Privacy Policy

Momentset is an AI-powered event photo platform. We help participants and attendees find their own photos from races, tournaments, graduations, corporate events, concerts and similar gatherings by matching faces and bib/ID numbers against event photo collections.

This Privacy Policy explains what personal data we collect, how we use it (including biometric processing for face matching), how long we keep it, and the rights you have over it. By using Momentset you agree to the practices described here.

• Account & contact: your email address (used to deliver download links and order receipts).
• Selfie images: photos you upload only for the purpose of face matching against a specific event's photo collection.
• Bib / ID numbers: numbers you enter to search photos that have been tagged with that identifier.
• Purchase history: events searched, photos purchased, amounts, and download tokens.
• Technical data: IP address, browser type, device information and timestamps required to operate the service securely.

When you upload a selfie to search for your photos, the image is processed by AWS Rekognition to extract a numeric face signature. That signature is compared against face signatures previously extracted from the photos in the specific event you are searching.

• Selfies are used only to generate a face match against the event you select. We do not use them for advertising, profiling, training models, or any other purpose.
• We do not store identifiable biometric templates of you beyond the active processing window for that event. Temporary signatures used to perform a search are discarded after the match results are returned.
• Face data is never compared across events, sold, or shared with third parties for their own purposes.
• You can request deletion of any selfie or face data we hold about you at any time by emailing hi@momentset.app.

Each photo in an event is processed once by the event photographer or organizer to extract face signatures and (where present) bib/ID numbers via AWS Rekognition and AWS Textract. When you search:

• Selfie search: your selfie's face signature is compared onlyagainst face signatures within the single event you chose.
• Bib search: your number is matched against numbers detected on photos in the chosen event.

Face data is never shared between events or with any third party other than the processors listed below, who act on our instructions.

• Selfie search images: automatically deleted within 30 days of upload.
• Purchased photo originals: available for download for 48 hours after purchase, then removed from active delivery. The event's archived collection is retained by the event organizer under our separate agreement with them.
• Order & billing records: retained as required by applicable tax, accounting and consumer-protection laws.
• Account & technical logs: retained only as long as necessary to operate, secure and improve the service.

We rely on a small number of trusted processors to operate Momentset:

• Amazon Web Services (AWS): Rekognition for face matching, Textract for bib/ID number detection.
• Cloudflare: hosting and object storage of photos and uploads.
• Stripe: payment processing. We never store full card numbers.
• Supabase: database, authentication and storage for account and event metadata.

These providers process data on our behalf under contractual safeguards and are not permitted to use your data for their own purposes.

If you are in the EU/EEA, UK, or another jurisdiction with similar laws, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten").
• Port your data to another service in a machine-readable format.
• Object to or restrict certain processing, including biometric processing.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, email hi@momentset.app. We respond within 30 days.

We use a small number of cookies and similar storage technologies to keep you signed in, remember your cookie preferences, and (with your consent) understand anonymous usage. See our Cookie Policy for full details.

For any privacy-related question or request, contact hi@momentset.app.