Privacy Policy

Who is responsible

Each event is organised by the organiser named on that event’s consent form. The organiser decides how the event’s photos are used. eunoai runs Momen for the organiser and looks after the data on their behalf.

What we collect

• From Google sign-in: your name, email address and Google account ID. We never see your Google password, contacts or other account data.
• The selfies you take at each checkpoint.
• Your consent record: the version of the consent form you accepted, the language it was shown in, when you accepted, your marketing choice, and your browser’s user agent.
• Your progress and claim: which checkpoints you completed and when your goodies bag was claimed.
• Technical data: your IP address and request details in short-lived server logs, used for security and to stop abuse.
• For weddings: the name, phone number, attendance, number of guests and session you give when you RSVP, and the photos and wishes you add to a wedding album with the name you enter. No sign-in is needed for these.

Cookies and storage on your phone

One cookie keeps you signed in to the event. A wedding album sets one anonymous cookie so you can remove what you added from your phone. Your phone also stores your language, whether you dismissed the install prompt, your RSVP reply link, and photos still waiting to upload. We use no advertising or tracking cookies.

How we use it

• To run the event: check your progress, prevent duplicate claims, and contact you about the event.
• Your selfies are used by the organiser as described in the consent form you accepted, which can include commercial, marketing and promotional use.
• If the event has a venue slideshow and you agreed to it, your photos may be shown on screens at the venue.
• News and offers are sent only if you ticked the optional marketing box.

Who can see it

• Your photos are private by default: only you, the organiser’s event staff and eunoai can see them, through links that expire.
• The organiser can export the participant list (name, email, consent and claim details) for their event. At a wedding, the couple and their family see RSVPs, and anyone with the album link sees the album.
• Service providers that run Momen for us: Google Cloud (hosting and storage in Singapore), Google (sign-in) and Cloudflare (domain name service).
• We do not sell your personal data.

Where it is kept and how it is protected

Data is stored on Google Cloud in Singapore. All traffic uses HTTPS, storage is encrypted at rest, and only authorised staff can sign in to the admin.

How long we keep it

• Name and email: 12 months after the event ends, then deleted.
• Selfies: kept for marketing while your consent stands, and removed when you ask.
• Consent record: as long as any of your photos is still in use.
• Marketing choice: until you opt out.
• Claim and audit logs: 12 months. Database backups: 30 days.
• Wedding RSVPs, photos and wishes: while the couple’s service runs, then handed to the couple on request and deleted within 30 days.

Your rights

You can ask to see, correct or delete your data, or withdraw your consent, by emailing the organiser at the address on the event’s consent form, or eunoai at zantarockstudio@gmail.com. We act on requests within 21 days. Photos that have already been published may not be withdrawn.

Children

Guests under 18 may take part only with the agreement of a parent or guardian, as the consent form asks.

Changes

If we change this policy, we update this page and the date at the top.