Privacy Policy

Effective 30 October 2026

1. Who we are
2. What we collect
3. Google user data
4. How we use data
5. What stays on your device
6. Where data is stored
7. Who we share it with
8. How long we keep it
9. Your choices and rights
10. Security
11. This website
12. Changes and contact

1. Who we are

Momentum is a task manager made of a Mac app, a terminal app and a server that keeps your tasks. It is an open-source project by João Vitor Viegas Rêgo (“we”, “us”), who operates the hosted Momentum server and is responsible for the data described here. The hosted server is private: only accounts we invite can sign in.

This policy covers the Momentum apps, the hosted Momentum server and this website. If you run your own Momentum server from the source code, your data stays with your server and this policy does not apply to it.

2. What we collect

Your account

• Email address, from Google or GitHub when you sign in. Sign-in with Google asks only for your identity and email address (openid, email); sign-in with GitHub asks for your profile and email address (read:user, user:email).
• Your account ID at Google or GitHub, so the same account signs in next time.
• Your time zone, so “today” and due dates mean your day.
• Sign-in records: when each sign-in was made and when it expires. The sign-in tokens themselves are stored only as one-way hashes.

Your tasks

• What you enter: descriptions, projects, tags, priorities, due and scheduled dates, estimates, repeat rules, notes and dependencies, and whether a task is pending, active, completed or deleted.
• A history of changes to each task, which makes undo work.

Google Calendar, only if you connect it

• The email address and account ID of the Google account you connect.
• The access Google grants Momentum (a refresh token), stored encrypted. See Google user data.

We do not collect your contacts, files, location, device identifiers, usage analytics or crash reports.

3. Google user data

Connecting Google Calendar is optional and happens in your browser, on Google's own consent screen.

What we access

Momentum asks for the https://www.googleapis.com/auth/calendar.events.readonly permission, which is read-only. From your primary calendar only, for the day being planned, it reads each event's start and end, whether it is all-day, whether it shows you as busy or free, whether it was cancelled, your own response to it (accepted, declined, tentative), and its title. It does not request event descriptions, locations, attachments or other attendees' addresses, and it cannot create, change or delete events.

How we use it

• To work out how much of your working day meetings take, so Plan Today can take that time off the day's capacity. Declined meetings are not counted.
• To show a meeting's title in Plan Today, on your device, when you point at it.

Google user data is used only to provide these features to you. It is not used for advertising, it is not sold, it is not used to build profiles, and it is not used to train artificial intelligence or machine-learning models.

How we store it

• Events are not stored. The server reads them from Google when an app asks, passes them to that app and keeps no copy. They are never written to logs.
• To keep the sidebar quick, your device keeps the day's events, without their titles, in memory for up to five minutes. Plan Today always asks again.
• The refresh token is encrypted with AES-256-GCM before it is saved, with a key held in Google Secret Manager, apart from the database.

Who can see it

Google user data is not shared with or transferred to anyone else, except the hosting providers that run the server (section 7), which process it only to run the service. No person reads your calendar data, unless you ask us to (for example, to fix a problem), it is needed for security, or the law requires it.

How to remove it

• In the Mac app, choose Settings ▸ Calendar ▸ Disconnect…; in the terminal app, run momentum calendar disconnect. Momentum asks Google to revoke its access and deletes the saved connection.
• You can also remove Momentum's access at any time from your Google Account, at myaccount.google.com/permissions.

4. How we use data

We use the data above only to run Momentum for you: to sign you in, to keep your tasks and show them in every app, to plan your day, to undo changes, and to keep the service secure and working. We do not use your data for advertising or marketing, and we do not send you email unless you write to us first.

5. What stays on your device

• The Mac app keeps its sign-in in your macOS Keychain. The terminal app keeps its sign-in in a file in your configuration folder that only your user account can read.
• Settings live in config.toml on your computer.
• If you choose calendar files or macOS Calendar as the calendar source, those events are read on your device and never sent to the server.

6. Where data is stored

The server runs on Google Cloud Run in Frankfurt, Germany (europe-west3), and the database is a Neon PostgreSQL database hosted on AWS in Frankfurt (eu-central-1). Secrets, such as the key that encrypts Google refresh tokens, are kept in Google Secret Manager in the same region. All traffic between the apps, the server and Google uses HTTPS.

7. Who we share it with

We do not sell, rent or share your data. These providers process it on our behalf, only to run the service:

We may disclose data if the law requires it, and then only what is required.

8. How long we keep it

• Your account and tasks are kept while your account exists. Deleting a task marks it deleted rather than erasing it at once, so undo and the apps stay in step.
• A Google Calendar connection is kept until you disconnect it. Links for connecting expire after ten minutes.
• Sign-in records are kept until they expire or you sign out.
• The server's logs record each request's method, route, status and duration. They never hold task text, calendar events, titles or tokens.

When you ask us to delete your account, we delete it with its tasks, sign-ins and Google Calendar connection, and revoke Momentum's access to Google.

9. Your choices and rights

You can see and change your tasks in the apps at any time, sign out, and disconnect Google Calendar. Depending on where you live, laws such as the GDPR or Brazil's LGPD give you the right to access, correct, export or delete your personal data, and to object to how it is used. To use any of these rights, email jvrviegas@gmail.com; we answer within 30 days.

Momentum is not meant for children under 16, and we do not knowingly collect their data.

10. Security

Sign-in tokens are stored only as hashes, Google refresh tokens are encrypted, every account can reach only its own data, and every connection uses HTTPS. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you.

11. This website

This website is a set of static pages. It sets no cookies and runs no analytics. Cloudflare, which serves it, processes your IP address to deliver the pages and protect them from abuse.

12. Changes and contact

If this policy changes, we will update it here and change the date at the top. Questions or requests: jvrviegas@gmail.com.