MomentBackup

Privacy policy

Working draft — the final text ships with 1.0.

The short version

MomentBackup is software you run on your own computer. It has no accounts, sends no telemetry, and backs up only to storage you own or rent directly. We never receive, hold, or can read your files.

What we don't collect

  • No accounts. The app works without signing up for anything.
  • No telemetry or analytics. The app does not phone home with usage data, and this website runs no analytics scripts.
  • No file contents, ever. Backups go from your machine to your chosen destination. There is no MomentBackup server in that path.

What stays on your machine

  • Settings, schedules, and the local backup index.
  • Encryption keys. They are generated locally and never transmitted. If you lose your passphrase and recovery key, your backups cannot be decrypted — by anyone.
  • Crash logs. Written locally only; nothing is uploaded automatically.

What reaches us, and when

  • Update checks. The app fetches release metadata to keep itself current. This is an ordinary HTTPS download and carries no personal data.
  • Support email. If you write to us, we receive what you send. The optional diagnostics export is built to exclude file contents, passphrases, and credentials, and you can read it before sending.
  • License purchase. Payment is handled by the payment provider; we receive what is needed to issue your license (such as your email address) and nothing about your backups.

Your storage providers

If you back up to your own cloud bucket or NAS, your relationship with that provider is governed by their terms — your data there is encrypted by MomentBackup before it leaves your machine when encryption is enabled.

Google account access

Connecting Google is entirely optional and happens only when you choose it. MomentBackup runs on your computer; your Google data is never sent to or stored by us.

  • Google Drive (backup destination). If you pick Google Drive as a destination, MomentBackup requests the drive.file permission and uses it solely to create and manage its own backup folder. It cannot see, read, or modify any other file in your Drive.
  • Gmail (notifications). If you turn on email notifications and connect Gmail, MomentBackup requests the gmail.send permission and uses it solely to send backup-status emails from your own address. It never reads, deletes, or otherwise accesses your mail.
  • Tokens stay on your machine. The sign-in token is stored in your operating system's secure keychain and is used only to talk to Google directly from your computer. You can disconnect at any time, which removes the stored token.

MomentBackup's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for advertising, and no human reads it.

Changes

If this policy changes in a way that matters, the app's release notes and this page will say so plainly.

Contact

Questions about privacy: [email protected].