1. What we process

• Account data: a Supabase user identifier and, depending on how you sign in, an email address or an Apple/Google provider identifier.
• Your private museum data: saved artworks, exhibitions and artists; private collection names, artwork membership and order.
• Pass data: your current Museum Pass entitlement, product, store, and expiration status. Payment credentials are handled by Apple or Google and are not received by MomentArt.
• Local viewing data: recent views, image cache, preferences, and offline artwork snapshots stored on your device.
• Operational data: limited request, security, device, network, crash, and service logs processed by our infrastructure providers when needed to operate and protect the service.

MomentArt does not currently use advertising or cross-app tracking SDKs. It has no public social profile, comments, followers, or user artwork upload.

2. Why we use it

We process this data to authenticate you; sync your saved items and private collections; recognize and restore your Pass; deliver licensed artwork images; provide offline viewing you request; prevent abuse; troubleshoot failures; and respond to support or deletion requests.

3. Service providers

• Supabase — authentication and PostgreSQL account data.
• Cloudflare — private artwork image delivery through R2/CDN.
• RevenueCat — subscription entitlement management.
• Apple and Google — sign-in and store billing when you choose their services.

These providers process data under their own policies and our service arrangements. Data may be processed in countries or regions outside yours, with safeguards provided by the relevant provider and applicable law.

4. Retention and deletion

Active account data is kept while your account is open and as needed to provide the service. In-app account deletion removes your MomentArt account and associated saved data from the active database and requests deletion of the linked RevenueCat customer record. Supabase backup and operational log copies may remain for up to 7 days before automatic expiry. Apple and Google may retain purchase records under their own legal and store policies.

Recent views, offline snapshots, and image cache on the device where deletion is initiated are cleared by the app. Data on another offline device is removed when that app signs out/synchronizes, or when you clear/uninstall it.

5. Your choices

• Browse without creating an account.
• Use Settings to clear offline content, sign out, or delete your entire account.
• Manage or cancel a subscription in your App Store or Google Play account. Deleting MomentArt does not cancel store billing.
• Use our web deletion page if you cannot access the app.

6. Security, children, and changes

We use access controls, private media storage, row-level database security, and short-lived image URLs. No system is perfectly secure. MomentArt is a general-audience art service and is not directed to children under 13. We will update this page when our practices materially change and revise the date above.

7. Contact

For privacy questions or requests, email psychangstudio@gmail.com.

1. 我们处理的数据

• 账号数据：Supabase 用户标识，以及由登录方式决定的邮箱地址或 Apple/Google 身份提供方标识。
• 私人艺术馆数据：收藏的作品、展览与艺术家；私人画集名称、其中的作品及排序。
• 通票数据：当前艺术馆通票权益、商品、商店与到期状态。支付凭据由 Apple 或 Google 处理，MomentArt 不会收到银行卡等支付凭据。
• 本地观画数据：设备上的最近观看、图片缓存、偏好设置与主动离线保存的作品快照。
• 运行数据：为运行、保护和排查服务问题所需的有限请求、安全、设备、网络、崩溃与服务日志。

MomentArt 目前不使用广告或跨 App 跟踪 SDK；没有公开社交主页、评论、关注关系或用户作品上传。

2. 使用目的

用于登录认证、同步收藏和私人画集、识别及恢复通票、交付具有展示权利的作品图片、提供用户主动使用的离线观画、防止滥用、排查故障，以及响应支持或删除请求。

3. 服务提供方

• Supabase：身份认证与 PostgreSQL 账号数据。
• Cloudflare：通过 R2/CDN 私密交付作品图片。
• RevenueCat：订阅权益管理。
• Apple 与 Google：当你选择相应服务时提供登录和商店结算。

这些服务商依据其隐私政策及与我们的服务安排处理数据。数据可能在你所在国家或地区之外处理，并由相关服务商及适用法律提供相应保障。

4. 保存与删除

账号存续期间，我们会为提供服务保存有效账号数据。在 App 内删除账号会从在线主数据库移除 MomentArt 账号及关联收藏数据，并请求删除关联的 RevenueCat 客户记录。Supabase 的备份副本和运行日志最多可能继续保留 7 天，之后自动到期。Apple 与 Google 可能依据其法律义务和商店政策保存购买记录。

发起删除的当前设备会同时清除最近观看、离线快照与图片缓存。其他处于离线状态的设备会在退出/同步后移除账号数据，你也可以清除或卸载其 App。

5. 你的选择

• 无需创建账号即可浏览。
• 可在“设置”中清理离线内容、退出登录或删除完整账号。
• 可在 App Store 或 Google Play 账号中管理、取消订阅。删除 MomentArt 账号不会取消商店扣费。
• 无法进入 App 时，可使用网页删除入口。

6. 安全、儿童与政策变更

我们使用访问控制、私密媒体存储、数据库行级安全和短期有效的图片地址；但任何系统都无法承诺绝对安全。MomentArt 是面向一般人群的艺术服务，并非专门面向 13 岁以下儿童。数据实践发生重要变化时，我们会更新本页及顶部日期。

7. 联系方式

隐私问题或请求请发送邮件至 psychangstudio@gmail.com。