Privacy
Momentum stores what you enter so it can show your progress on any device you sign in to: your email address, display name, timezone, goals, check-ins, notes, rewards, reflections and reminder settings.
What we don't do
There are no ads, no analytics trackers, no social features and no third-party AI in this release. Your goals, notes and reflections aren't written to server logs. Faith-related goals and their history are never shown publicly or compared with anyone else.
Email is used to confirm your address, reset your password, and send reminders you turn on. By default, reminder emails use discreet wording (“Your scheduled goal is ready”) and don't mention the goal, your streak or your reward. You can choose detailed wording in Reminders. The email provider set up by whoever runs this server receives the message text and your address.
Your controls
In Settings you can download all of your data as a JSON file, and delete your account. Deleting your account permanently removes your profile and every goal, check-in, reward, reflection and reminder from the live database straight away. Database backups made by the server operator may keep a copy until those backups expire; ask the operator how long that is.
Security
Passwords are stored as salted scrypt hashes. Sign-in sessions use secure, HTTP-only cookies, and sign-in and password-reset requests are rate limited.