Privacy Policy

1. Who we are and what this covers

This policy explains how Momenlux ("we", "us") handles personal data when you use the Momenlux mobile app and this website, momenlux.com. It sits alongside our Terms & Conditions.

Momenlux is built in Malaysia, and we handle personal data in line with the Personal Data Protection Act 2010 (Malaysia) and, where they apply to you, the privacy laws of the country you live in.

2. The short version

• Your photos are stored in your own Google Drive, not on our servers.
• We store your moment text (titles, notes, emotions, places, dates) so the app can show and search it.
• No public profile, no feed, no followers. Nothing you save is visible to other users.
• No selling of personal data, and your photos, notes and moments are never used for advertising.
• Events and promos come from advertisers, merchants and venues. Which ones you see depends on where they are, and is the same for everyone. Advertisers only ever see anonymous totals.
• You can export or delete your data at any time.

3. Your photos stay in your Drive

When you attach a photo to a moment, the app uploads it directly from your phone to a Momenlux folder in your own Google Drive. It does not pass through our servers, and we do not keep a copy, backup or thumbnail of it.

To show you the file later, the app keeps a pointer: a short reference to where the file lives in your Drive. When you open a moment, your phone fetches the file from Drive using the permission you gave at sign-in.

If you delete the file from Drive, remove the app's access, or lose your Google account, we cannot recover the media, because we never had it.

4. What we collect

We collect only what the app needs:

• Account details from Google sign-in: your name, email address and Google account identifier.
• Moment details you enter: titles, notes, emotions, dates, wishlist items, and the place name and coordinates attached to a moment.
• Media pointers: references to your files in your Google Drive (not the files themselves).
• Points and offer activity: your points balance, and the events and promos you view, save, unlock or redeem.
• Your device's location, if you allow it. It is used on your phone to show how far listings are and to suggest a place for a new moment. It is not stored on our servers, except the place you choose to attach to a moment.
• Date of birth and gender, which the app asks for when you complete your profile. They are stored with your profile only, are not shared with advertisers, and are not used to choose which listings you see.
• Technical data: device type, app version, crash reports and basic logs needed to keep the service running and secure.

We do not collect your contacts, messages, microphone or anything else on your phone that the app does not need.

5. How we use your data

• To run your account and show your moments back to you, on any device you sign in to.
• To keep your moments in sync, including moments you save while offline.
• To show events and promos near you, and to manage your points.
• To show events and promos and how far away they are, using your location on your phone only. We do not tailor listings to you.
• To measure how events and promos perform, and to give advertisers anonymous, aggregated results.
• To keep Momenlux secure, prevent abuse (such as fake activity to earn points) and fix problems.
• To answer you when you contact support.

We do not use your photos, notes, emotions, moments or the places pinned to them for advertising or to target offers, and we do not use them to train artificial intelligence models.

6. Google account and Google Drive access

Momenlux uses Google Sign-In, and asks for permission to create and manage files in a Momenlux folder in your Google Drive. We use this access only to save the media you attach, show it back to you, and keep your Momenlux folder organised.

Momenlux's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We never use or share information received from Google, including your account details and anything in your Drive, for advertising or to target offers.

You can remove Momenlux's access at any time from your Google Account, under Security, then third-party apps and services. The app will then stop working until you sign in again, but your files stay in your Drive.

7. Location

Location is used to attach a place to a moment you are saving, and to show events and promos near you. When you use nearby listings, your location stays on your phone, where it is used to show what is near you and how far away it is. These uses need your permission, and you can turn location off in your phone settings at any time. The app keeps working; you can type places in by hand.

The places attached to your moments are private to your account. They are never published or shown to other users, and there is no way to share them. They are never used to target offers.

8. Events and promos

Events and promos in Momenlux are supplied by third-party advertisers, merchants and venues, who pay us to reach people through the app. This is part of how Momenlux stays free.

Which listings you see depends only on where they are and the countries they are offered in. It is the same for everyone. We do not tailor listings to you.

What we never use. Your profile, photos, notes and moments are never used for advertising.

What advertisers receive. Only anonymous totals, such as how many times a listing was viewed or unlocked. Never your name, email address, account details or anything else that identifies you.

Unlocking a listing is recorded on your account so the details stay available to you. If you redeem an offer at a venue, for example by showing a code, the merchant sees only what you choose to show them.

9. Who we share data with

We do not sell your personal data. We share it only in these limited cases:

• Service providers that host our servers and database, send support emails, process crash reports, or help us deliver and measure events and promos. They may use your data only to provide that service to Momenlux, under confidentiality and security obligations.
• Google, as needed for sign-in and to store your media in your own Drive.
• Map and place services: when you search for a place, or the app names where you are, the search text or coordinates are sent to OpenStreetMap's Nominatim, Photon (by Komoot) and Mapbox to find the place name. Map images come from OpenFreeMap. These services receive no name, email or account details from us.
• Advertisers, merchants and venues: only anonymous, aggregated campaign results, never data that identifies you (see section 8).
• Legal reasons, if we are required to by law, court order or a lawful request from authorities, or to protect people from harm.
• A change of ownership: if Momenlux is merged or sold, your data may pass to the new owner, who must keep protecting it under this policy. We will tell you before that happens.

10. Where your data is stored

Your moment text and account details are stored with our cloud hosting providers, whose servers may be located outside Malaysia. When data is transferred abroad, we take steps to make sure it receives a level of protection comparable to Malaysian law.

Your photos are stored by Google in your own Google Drive, under your Google account settings.

11. How long we keep it

• Account details and moment text: for as long as your account is active.
• After you ask us to delete your account: removed from our live systems within 30 days, and from backups when they cycle out, normally within a further 60 days.
• Technical logs and crash reports: kept for a short period, normally no more than 90 days, unless needed to investigate abuse.
• Records of which listings you viewed: up to 90 days, then deleted automatically.
• Counts of listing views and unlocks: kept for advertisers' statistics, with nothing linking them to you.

Deleting your Momenlux account never touches your Google Drive. Your photos stay there until you choose to delete them.

12. How we protect it

Data is encrypted in transit between your phone and our servers. Access to our systems is limited to the people who need it to run Momenlux. No system is perfectly secure, but if a data breach ever affects you, we will notify you and the relevant authorities as the law requires.

13. Your choices and rights

You can:

• See and correct your moments and account details in the app at any time.
• Get a copy of your data, or ask for it in a format you can take elsewhere.
• Delete individual moments in the app, or delete your whole account yourself, in the app (Profile → Delete account) or by email. See how to delete your account.
• Withdraw permissions such as location or Google Drive access, from your phone or Google Account settings.
• Object or complain: contact us first, and you may also complain to the Personal Data Protection Commissioner in Malaysia, or the data protection authority where you live.

To make a request, email support@momenlux.com from the address linked to your account. We may need to confirm it is you, and we aim to reply within 21 days.

14. Children

Momenlux is for people aged 13 and over. If you are under 18, please use it with a parent or guardian's agreement. If we learn that an account belongs to a child under 13, we will delete it.

15. This website

momenlux.com has no advertising and no tracking cookies. It remembers two small preferences in your browser: the language you chose (a cookie) and the colour theme you picked (stored only on your device). Fonts are loaded from Google Fonts, which receives your IP address to deliver them. Our web host keeps standard server logs for security.

16. Changes to this policy

We may update this policy as Momenlux grows. We will change the "last updated" date above, and for significant changes we will show a notice in the app before they take effect.

17. Contact

Questions or requests about your privacy: support@momenlux.com