Consumer Health Data Privacy Policy

This policy is for you if you live in Washington or Nevada, or if your information is collected in Washington. It explains how OTM App LLC (DBA "Own the Moment"), 1934 Old Gallows Rd, Ste 350, Vienna, Virginia 22182-4050, USA, collects, uses and shares information in the Moment app that the Washington My Health My Data Act (chapter 19.373 RCW) and Nevada’s consumer health data law (NRS 603A.400 to 603A.550) call “consumer health data”. It is a separate document from our Privacy Policy, which covers everything else and applies to everyone. Questions: privacyownthemoment.app.

Moment is an adults-only (18+) self-help app for habits and attention. It is not a medical or mental health service, and it does not diagnose, treat or monitor any medical or mental health condition.

What we collect

The information below is what you log or write in Moment. We treat all of it as consumer health data for you:

• Your onboarding answers: for example your goals, how often urges happen, situations that tend to be difficult, the times, places and devices you link with urges, and which approaches you have tried before.
• Daily check-ins: for example stress, urge level, tiredness and mood, and any notes you add.
• Urge logs: urge level before and after, trigger, mood, setting, outcome, and any notes you write.
• Setbacks: the details you record when you have a setback, and the steps you take afterwards.
• Safety answers: including whether you indicate a risk of harm to yourself or others.
• Things you write: your “my reasons” list, journal and notes.
• What the app works out from these: your plan and the patterns the app shows you.

Where it comes from

From you, when you enter it in the app, and from the app itself, which works out your plan and patterns from what you enter. We do not buy or receive consumer health data about you from anyone else.

Why we collect it and how we use it

• To provide Moment to you: your plan, urge support, check-ins, the patterns you see, and the steps after a setback.
• To show you crisis resources when you indicate a risk of harm.
• To keep the service secure and to enforce the 18+ requirement.
• Once it has been de-identified and combined with other people’s, for research, as described under Aggregated, de-identified data in our Privacy Policy. De-identified data cannot reasonably be linked to you.

We collect it only after you agree on the “Before we begin” page in the app. We never use it for advertising or marketing, and we never sell it. If you live in Washington or Nevada, we also do not use any of your information for advertising, your app usage stays on our own systems for product analytics, and AppsFlyer, Amplitude and Customer.io are not used for you.

Who receives it

Companies that run parts of Moment for us, under contract, and only to provide Moment to you:

• Supabase stores your account and app data.
• Vercel runs the app’s servers.
• Anthropic, our AI provider, receives the community posts you write so it can check them before they are shared. Nothing else you write in the app is sent to it.
• Intercom, our support chat, and Google Workspace, which carries our support email, receive whatever you choose to write to support. Please do not include health details in support messages.

Our affiliate:

• Hofund Labs LLC, a company under common control with us, is building the engine behind Moment’s personal support features. It receives your check-in answers, details of setbacks you record, and your consent choices, linked to your account id but not to your name or email. It may use them only to provide those features for Moment, and it is not using them yet.

We do not share your consumer health data with any other third party, except where the law requires it or to protect someone’s safety. We do not allow any third party to collect consumer health data about you over time and across other websites or online services when you use Moment.

Your rights

• Confirm and access: ask whether we collect, share or sell your consumer health data (we do not sell it), get a copy of it, and get a list of every third party and affiliate we have shared it with, with a way to contact each one.
• Correct: ask us to correct it.
• Withdraw consent: in the app (Profile, then Privacy & data, then Review consent decisions, the “Allow Moment to process what I log” switch) or by emailing privacyownthemoment.app. Moment cannot work without this consent, so withdrawing it asks you to choose: delete what you have logged and keep your account, or delete your account. We handle emailed requests by hand, so they take effect when we process them.
• Delete: in the app (Profile, then Privacy & data, then Delete my account, or “Delete my data” after turning off the “Allow Moment to process what I log” switch), at ownthemoment.app/delete-account, or by emailing privacyownthemoment.app. We delete your consumer health data and tell every company and affiliate that received it to delete it too. We do not keep a record of your consents and agreements after your account is deleted. The few records we keep are listed under “Storage, security, and retention” in our Privacy Policy.

How to make a request

Email privacyownthemoment.app (or supportownthemoment.app), or use the app where it offers the option. We confirm a request comes from you before we act on it, and we do not ask for more information than we need for that. You can ask someone else to make a request for you. Deletion in the app is immediate, and we complete verified deletion requests made by email within 30 days. We answer other requests within 45 days, and if we need more time we may extend that once by up to 45 more days and tell you why. Requests are free, and we will not treat you differently for making one.

Appeals

If we decline your request, we will tell you why and how to appeal. Reply to our decision, or email privacyownthemoment.app with “Appeal” in the subject line. We answer in writing within 45 days. If we deny your appeal, you can contact your state attorney general. Washington residents can file a complaint at www.atg.wa.gov/file-complaint.

Changes to this policy

We post changes on this page and update the dates above. We will not collect a new kind of consumer health data, or use it for a new purpose, without first telling you here and asking for your consent. We surface material changes in the app.

Other documents for particular states are on State Specific Documents.