Momo Privacy Policy

Jan 20, 2026

Effective Date: January 20, 2026

Momo (“Momo,” “we,” “us,” or “our”) provides a private, AI-assisted workspace designed to help you organize, search, and reason over your personal and professional information — without surrendering control of your data.

This Privacy Policy explains how Momo collects, uses, and protects information when you use our website, browser application, and related services (collectively, the “Services”).

Our Privacy Philosophy

Momo is built on a single principle:

If we can’t read your data, we can’t misuse it.

Unlike most AI products, Momo is designed so that your data is encrypted with keys only you control. Even with full database access, we cannot decrypt your content README.

Our core commitments:

  • You own your data — always

  • Zero-knowledge storage — we do not have access to encryption keys

  • No selling of data

  • No AI training on your content

  • Privacy enforced by cryptography, not policy promises

Information We Collect

We collect only the information necessary to operate Momo. It is important to distinguish between data you own (which we cannot read) and limited metadata we must process to provide the service.

1. User-Encrypted Content (Zero-Knowledge)

You may connect or upload information such as:

  • Emails (e.g., Gmail)

  • Documents or notes

  • Tasks, decisions, or contextual records

  • Structured personal or work data

All content is encrypted on your device before it reaches our servers using AES-256-GCM encryption. We store only ciphertext, which is cryptographically meaningless without your key README.

We cannot read, search, or recover this data without your recovery phrase.

2. Encryption Keys & Recovery Phrase

  • Your encryption key is derived from a 24-word recovery phrase that only you control.

  • This phrase never touches our servers.

  • Encryption keys exist only in your browser’s memory.

If you lose your recovery phrase and have no backup, your data is permanently inaccessible — including to us README.

3. Metadata (Limited & Non-Content)

Some non-content metadata remains unencrypted to support functionality:

  • Dates

  • Source types

  • Categories or labels

This metadata does not include message content, document text, or semantic meaning

4. Account Information

We collect minimal account data:

  • Email address

  • Authentication credentials

  • Subscription status and billing information (handled by third-party processors)

We do not store full payment details ourselves.

How We Use Your Data

We use your information only to operate Momo:

  • Encrypting, storing, and syncing your data

  • Allowing you to query and retrieve your own information

  • Providing AI-assisted reasoning within your encrypted context

  • Maintaining account security and service reliability

Your data is never used for advertising, profiling, or training AI models.

AI Processing & Zero Data Retention

To provide AI features, Momo integrates with third-party Large Language Model (LLM) providers (e.g., Anthropic).

Our guarantees:

  • Zero Data Retention (ZDR): Data sent to LLM providers is not stored or logged

  • No Training: Your data is never used to train or fine-tune models

  • Ephemeral Processing: Plaintext exists only momentarily during active requests and is immediately discarded README

Momo servers relay encrypted data and cannot decrypt or inspect requests.

How We Share Information

We do not sell your data.

We may share limited information only when necessary:

  • Infrastructure providers (encrypted data only)

  • Payment processors (billing data only)

  • AI providers under ZDR contracts

  • Legal obligations, where required by law — in which case we can only provide encrypted ciphertext README

Data Retention & Deletion

  • Encrypted content: Retained until you delete it or close your account

  • Raw inputs: Not stored

  • Account deletion: Deletes all associated encrypted data

Because we do not hold your keys, deleting encrypted data renders it immediately and irreversibly unreadable.

Security Guarantees

Momo is designed to protect against:

  • Database breaches

  • Insider access

  • Server compromise

  • Legal coercion to reveal plaintext

Attackers or third parties can obtain only encrypted ciphertext without keys README.

Known Limitations

Strong privacy has trade-offs:

  • Compromised devices may expose decrypted data

  • Lost recovery phrases cannot be recovered

  • LLM provider contract violations are legally constrained but technically possible

We are transparent about these limits by design.

Your Rights

You can:

  • Access and export your data

  • Correct inaccuracies

  • Revoke integrations

  • Delete your account

  • Control consent and AI usage

Children’s Privacy

Momo is intended for users 18 years and older. We do not knowingly collect data from minors.

International Users

Momo operates globally. Data may be processed in jurisdictions where our infrastructure providers operate, always in encrypted form.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated clearly.

Contact Us

If you have questions about this Privacy Policy or Momo’s security architecture:

Email: cailyn@usemomo.com

Company: TENXAICLUB INC.