Privacy Policy

Data we collect

Data you give us:

• Account details — your email address, display name, and profile picture, and, if you sign in with Google or Apple, the account identifier they return to us.
• Your tasks — the items you add to The Pile, and any notes you attach to them.
• Session data — when a session started and ended, how long it ran, which task it was for, and whether you marked it done.
• Friends and invitations — who you invited to a session and who accepted, so shared sessions work.
• Support messages — what you write to us, so we can reply.

Data collected automatically:

• Device and app data — device model, operating system version, app version, language, and time zone.
• Usage data — which screens and features you use and when, for diagnostics and product decisions.
• Crash and performance diagnostics.
• Purchase data — subscription status and receipt validation from Apple or Google. We never receive your full payment card details.

Momo does not ask for health records, diagnoses, or any medical information, and you should not put that kind of detail into a task if you would rather we did not store it.

Signing in with Google

If you choose Sign in with Google, Google sends us a limited set of information from your Google profile: your name, your email address, your profile picture, and your Google account ID. That is the whole of it.

Momo does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service, and it cannot read, create, or delete anything in your Google account.

We use that information only to create and secure your account, to recognise you when you sign in again, to show friends who is in a shared session with them, and to send you service email. We do not sell it, share it with advertisers, or use it to build advertising profiles.

Momo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Momo from your Google account at any time in your Google account's security settings, and you can delete your Momo account from within the app.

How we use your data

• To provide the Service — keeping The Pile and your session history in sync across your devices, running timers, and connecting shared sessions.
• To let you invite friends and to show them who is in the session.
• To process subscriptions and verify entitlements.
• To provide support and respond to you.
• To keep the Service secure, prevent abuse, and debug problems.
• To improve the Service, using aggregated or de-identified data wherever it will do the job.
• To send service messages, and — only with your consent, and with an unsubscribe link in every message — product updates.

Under the UK GDPR — and the EU GDPR where it applies to you — our legal bases are: performance of our contract with you (providing the Service), your consent (marketing, optional analytics), our legitimate interests (security, abuse prevention, product improvement), and compliance with legal obligations.

Who we share data with

We do not sell your personal data. We share it only with:

• Service providers acting on our instructions — cloud hosting, authentication, crash reporting, analytics, and email delivery — each under a contract that limits them to our instructions.
• Other people in a session you joined, who see your display name, your profile picture, and the shared timer — not the contents of The Pile.
• Apple and Google, for sign-in, payment processing, and subscription management.
• Authorities or other parties, where we are legally required to, or where it is necessary to establish or defend legal claims or protect someone's safety.
• An acquirer, if we are involved in a merger, acquisition, or sale of assets — we will give you notice before your data becomes subject to a different policy.

International transfers

We operate internationally, so your data may be processed in countries other than your own, including the United States. Where we transfer personal data out of the UK we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses. For transfers out of the EEA we rely on those Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account data for as long as your account is active. Tasks and session history are kept until you delete them or delete your account.

When you delete your account we remove your personal data within 30 days, except where we must keep something longer to meet a legal obligation (for example, transaction records for tax purposes). Residual copies may persist in encrypted backups for up to 90 days before they age out.

Security

We encrypt data in transit with TLS and at rest, restrict internal access to those who need it, and review our practices regularly. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant regulator as the law requires.

Your rights

Wherever you live, you can access, export, correct, or delete your data from within the app, or by writing to us.

If you are in the UK or the EEA, you also have the right to object to or restrict processing, the right to data portability, and the right to withdraw consent at any time. You can lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or, in the EEA, with your local data protection authority — though we would appreciate the chance to put things right first.

If you are in California, you have the right to know what personal information we collect and how we use and disclose it, the right to delete and correct it, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise any of these rights, contact hello@heytris.com. We respond within 30 days and will not charge you for a reasonable request.

Children

Momo is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact hello@heytris.com and we will delete it.

Changes to this policy

We will update this page when our practices change, and revise the date at the top. If a change materially affects your rights, we will notify you in the app or by email before it takes effect.

Contact

Privacy questions and requests: hello@heytris.com