Privacy Policy

Last updated: August 26, 2026

1. Introduction

Momentus ("we," "us," or "our") operates the Momentus mobile application and the website momentusnotes.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

  • Account registration data (name, email address)
  • Professional role and usage information provided during beta sign-up
  • Audio recordings and transcripts you create using the Service
  • Notes, action items, and other content generated from your recordings

Information Collected Automatically

  • Device identifiers and operating system information
  • App usage analytics and crash logs
  • IP address and general location data

3. How We Use Your Information

  • To provide, operate, and improve the Service
  • To transcribe and summarize your audio recordings using AI
  • To communicate with you about updates, support, and beta program information
  • To comply with legal obligations
  • To detect and prevent fraud or abuse

4. Audio Data & Processing

Momentus is designed with privacy in mind. When you record a conversation, the audio is staged securely and then sent to third-party AI providers for transcription and summarization. We attempt to delete the staged audio after transcription is complete, though cleanup failures can occasionally leave a file behind. You control your notes and can delete them at any time within the app.

When iCloud Sync is enabled, your recordings (including audio) may sync through your private iCloud account, along with your transcripts, summaries, speaker information, markers, and related metadata. Disabling cloud AI processing stops new data from being submitted, but it cannot retroactively erase data that has already been processed under a provider's retention rules. Deleting a recording in Momentus triggers the deletion behavior described below for that recording's data.

5. Sharing of Information

We do not sell your personal information. To provide transcription, summarization, and related features, your data is shared with the following third-party providers. Each provider is bound by its own privacy and data-handling terms.

Supabase

Used for authentication and as temporary staging for audio before transcription.

Data sent: Anonymous user/account ID, authentication tokens, daily AI usage count, temporarily staged audio, and the content of transcription and summarization requests passing through our service.

Retention: Audio is stored in a private, user-scoped bucket and we attempt to delete it after transcription. The access link expires after 24 hours. Cleanup failures can occasionally leave a file behind. Usage records and anonymous accounts do not currently have an app-defined deletion schedule.

AssemblyAI

Used for audio transcription (Best Quality).

Data sent: Audio, the staging URL, recording-related identifiers embedded in that URL, language and formatting configuration, and transcription/LeMUR requests.

Retention: Momentus deletes its own staging copy after transcription. When you delete the corresponding recording in Momentus, we request deletion of the AssemblyAI transcript job as well, with automatic retries for temporary failures. Under AssemblyAI's standard retention, uploaded audio generally enters deletion within 24 to 48 hours. Note that AssemblyAI's current standard terms may permit submitted data to be used for service or model improvement, subject to your account configuration and any available opt-out. See AssemblyAI's terms and training explanation for details.

Anthropic / Claude

Used for summarization, action items, and chat features.

Data sent: Full transcript text, meeting date and duration, speaker labels or confirmed names, marked-moment context, chat questions and history, any search queries Claude generates, and the recording title.

Retention: Standard Anthropic API inputs and outputs are normally retained for 30 days, subject to Anthropic's documented exceptions. Anthropic does not use commercial API data for training by default. Ask Momentus may use Anthropic's server-side web search. Anthropic processes the search queries and results as part of the Claude API request.

Apple iCloud / CloudKit

Used for syncing your data across your devices when iCloud Sync is enabled.

Data sent: Titles, dates, transcript, summary, speaker information, markers, processing state, related metadata, and recordings (including audio).

Retention: Stored in your private CloudKit database and managed under your Apple account settings.

We may also share information with:

  • Legal authorities when required by law, court order, or to protect our rights
  • Business successors in the event of a merger, acquisition, or sale of assets

6. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
  • Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of sensitive personal information to that which is necessary to perform the Service.

To exercise any of these rights, please contact us at support@momentusnotes.com. We will respond to verifiable requests within 45 days as required by law.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time by contacting us at support@momentusnotes.com.

8. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest. Momentus requires service providers that receive personal data to protect it to the same or an equivalent standard described in this policy and required by applicable law. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact us at:
support@momentusnotes.com
momentusnotes.com