MOMENTUM

Privacy Policy

Momentum Health Technologies LLC · Effective October 7, 2026

This Privacy Policy explains how Momentum Health Technologies LLC (“Momentum,” “we,” “us”) handles information when you use the Momentum mobile app, our website, and related support services. It applies to Momentum on iOS and Android, including the app identified as com.momentumhealthtechnologies.momentum.

Questions or requests: contact@momentumhealthtechnologies.com. For help or deletion instructions, visit Support and account deletion.

1. Information we handle

  • Accounts and profiles. Account identifiers, email address when provided, display name, home time zone, account status, preferences, and account creation and session timestamps.
  • Authentication. Sign in with Apple and Google Sign-In provide provider identifiers and authentication tokens or verified identity information needed to sign you in. Depending on what the provider supplies, this includes your name and email address. Apple may provide a private relay email address if you choose Hide My Email. We maintain session and linked-identity records. Momentum does not receive your Apple or Google password. Email/password sign-in is not enabled for the production launch.
  • Health and activity information. With your permission, Momentum reads supported information from Apple Health through HealthKit or Android Health Connect. Launch competitive metrics are steps and distance. Depending on your app version, available features, device, and permissions, supported health information can also include active energy/calories, exercise or zone minutes, heart rate, sleep, and workout records. Workout information can include type, start/end times, duration, distance, pace, cadence, and available heart-rate or GPS-presence/distance metadata. These additional data types are not a statement that they are launch competition metrics.
  • Activity verification. We process activity samples and totals, timestamps, source app/device information, recording method and manual-entry indicators, sync state, and verification results. Activity evidence is sent to our backend for validation and storage; it does not remain solely on your phone. We derive progress, baselines, goals, streaks, points, and challenge results from relevant activity.
  • Challenges and community. Participation, invitations, memberships, standings, results, and related activity. Where community or chat features are available and you use them, we process the messages, reactions, reports, and other content you submit.
  • Device and security information. Platform, installation identifier, device model when available, app identifier, and device-integrity or attestation information, including verification outcomes and reasons. These help validate genuine devices, prevent misuse, and protect fair play.
  • Notifications. If you enable supported notifications, we process push tokens, platform and installation information, notification preferences, and token registration/revocation records.
  • Operations and support. Operational events, timestamps, account or device identifiers, sync and authentication errors, and diagnostic/error information generated when using the service. Our structured backend logger is designed to redact health payloads and certain sensitive fields. If you contact us, we receive your email address and the information you choose to include.

2. How we use information

We use relevant information to create and maintain accounts; authenticate users; sync and verify activity; calculate progress, goals, and challenge results; provide community features you choose to use; deliver enabled notifications; investigate errors, disputes, and suspected cheating; protect accounts and systems; respond to support and privacy requests; and meet applicable legal obligations. Automated validation may affect whether activity counts. Contact support if you believe a result is wrong.

The launch service offers no live real-money contests, cash prizes, or payouts. This policy does not describe payment processing as an active launch feature.

3. Health permissions and choices

You control access through Apple Health/HealthKit or Android Health Connect permissions. You can decline or revoke permissions in the relevant device settings. Features that require unavailable data may be limited, and activity may not count toward a challenge without sufficient verifiable information. Where supported and permitted, syncing may also occur in the background.

Revoking access stops future access through that permission; it does not itself delete information already sent to Momentum. To request deletion of that information, follow the instructions below. Deleting Momentum data does not delete the original records held by Apple Health, Health Connect, or other source apps.

4. Sharing and service providers

Information needed to operate Momentum is processed by service providers for hosting, databases, activity-evidence storage, authentication, security, notification delivery, and support communications. Apple and Google process information involved in their sign-in, health-platform, and device-security services under their own terms and privacy policies. Supported push delivery uses Expo and the Apple Push Notification service or Google Firebase Cloud Messaging, depending on platform and configuration. Where configured, a compatible managed authentication service, including Firebase/Google services, may also process sign-in information.

When you participate in a challenge or community, other users with access to it may see your display name, participation, progress, standings, results, and content you share. Consider the audience before joining or posting. Do not post private health details you do not want others to see.

We may disclose information when required by applicable law or a valid legal process, or when necessary to investigate abuse and protect legal rights, safety, and the security of the service. Health-platform permissions do not authorize unrelated uses of health data. This policy does not authorize the sale of HealthKit or Health Connect data or its use for advertising, marketing, or data-broker purposes.

5. Security

We use safeguards designed to protect information, including authenticated access, token verification, session revocation, hashed refresh-token storage, device checks, and redaction in structured backend logging. No service or transmission is completely secure. Keep your device and sign-in provider account secure, and report suspected unauthorized use to us.

6. Retention

Retention depends on the type of information and why it is needed, including providing account and challenge history, resolving support or fair-play issues, protecting security, and complying with applicable law. There is no single fixed retention period for all categories. Some records may need to be retained after an account closes for applicable legal, security, or dispute-resolution reasons. Contact us for information about your records and any applicable retention exception.

7. Account and data deletion

You can initiate account deletion in the app through Profile → Delete account, where available, or email contact@momentumhealthtechnologies.com with the subject “Momentum account and data deletion.” You can also request deletion of specific data without requesting closure of your whole account.

Provide the email address associated with your account (including your Apple relay address if applicable) or an account identifier, and describe your request. We may ask for information reasonably needed to verify account ownership. Do not send passwords, sign-in codes, or unnecessary health records.

The in-app request records your deletion request, suspends the account, revokes active sessions, and revokes registered push tokens. This initial step is not immediate permanent erasure of every record. Contact support to request or confirm completion of data erasure and to learn whether any records must be retained. We will handle verified requests in accordance with applicable law and explain relevant exceptions. Uninstalling the app alone does not submit a deletion request.

8. Privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information; restrict or object to certain processing; withdraw consent; and complain to a relevant data-protection authority. These rights can be subject to legal limits and identity verification. Send requests to our contact email. Withdrawing health permissions does not affect processing already undertaken on a lawful basis.

Where a legal basis is required, we process information as needed to provide the service you request, with consent for permission-based health access where required, to meet legal obligations, or for legitimate interests such as security and service reliability, subject to applicable law and your rights.

9. Children and minors

Momentum is not directed to children under 13 or children below the minimum age for independent consent where a higher age applies. If you are a parent or guardian and believe a child has provided information without required consent, contact us to request review and deletion. Users who are minors must have any parent or guardian permission required by applicable law for using the service.

10. International users

Service providers may process information in countries other than where you live, and local privacy laws may differ. Where applicable law requires safeguards for an international transfer, those requirements apply. Contact us for information about the handling of your data; this policy does not make a promise that all data stays in one country.

11. Updates and contact

We may update this policy as the service or legal requirements change. The effective date above identifies this version. We will provide additional notice or obtain consent where required by law.

Momentum Health Technologies LLC
Email: contact@momentumhealthtechnologies.com
Support