Privacy Policy
Effective 19 October 2026
- Your habits are stored on your own device. Nothing leaves it unless you turn on sync.
- If you turn on sync, your habit data is stored in your private cloud account so it can appear on your other devices.
- No ads, no selling of data, no tracking or analytics inside the apps.
- You can export or delete everything at any time.
Who we are
Momentum ("we", "us") is a habit tracking app made by Momentum, Egypt. The person responsible for your data is Ahmed Elkfrawy. You can reach us at info@ahmedelkfrawy.com.
This policy covers the Momentum website, the web app, the Windows and macOS apps, and the Android and iOS apps.
What we collect, and why
| Data | Where it's kept | Why |
|---|---|---|
| Your local account: username, display name, and a salted hash of your password (never the password itself) | Only on your device | To keep your habits private on a shared device |
| Habits, check-ins, schedules, mood, sleep hours, notes and settings | On your device. Also in your cloud account if you turn on sync | To run the app and, with sync, to show the same data on all your devices |
| Email address and password for a sync account (optional) | Our sync provider, Supabase (passwords are stored hashed) | To sign you in to sync on your devices |
| Reminder time | On your device | To send the daily reminder you asked for, as a local notification |
We do not collect your location, contacts, photos, advertising identifiers or device analytics. We don't use cookies for tracking. The website and web app use your browser's local storage only to remember your language and your app data on that device.
Cloud sync
Sync is optional and off until you create a sync account. When it's on, your habit data is sent over an encrypted connection (HTTPS) to a database run by our provider Supabase, Inc. Each account can only read and write its own data, enforced by the database itself. We access stored data only when you ask us to (for example for support) or when required by law.
Who we share data with
We never sell or rent your data, and we don't share it for advertising. We use these service providers:
- Supabase: stores sync accounts and synced habit data (only if you use sync).
- GitHub: hosts the desktop app downloads. GitHub may log your IP address when you download a file.
- Google Fonts: the website loads its fonts from Google, which may see your IP address.
- Apple and Google: deliver app downloads and updates through their stores, under their own privacy policies.
How long we keep data
Data on your device stays until you delete it or remove the app. Synced data stays until you delete your sync account. When you delete a sync account in the app, its data is removed from our database right away. Backups held by our provider are cleared within their normal retention period.
Your choices and rights
- Export: Settings → Backup & restore → Export my data gives you everything in one file.
- Correct: edit any habit, check-in or note directly in the app.
- Delete: Settings → Account → Delete account removes your data from the device. Turning off sync stops uploads, and you can ask us to delete your sync account at any time.
- Ask or complain: write to info@ahmedelkfrawy.com. We answer within 30 days.
We follow Egypt's Personal Data Protection Law (Law No. 151 of 2020). If you are in the European Union or the United Kingdom, you also have the rights described in the GDPR, including the right to complain to your local data protection authority.
Security
Passwords are never stored in plain text: local passwords are hashed on your device with PBKDF2-SHA256, and sync passwords are handled by Supabase. Synced data travels over HTTPS. No system is perfectly secure, so please use a strong, unique password and keep your device locked.
Children
Momentum is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created a sync account, contact us and we will delete it.
Changes to this policy
If we change this policy, we'll update the date above and, for important changes, tell you in the app before they take effect.