Last updated: 12 August 2026 · Effective: 12 August 2026.
This Privacy Policy explains what MomentReel collects, why, who else sees it, how long it is kept, and how you delete it. MomentReel is operated by Erbacci LTD ("Erbacci", "we", "us"), the controller of the personal data described below. Contact: info@erbacciltd.com.
MomentReel is offered in the United States only.
MomentReel turns a security camera you already own into a family camcorder. Once you link your Ring account and choose which cameras take part, MomentReel watches the motion events those cameras already record, discards the overwhelming majority of them, and keeps the rare few that look like a moment worth saving — the dog doing something absurd, a raccoon on the porch, the delivery driver being greeted like an old friend. You get a small library of short clips you can trim, crop, caption and export.
Two things follow from that, and they shape everything below:
None of this is collected if you only use the web dashboard, or if you install the app and decline notifications.
mr_recover) in your browser, so returning from the Ring app lands you in your own account without signing in again.The cameras you enable, the profile you pick for each one (pets, wildlife or doorstep), whether faces are blurred by default, the minimum score at which a moment is worth keeping, and whether you want the "a moment is ready" email.
No passwords (MomentReel has none). No faceprints, voiceprints, gait signatures or any other biometric identifier. No license plate numbers. No audio. No location beyond the fixed view of your own cameras. No contacts, calendar, photo library or other unrelated device data. No advertising identifiers, and no third-party analytics or advertising SDKs.
Every frame reaching our pipeline is processed by machine. No Erbacci employee watches your footage as a matter of routine. Human access happens only if you ask us to investigate a specific problem, or where the law compels it.
The pipeline has three stages:
Your footage is never used to train any model — not ours, not Anthropic's, not Amazon's, not any third party's. Frames sent to Amazon Bedrock are used to answer that one inference call and are not retained by the model provider for training.
Privacy zones are honoured. Areas you masked in the Ring app are masked in our copy before any frame reaches any model — the judgement above, and the face detector in §4 — and they stay masked in everything we keep or give back to you: the clip stored in your library, the thumbnail in the grid, and any clip you export. If we cannot read your camera's privacy settings, we do not process that camera at all, and an export we cannot mask is stopped rather than delivered.
MomentReel performs no facial recognition. It does not identify anyone, does not create or store face templates or embeddings, has no enrollment step, maintains no gallery or watchlist, and never matches a face against any external database, social network, public record or another MomentReel account. Nothing in the product is capable of telling you who a person is.
What it does do is detect that a face is present so it can cover it. Face blurring is on by default on every export. When you export a clip, we sample frames from across it (24 by default) and send them to Amazon Rekognition's DetectFaces operation, which returns nothing but rectangles and a confidence number — where a face is, never whose. No face collection is created, indexed, searched or compared; no face template or embedding is ever computed or stored; there is no enrollment step and no way to add one from the app. The rectangles live for the length of a single render and are never written to storage or to a log line.
Blurring is automatic and best-effort, not a guarantee. A face can be missed when it is small in frame, poorly lit, heavily compressed, turned away, or moving fast enough to change position between two sampled frames — outdoor camera footage often has several of those at once. We say so on the export screen as well as here, and we ask you to watch a finished clip before you share it with anyone.
You can turn blurring off for an individual export. If you do, you are choosing to publish an identifiable image of whoever is in it, and the responsibility for that choice is yours — see the Terms of Service.
We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined by the CCPA/CPRA. Data derived from your cameras is never used for marketing or advertising, ours or anyone else's — including marketing for MomentReel itself. We will never email you that your camera caught something in order to sell you a subscription. Subscription prompts live inside the app and nowhere else.
There are exactly five, all transactional, and there is no promotional email of any kind.
| When | Contains | |
|---|---|---|
| Sign-in code | You ask to sign in | A six-digit code, valid 10 minutes — or, when no MomentReel account uses the address you entered, a note saying so and how accounts are created (at most one such note per address per hour) |
| A moment is ready | A new clip lands in your library — at most one routine email a day | How many moments, which camera, and a link to the app. No clip, no thumbnail |
| Trial ending | Your free trial is 7, 3 and 1 day(s) from ending — each of the three at most once, ever | When the trial ends, what happens when it does, and where to manage it. No prices, no promotions |
| Account notice | Your access ended, a linked camera was removed, or your account was deleted | The fact and what it means |
| App links | You press "Send" on the screen shown after connecting your Ring account | Links to the App Store and Google Play listings. Sent only when you ask, at most once an hour |
You can turn the "a moment is ready" and "trial ending" emails off in the app (the trial reminder then appears only inside the app). Sign-in codes and account notices are part of operating the account and are not marketing, so they cannot be switched off — but they are only ever sent in response to something that happened on your account.
Email is delivered by Resend, our email delivery provider (with Amazon SES as a fallback path). They receive the recipient address and the message text. They never receive clips, thumbnails or tokens.
Push notifications. If you install the MomentReel app and allow notifications, the "a moment is ready" message is also delivered to that device as a push notification. It is the same message and it obeys the same switch and the same once-a-day limit as the email — turning "a moment is ready" off silences both. Email remains the channel we actually rely on; push is a second copy that arrives sooner. Declining the permission changes nothing else about the app.
