Momo Privacy Policy
Jan 20, 2026
Effective Date: January 20, 2026
Momo (“Momo,” “we,” “us,” or “our”) provides a private, AI-assisted workspace designed to help you organize, search, and reason over your personal and professional information — without surrendering control of your data.
This Privacy Policy explains how Momo collects, uses, and protects information when you use our website, browser application, and related services (collectively, the “Services”).
Our Privacy Philosophy
Momo is built on a single principle:
If we can’t read your data, we can’t misuse it.
Unlike most AI products, Momo is designed so that your data is encrypted with keys only you control. Even with full database access, we cannot decrypt your content README.
Our core commitments:
You own your data — always
Zero-knowledge storage — we do not have access to encryption keys
No selling of data
No AI training on your content
Privacy enforced by cryptography, not policy promises
Information We Collect
We collect only the information necessary to operate Momo. It is important to distinguish between data you own (which we cannot read) and limited metadata we must process to provide the service.
1. User-Encrypted Content (Zero-Knowledge)
You may connect or upload information such as:
Emails (e.g., Gmail)
Documents or notes
Tasks, decisions, or contextual records
Structured personal or work data
All content is encrypted on your device before it reaches our servers using AES-256-GCM encryption. We store only ciphertext, which is cryptographically meaningless without your key README.
We cannot read, search, or recover this data without your recovery phrase.
2. Encryption Keys & Recovery Phrase
Your encryption key is derived from a 24-word recovery phrase that only you control.
This phrase never touches our servers.
Encryption keys exist only in your browser’s memory.
If you lose your recovery phrase and have no backup, your data is permanently inaccessible — including to us README.
3. Metadata (Limited & Non-Content)
Some non-content metadata remains unencrypted to support functionality:
Dates
Source types
Categories or labels
This metadata does not include message content, document text, or semantic meaning
4. Account Information
We collect minimal account data:
Email address
Authentication credentials
Subscription status and billing information (handled by third-party processors)
We do not store full payment details ourselves.
How We Use Your Data
We use your information only to operate Momo:
Encrypting, storing, and syncing your data
Allowing you to query and retrieve your own information
Providing AI-assisted reasoning within your encrypted context
Maintaining account security and service reliability
Your data is never used for advertising, profiling, or training AI models.
AI Processing & Zero Data Retention
To provide AI features, Momo integrates with third-party Large Language Model (LLM) providers (e.g., Anthropic).
Our guarantees:
Zero Data Retention (ZDR): Data sent to LLM providers is not stored or logged
No Training: Your data is never used to train or fine-tune models
Ephemeral Processing: Plaintext exists only momentarily during active requests and is immediately discarded README
Momo servers relay encrypted data and cannot decrypt or inspect requests.
How We Share Information
We do not sell your data.
We may share limited information only when necessary:
Infrastructure providers (encrypted data only)
Payment processors (billing data only)
AI providers under ZDR contracts
Legal obligations, where required by law — in which case we can only provide encrypted ciphertext README
Data Retention & Deletion
Encrypted content: Retained until you delete it or close your account
Raw inputs: Not stored
Account deletion: Deletes all associated encrypted data
Because we do not hold your keys, deleting encrypted data renders it immediately and irreversibly unreadable.
Security Guarantees
Momo is designed to protect against:
Database breaches
Insider access
Server compromise
Legal coercion to reveal plaintext
Attackers or third parties can obtain only encrypted ciphertext without keys README.
Known Limitations
Strong privacy has trade-offs:
Compromised devices may expose decrypted data
Lost recovery phrases cannot be recovered
LLM provider contract violations are legally constrained but technically possible
We are transparent about these limits by design.
Your Rights
You can:
Access and export your data
Correct inaccuracies
Revoke integrations
Delete your account
Control consent and AI usage
Children’s Privacy
Momo is intended for users 18 years and older. We do not knowingly collect data from minors.
International Users
Momo operates globally. Data may be processed in jurisdictions where our infrastructure providers operate, always in encrypted form.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated clearly.
Contact Us
If you have questions about this Privacy Policy or Momo’s security architecture:
Email: cailyn@usemomo.com
Company: TENXAICLUB INC.