Privacy Policy
Last updated · 2026
Plain English first: Momentum is a personal-scale app for one or a small set of allowlisted people. It stores what you put in it, doesn't sell it, doesn't run ads, doesn't have trackers. Here are the specifics.
What we collect
- Your data — tasks, calendar events, journal entries, habits, notes, plan text. Whatever you type into the app.
- Your email — if you sign in with Google, we receive your email address and Google's verified email flag. That's the entire profile we keep about you. No name, no photo, no contacts.
- A session cookie — an HMAC-signed token that proves "this browser is logged in." HttpOnly, Secure, SameSite=Strict. Lasts 30 days.
- Cloudflare access logs — IP, timestamp, request path. These are Cloudflare's, not ours. They're aged out per Cloudflare's policy.
What we don't collect
- No analytics or tracking pixels.
- No third-party advertising. No ad networks.
- No location data (the app doesn't ask for it).
- No microphone or camera access.
- No selling, sharing, or licensing of your data to anyone, ever.
Where it lives
Your data is stored in Cloudflare KV, a key-value store hosted on Cloudflare's edge. Each row is signed with an HMAC integrity tag — if the data is tampered with at rest, the app refuses to load it and tells you. The app itself runs as Cloudflare Pages + a single Worker function.
AI processing
When you ask the "Coach" for anything, the app sends a context payload — usually today's tasks, recent journal entries, upcoming deadlines, and habits — to a self-hosted AI model the maintainer runs on a private server (via a Cloudflare Tunnel). That model generates text. The AI provider is not OpenAI, Anthropic, or Google — it's a local Ollama instance that doesn't keep prompts.
Honest about admin access. The maintainer has Cloudflare admin keys. That means — technically — they could open a KV namespace and read raw stored JSON. They don't, and there's nothing to gain from doing so on a one-user productivity app, but the API access exists. We say so directly here instead of pretending impossibility. If this matters to you, host your own instance — the code is the kind that fits in a couple of files.
Your rights
- Export — Settings → Export gives you a JSON file with everything.
- Delete — Settings → Delete account wipes your KV row. Or email the maintainer to confirm deletion.
- Correct — edit anything directly in the app at any time.
- Stop — close the tab. No further data flows.
Cookies
One cookie: the session token described above. No third-party cookies. No tracking cookies. No "we use cookies for analytics" banner because we don't use cookies for analytics.
Children
This app isn't designed for or marketed to children under 13. If a child has signed up, contact the maintainer and the account will be removed.
Changes
If we change this policy materially, you'll see a notice in-app at next login. Material changes only — not typo fixes.
Contact
Email the maintainer (the address on their site). For deletion requests, include the email you sign in with.
If you read all of this: you care about how your data is treated, and that's the right impulse. The short version is that this app is small, personal, and built without the data-extraction layer that most "free" apps have.