Privacy Policy

Momeza helps people capture and relive the moments of real-world events. This policy explains what we collect, why we collect it, and the control you keep over it. Photos, notes and messages belong to the person who added them.

It applies to the Momeza website and apps. A host decides who is invited to their event and what happens inside it; this policy covers how Momeza, as the platform, handles data on everyone’s behalf.

Taking part in an event means holding a Momeza account — hosting it, joining it, uploading a photo, answering an RSVP or leaving a note. Anyone can read a public event page without one, but the moment they contribute they are a named person.

That is a privacy decision, not a growth one. An account is what lets someone find what they added months later, take it with them, or erase it — none of which is possible for an anonymous contribution nobody can prove is theirs.

Signing in today uses an email address and a password. There is no Google or Apple sign-in, so no data is exchanged with either. You must be at least 16 to hold an account.

We collect only what an event needs to work:

• Account details you give us — your name, your email address and a hashed password. We never store the password itself.
• Content you contribute — photos, videos, notes, letters, song requests, quiz answers, competition entries and votes.
• Event membership — which events you host or joined, your RSVP, and whether a host approved you.
• Technical data needed to serve and secure a request, such as your IP address and browser, handled by our hosting provider.
• Diagnostic reports when something breaks — the error, the point in our code it came from, and the address of the page you were on, which can include an event id. No IP address, cookie or account detail is attached.

We run no analytics and no advertising trackers — see the Cookie Policy. We do not buy personal data about you from anyone.

Your data powers the event you joined — nothing more. We use it to run the gallery and the modules, deliver invitations and reminders, keep your account secure, take payment for a paid plan, and reply when you get in touch.

We never sell personal information, and we never use your photos or videos to train models or to target advertising. If we ever propose a genuinely new use, we will ask first.

The legal grounds we rely on — contract, legitimate interest and consent — are set out on Your privacy rights.

Content is visible only within its event, to the people the host invited. Sharing outside an event is off by default and always an explicit choice.

Beyond that, a small number of providers process data on our instructions and on our written terms. They are:

Where a provider is outside the EEA, the transfer runs on Standard Contractual Clauses. We may also disclose data where the law requires it, and will tell you unless we are forbidden to.

On the free plan every photo and video is deleted 24 hours after the event starts — permanently, and the file with it. On a paid plan the gallery stays open for the period stated on the pricing page, and for as long after that as the host keeps it alive.

When that window closes the gallery locks rather than being erased: nobody can open it, and it comes back the moment the host pays to keep it alive. Two months later, if nobody has, the photos and videos are deleted permanently — files included. The event page survives without them, the way a free event’s does.

Three other things erase content, and they are immediate. Deleting a single photo or note removes it and its file. Deleting an event erases the event and everything inside it, for every guest as well as the host. Deleting your account does the same for everything of yours everywhere, including what you added to other people’s events. None of the three can be undone.

Deleting your account removes your content straight away, whatever plan it was on. Copies may survive briefly in our providers’ automated database backups before those are overwritten on their own schedule; nothing is restored from them except to recover from a failure. Records we are required to keep, such as billing history, are kept for as long as the law says and then deleted.

You can export or delete your data yourself, at any time, from Settings → Data. Deleting your account removes it, the events you host and everything inside them, and the photos and videos you added to other people’s events — the files themselves included, not just the records of them. It happens immediately and cannot be undone.

Wherever you live, you can also ask us to access, correct, or remove your information. EU, EEA, and UK residents have additional statutory rights, described on our Your privacy rights page.

Momeza is not intended for children. You must be at least 16 years old to create an account, and we do not knowingly collect data from anyone younger.

If a younger child appears in a photo at an event, the people at that event decide what is shared — a host can remove any content from their event, and you can tell us if something needs taking down.

Questions about your privacy are always welcome. Reach us through the contact page and we will respond within 30 days.

This policy works alongside our Terms of Service and Cookie Policy. If we change it materially we will say so here and, where it affects you, in the app.