Privacy Statement
Last updated: January 29, 2026
We care about your privacy. This Privacy Statement explains how Momentum (“we”, “us”) handles your data when you use our website and app to gather personal events (e.g., calendar, Strava, Garmin, Foursquare) and generate summaries, journal entries, and AI-based insights.
1. Who We Are
Thriving Things & Slimndap Address TBD privacy@thrivingthings.com
We act as the data controller under the GDPR.
2. What Data We Collect
2.1 Account Data
- Name and email provided through Google OAuth.
2.2 Data from Connected Services (optional)
When you choose to connect integrations, we access event and activity data such as:
- Calendar events
- Fitness or activity data (Strava, Garmin)
- Location check-ins (Foursquare)
We only access the data you authorize.
2.3 Data You Add
- Notes, journal entries, and personalization settings.
- Your data retention preferences.
2.4 Technical Data
- Basic device and log information (IP address, browser type) for security and performance.
3. How We Use Your Data
We process your data to:
- Retrieve, organize, and display your events.
- Create summaries and insights using an external Large Language Model (LLM) provider.
- Maintain security and performance.
- (Future) Support subscription payments and billing.
We do not use your data for advertising.
Legal basis:
- Article 6(1)(b) GDPR — providing the service
- Article 6(1)(f) GDPR — security and service reliability
4. Data Sharing
We only share data with:
4.1 Infrastructure Provider
- Hetzner (EU-based) — secure data storage and hosting.
4.2 External LLM Provider
Minimal necessary data is sent to generate insights. We do not allow training on your data.
We never sell data or share it for marketing purposes.
5. Storage & Retention
- All data is stored within the EU.
- You can choose how long we keep your data.
- When your account is deleted, all personal data is permanently removed (typically within 30 days).
6. Your GDPR Rights
You have the right to:
- Access your data
- Correct your data
- Delete your data
- Restrict processing
- Receive a copy (data portability)
- Object to processing
To exercise these rights, email privacy@thrivingthings.com. You may also contact your local Data Protection Authority.
7. Children
Our service is not intended for children under 16. If we discover data from minors, it will be deleted.
8. Changes
We may update this Privacy Statement. Important changes will be communicated in-app or via email.
Cookie Policy
1. Necessary Cookies
We use essential cookies required for the website to function, such as:
- Session cookies
- Authentication cookies (Google OAuth)
These do not require consent.
2. No Tracking or Advertising Cookies
We do not use:
- Advertising cookies
- Third-party trackers
- Analytics tools like Google Analytics
- Profiling or behavioral cookies
3. Managing Cookies
You can block or delete cookies in your browser settings. Some features (like remaining logged in) may not work if cookies are disabled.
Contact
If you have questions about privacy or data protection, contact: privacy@thrivingthings.com