Moment Privacy Policy

Effective Date: August 26, 2026
Last Updated: August 26, 2026

Moment is a personal asset-management application provided by independent developer YAO XU.

This Privacy Policy applies to the Moment applications distributed through the Apple App Store for iOS and macOS, and to the online services required to provide market data, exchange rates, asset catalogs, and purchase-entitlement verification.

For privacy questions, contact [email protected].

1. Information stored on your device

Moment is designed as a local-first application. The following information is stored on your device:

• account and asset records;
• stocks, funds, bonds, cryptocurrencies, cash, and other assets;
• quantities, cost basis, and transaction history;
• income, expenses, dividends, interest, and cash-flow records;
• locally calculated portfolio value, returns, and allocation;
• contents of files you choose to import;
• cached market prices, exchange rates, and asset catalogs;
• language, currency, appearance, and other app settings.

Moment does not upload your complete portfolio to its servers. When you use market-data or exchange-rate services, we do not receive your portfolio quantities, cost basis, transaction history, account balances, total portfolio value, investment returns, or imported-file contents.

This information remains on your device until you delete it or uninstall the app. Copies contained in system backups are handled according to Apple’s backup policies. Because this information is stored on your device, we generally cannot access or recover it on your behalf.

2. Information required by online services

2.1 Device and service-access information

To provide market data, exchange rates, asset catalogs, usage limits, and purchase entitlements, Moment may process:

• a randomly generated device identifier;
• the device name configured by the user;
• app and operating-system versions;
• free or paid entitlement status;
• device activation and service-access status;
• IP address;
• request time, requested endpoint, and response status;
• tokens required to authenticate service access.

Where practical, device identifiers are stored in hashed or otherwise pseudonymous form.

This information is used only to authenticate service access, provide free or paid functionality, manage devices and usage limits, maintain compatibility, prevent fraud and abuse, protect the service, and diagnose failures affecting market-data services. Moment does not use this information for advertising, user profiling, or cross-app tracking.

2.2 Market-data, exchange-rate, and catalog requests

When you request market prices, historical prices, exchange rates, or asset catalogs, Moment servers may process:

• an asset symbol or internal asset identifier;
• asset type;
• market or exchange;
• requested date range;
• data interval, such as minute, hourly, or daily;
• base and quote currencies;
• request time and response status.

To return the requested information, we may send the asset symbol, market, date range, and interval to third-party market-data or exchange-rate providers. These providers do not receive your portfolio quantities, cost basis, transaction history, account names, or total portfolio value from Moment.

3. App Store purchases

Purchases made through the App Store are processed by Apple. Moment does not receive or store your complete payment-card information.

To verify and restore purchases, Moment may process product identifiers, transaction identifiers, purchase status, and entitlement status. Apple processes Apple ID, payment, and billing information under its own Privacy Policy.

4. Support communications

If you contact us by email, we may process your email address, the contents of your message, screenshots, logs or attachments you voluntarily provide, and device, operating-system, or app-version information provided to resolve the issue.

We use this information only to respond, diagnose the issue, and provide support. Please do not send passwords, complete payment-card information, or sensitive portfolio information that is not necessary to resolve the issue.

5. Information we do not collect or use

Moment does not collect product-feature clicks, page views, chart interactions, or other behavioral analytics events.

Moment does not upload your complete portfolio, sell or rent personal information, use advertising SDKs, use personal information for targeted advertising, track users across other apps or websites, use your portfolio for credit scoring, insurance pricing, or automated trading, or send your portfolio to generative AI services.

If our data practices change, we will update this Policy before enabling the relevant feature and obtain consent where required.

6. Third-party services

Moment uses third-party services only where necessary to provide app functionality, including cloud-computing, network and security services; market-data, exchange-rate and asset-catalog services; and App Store purchasing and system services provided by Apple.

Our cloud infrastructure is currently provided by Cloudflare. Cloudflare may process IP addresses, network requests, and technical information necessary to provide the service. See the Cloudflare Privacy Policy.

We provide third parties only with the minimum information required to perform the relevant function. We require them to provide protections equivalent to those described in this Policy through applicable law, contractual terms, or their public commitments.

We do not disclose user information to other third parties except with your explicit consent, where required by law, in response to a valid legal request, to protect users or legal rights, or to investigate fraud, abuse, or security incidents.

7. Retention and deletion

• Local portfolio information remains until you delete it or uninstall the app.
• Service-access tokens are retained while necessary to provide the service or maintain access.
• Device and entitlement records are retained while necessary to provide the service, manage devices, and verify entitlements.
• Request and security logs are retained for the shortest period reasonably necessary to secure the service, diagnose failures, and investigate abuse.
• Purchase-verification records are retained while necessary to verify entitlements and comply with applicable law.
• Support messages are retained while necessary to resolve the issue and provide reasonable follow-up support.

When information is no longer needed, it is deleted, de-identified, or aggregated.

You may request access to or deletion of information stored on Moment servers by emailing [email protected]. Following a valid request, we normally delete or de-identify relevant information within 30 days, except for information required by law, security and fraud-prevention records, dispute records, or purchase and payment records independently managed by Apple.

We may request device, purchase, or transaction information to verify the request. Deleting device or entitlement records may prevent the device from accessing online services, but does not automatically delete portfolio information stored locally.

8. Your rights

Depending on applicable law, you may have the right to learn what personal information we process; request access, correction, or deletion; restrict or object to certain processing; request a portable copy of applicable information; and lodge a complaint with a local data-protection authority.

You may delete local portfolio records in the app, uninstall the app, deactivate an authorized device, or submit a privacy request to [email protected].

For portfolio information stored only on your device, you can manage it directly through the app or device. Because we cannot access this information, we generally cannot retrieve, modify, or recover it for you.

9. Security

We use reasonable safeguards, including HTTPS/TLS encryption in transit, hashing or pseudonymization of device identifiers, Apple Keychain storage for sensitive tokens, app sandboxing and local data containers, restricted service and database access, access tokens, rate limits, and abuse detection.

No Internet transmission or electronic storage system can be guaranteed to be completely secure. You should also protect your device passcode, Apple ID, and device backups.

10. Children

Moment is a general personal asset-management tool and is not directed to children. We do not knowingly collect personal information from children below the minimum digital-consent age applicable in their country or region. If you believe a child has provided personal information, contact us so we can take reasonable steps to delete it.

11. International processing

Cloud and market-data providers may process information outside your country or region. We use reasonable safeguards required by applicable law and limit transfers to information necessary to provide the relevant service.

12. Changes to this Policy

We may update this Policy if Moment’s data practices materially change. Where required, we will notify you through the app or another reasonable method and obtain consent before beginning new processing.

13. Contact

Data Controller: YAO XU

Product: Moment

Email: [email protected]

Website: https://portfoliomoment.com/