momoPrivacy Policy
Short version: Momo lives on your Mac, and most of what it knows stays there. Our servers only see what they need to deliver your download and connect you with friends.
Effective 26 October 2026
1. Who is responsible
The controller for personal data described here is [legal name of the business], [address], KvK [KvK number]. Contact: privacy@momocompanion.org.
2. On your Mac (we never receive this)
| What | When |
|---|---|
| Memory: facts, preferences, feedback and routines Momo learns | Stored in ~/Library/Application Support/Momo/brain.json. View and edit it in Studio → Brain, or say “forget everything”. |
| Microphone | Sound levels, so Momo can react to noise and music; speech only after you press the talk shortcut. Speech is transcribed on your Mac with whisper.cpp if you have installed it. Otherwise macOS speech recognition is used, which may use Apple's servers. |
| Camera | Only if you turn on gestures. Frames are analysed on your Mac and not stored. |
| Screen | Only when you ask (“look at my screen” or the eye button). Requires the Screen Recording permission. |
| Friend chats | Chat history is kept on each Mac. |
3. AI conversations
When you talk to Momo, your message (and a screenshot, if you asked Momo to look) is sent by the App, through the Claude Code or Codex tool on your Mac, to the AI provider you signed in to: Anthropic or OpenAI. We don't receive these conversations. The provider processes them under its own terms and privacy policy, under your own account.
4. What our servers process
Buying a key
Your payment is processed by [payment provider, e.g. Stripe], which receives your payment details, email address and billing country. We receive your email address, the order and its status, to deliver your key, issue invoices and handle support or refunds. Legal basis: performance of the contract; tax records are kept as required by Dutch law (7 years).
Redeeming and downloading
Our download service stores each key with when it was first used and how many times it was redeemed, and short-lived download links. Your IP address is used briefly, in memory, to rate-limit guessing (10 tries a minute) and is not stored. Reroll keys also store an anonymous random device identifier of the Mac they were used on. Legal basis: performance of the contract and our legitimate interest in preventing key abuse.
Friends and visits
Nearby Macs find each other directly over your local network. For friends over the internet, our relay stores your friend code, a hashed secret that proves the code is yours (the secret itself stays in your Mac's Keychain) and your list of friend codes. Messages, waves and visits are passed on live to mutual friends and are not stored on the relay. Legal basis: performance of the contract.
This website
This site sets no cookies, uses no analytics or trackers and loads its fonts from our own server. Our host processes standard request data (such as IP address and browser) to deliver pages and protect against attacks.
5. Who helps us
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting the website, download service and friends relay | Global network; EU–US Data Privacy Framework and Standard Contractual Clauses |
| [payment provider] | Payments and invoicing | [location / safeguards] |
| Resend (Plus Five Five, Inc.) | Sending keys and sign-in codes by email | EU (Ireland); [safeguards] |
| Google (Gmail) | Receiving and answering support email | [location / safeguards] |
We don't sell personal data and don't use it for advertising.
6. How long we keep it
- Order and invoice records: 7 years (Dutch tax law).
- Key records: as long as the key exists, so it can't be reused.
- Download links: expire after minutes.
- Friend codes and friend lists: until you remove a friend or ask us to delete your code.
- Support emails: up to 2 years after the conversation ends.
7. Your rights
Under the GDPR you can ask for access to, correction or deletion of your data, restriction of or objection to processing, and a copy of your data (portability). Email privacy@momocompanion.org; we answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority where you live.
8. Children
Momo is not directed at children under 16. Buying a key requires the consent of a parent or guardian if you are under 16. AI features are subject to the age rules of the AI provider you use.
9. Security
Connections to our services are encrypted (HTTPS/WSS), friend codes are protected by a secret kept in your Keychain, and the relay only connects people who have added each other.
10. Changes
We'll post updates here with a new effective date, and let you know when a change matters to you.