We use access controls, private media storage, database row-level security and short-lived image URLs. No system is perfectly secure. MomentArt is a general-audience art service and is not directed to children under 13. Material changes will be reflected here with a revised date.

7. Contact

Email psychangstudio@gmail.com.