To deliver it we store a device notification token issued by Apple or Google, a random identifier for that app installation, and the app and operating-system versions. See §2 and §7. Signing out of the app on a device removes its token, and deleting your account removes all of them.
| Recipient | Role | What they receive |
|---|---|---|
| Amazon Web Services | Hosting, storage, compute — region us-east-1 (N. Virginia, USA) | All stored data, encrypted at rest |
| Contabo GmbH (Germany) | Infrastructure sub-processor for the local judgement in §3 — its server terminates the TLS connection on the way to our GPU in the United Arab Emirates | Each analysed frame, in transit and in memory only. Nothing is stored (§3, §13) |
| Anthropic, via Amazon Bedrock | Vision inference fallback — judges only when the local model in §3 cannot answer | One cropped still frame per fallback event. Not retained for training |
| Amazon Rekognition (AWS) | Face detection, so faces can be blurred | Frames sampled from a clip you are exporting (24 by default), at the moment you export it. Returns geometry only |
| Resend (fallback: Amazon SES) | Email delivery | Recipient address and message text |
| Apple (APNs) | Delivering push notifications to an iPhone or iPad, if you installed the app and allowed them | Your device's notification token and the notification text, which names the camera |
| Google (Firebase Cloud Messaging) | The same, for an Android device | Your device's notification token and the notification text, which names the camera |
| Ring / Amazon | Account linking, media retrieval, subscription and billing | The API calls we make on your behalf |
| Law enforcement or regulators | Only under valid legal process | Only what the process compels |
MomentReel operates no law-enforcement integration, no evidence-sharing programme, no public gallery, no feed, and no way for one user's clips to reach another user's account. Your clips are visible to your account and to nobody else until you export one and share it yourself.
Everything below expires by itself. There is one retention period for stored moments, the same for every account: 90 days from capture.
| Data | Kept for |
|---|---|
| Moments and their clips and thumbnails | 90 days from capture, then deleted automatically |
| Rendered exports | 7 days from render, then deleted automatically |
| Discarded snapshots (the ~99% judged uninteresting) | Not stored at all |
| Download links for clips and exports | Signed links expire 15 minutes after they are issued |
| Sign-in code | 10 minutes, or until used, or after 5 failed attempts |
| Session token | Until you sign out or delete your account |
| Recovery cookie | 1 year, or until you clear your browser cookies |
| Device notification token and installation identifier | Until you sign out on that device, uninstall, or delete your account. At most 10 devices per account — the least recently used is dropped first |
| Handoff code (opens the app already signed in after linking) | 10 minutes, or until used — whichever is first |
| Duplicate-delivery records for Ring webhooks | 24 hours |
| Account record, camera choices, settings, subscription state | Until you delete your account |
| Unlinked accounts that were never signed in to | Swept after 15 minutes |
| Diagnostic logs | 30 days |
Losing access does not delete anything. When your trial or subscription ends, MomentReel stops capturing and processing new moments, but the moments already in your library are left exactly as they are — still stored, still visible to you. We never erase your clips because your access lapsed, and subscribing again does not have to happen within any window to save them. They are kept until they reach the 90 days above, until you delete them, or until you delete your account (§9), whichever comes first.
In-app deletion is the primary channel. In MomentReel, open Account → Delete account and confirm. This immediately and permanently erases:
The app shows you a confirmation of what was deleted when it finishes. Deletion covers all copies and backups; it is not reversible and there is nothing to restore afterwards.
Email is the secondary channel, for when you cannot get into the app: write to info@erbacciltd.com from the email address on your Ring account with the subject "Delete my account". We verify the request and complete deletion within 30 days, and confirm by reply.
Deletion also happens without you asking:
To stop MomentReel reaching your Ring account, you can also revoke the integration from the Ring app at any time; that is independent of anything you do here.
You may ask us to access, correct, delete, port or restrict processing of your personal information, and to tell you what we hold. Use Account → Delete account in the app, or write to info@erbacciltd.com. We respond within 30 days and we do not treat you differently for asking.
California residents have the rights to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information — we do neither, so there is nothing to opt out of. We do not knowingly process the personal information of anyone we know to be under 16 for any purpose that would require an opt-in.
No system is perfectly secure, and we make no claim to any certification or audit we have not completed. If we ever suffer a breach affecting your data, we will notify you and the relevant authorities as the law requires.
MomentReel is not directed to children and is not for use by children. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, contact us and we will delete it.
MomentReel is offered only in the United States. All storage and processing described above takes place in AWS region us-east-1 (N. Virginia, USA), with one exception: the local judgement in §3 routes each analysed frame through a server in Germany (Contabo GmbH, which terminates TLS and can technically read the image) to a GPU in the United Arab Emirates, where it is processed in memory and not stored. Everything the app keeps — clips, thumbnails, exports, your account — stays in us-east-1.
Erbacci LTD is established outside the United States, so our own staff may access administrative systems from abroad under appropriate safeguards.
We may update this policy. Changes to what we collect, how we use it, who we share it with, or whether any model is trained on your data are material changes under the Ring Appstore Program Requirements: we will update this page, tell you in the app before the change takes effect, and re-certify with Ring first.
Erbacci LTD, data controller · info@erbacciltd.com
Registered office: Strovolou 77, Strovolos Center, Office 301, Strovolos 2018, Nicosia, Cyprus (Company No. HE 457237). Subscriptions are billed through the Ring Billing System, with proceeds paid to Erbacci LLC (Wyoming, USA).