How Momentum OS handles your information

Momentum OS is operated by Ken Yap and this policy applies to the public website, the app, and related forms.

Our primary database is hosted in Sydney, Australia. If you choose Google sign-in or other third-party services, those providers may also process your information under their own policies.

We collect the information you choose to give us when you create an account, sign in, complete onboarding, build goals, habits, reflections, learning paths, simulations, circles, waitlist requests, founder access requests, or bug reports. That can include your email address, name or display name, username, timezone, identity statement, readiness stage, focus areas, goal and habit content, reflection content, learning progress, circle membership and commitment details, and the text you enter into request or support forms.

We also collect technical information such as IP address, browser and device details, and authentication or session data. If you sign in with Google, we may receive basic profile details from Google such as your name, email address, and profile photo when available.

We use information to create and manage accounts, authenticate you, store and sync your progress, personalize the dashboard, run planning and reflection features, manage circles and invites, review access requests and bug reports, provide support, protect the service, and improve the product.

We also use it to send important service messages such as password resets, account notices, or responses to requests you send us.

For users in the EEA and the UK, we generally rely on contract to provide the service, legitimate interests to run and secure the product, consent for optional communications or non-essential tracking if we ever add it, and legal obligation where required.

We do not sell your personal information. We share it with service providers that help us run Momentum OS, including Supabase for hosting, authentication, and database services, and Google when you choose Google sign-in.

Circle content is visible to the people you invite or join with, and public circle content may be visible to anyone who can access that circle. Authorized staff or admins may also access account, support, bug report, waitlist, and access request data to operate and secure the service. We may also disclose information when required by law or to protect rights and safety.

Your data is stored primarily in Sydney, Australia, but some data may be processed in the United States or other countries where our providers or their subprocessors operate.

Where required, we rely on lawful transfer safeguards recognised by applicable privacy law.

Momentum OS uses essential cookies for authentication, session management, and basic site functionality. We also use localStorage and sessionStorage to remember app preferences, page intro dismissals, and draft state.

We do not use these technologies for advertising cookies or third-party tracking at this stage.

We keep personal information while your account is active, while we need it to provide the service, or while we need it for security, dispute handling, legal, accounting, or audit purposes.

If you delete your account, we aim to remove account-linked data through our deletion flow, including linked waitlist and founder access request records, though limited records may remain in backups for a short period. We may keep some request or support records where needed for security, legal, or operational reasons, or where we cannot reliably link them to your account.

We use reasonable administrative, technical, and organizational safeguards to protect your information, but no system is perfectly secure.

Momentum OS uses rules and scoring to generate suggestions, summaries, and progress signals. These features help guide the product, but they do not make legal or similarly significant decisions about you.

Momentum OS is not intended for children under 16, and if you are under the age required to consent to online services where you live, you should use the service only with a parent or guardian's consent.

You can update many account details in the app, sign out at any time, and delete your account from settings.

Depending on where you live, you may also have the right to access, correct, delete, restrict, object to, or export certain information, and to withdraw consent where we rely on consent. Contact us if you want help exercising any of those rights.

If you have a privacy complaint, contact us first and we will investigate. If you are in Australia and not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC). If you are in the EEA or UK, you can contact your local data protection authority.

We may update this policy when the app or laws change. We will update the date at the top when we do.