Privacy Policy
MORPH helps you keep four daily habits: drinking water, walking, keeping an eating window, and logging your meals. This policy explains what it stores, where that goes, how long it is kept, and how to remove all of it.
The short version. Your record lives on your phone and in one database in the EU. Nothing is sold, nothing is used for advertising, and there is no tracking of any kind. One feature — the meal-photo scanner — sends a photo to a third party in the United States, it is optional, it asks first, and MORPH never keeps the photo. You can delete everything from inside the app.
What MORPH collects
What you tell it during setup
Your sex, age, height, current weight, goal weight, activity level, and when you sleep. MORPH uses these to calculate one daily calorie target and to place your eating window. You can also tell it whether you are pregnant, recently gave birth, are breastfeeding, or are under a clinician's supervision. Those answers change the calculation, and in several of them MORPH will refuse to set a weight-loss target at all.
Your daily record
Which of the four items you completed each day, your water count, your step count, your weight on the days you enter it, and any calories you log.
Step count from Apple Health
Only if you grant permission, and only the step count. That is the single HealthKit type MORPH asks for. MORPH reads steps so your movement goal completes without you logging anything, and it never writes anything back to Health. Health data is never used for advertising or any use-based data mining, and Apple's rules forbid that independently of this policy.
Meal photos, if you use the scanner
A photo you take of a meal is sent to be analysed so MORPH can estimate what you ate. This is the one thing that leaves your device to a third party, it is entirely optional, and it is covered in detail under The meal scanner.
Your account
If you sign in, an account identifier. Sign in with Apple can hide your real email address from MORPH, and MORPH does not need it. You can use MORPH without an account at all.
What MORPH does not collect
- No advertising identifiers, and no advertising SDKs.
- No location. MORPH strips the location tag out of meal photos before they leave your phone.
- No contacts, no calendar, no microphone.
- No tracking across other apps or websites. MORPH's privacy manifest declares
NSPrivacyTrackingas false, and the app never shows a tracking permission prompt. - No analytics vendors, no data brokers, no profiling.
- Nothing is ever sold.
Where your data goes
| Who | What they get | Where |
|---|---|---|
| Your device | Your profile and full daily record. MORPH works offline. | Your iPhone |
| Supabase database provider | Your profile and daily record, so your history survives a new phone. | EU (Stockholm) |
| OpenAI only if you scan a meal | The meal photo itself, with its metadata already removed. | United States |
| Apple | Sign-in. Step counts stay on your device; MORPH reads them, it does not upload them. | Apple |
That is the complete list.
MORPH stores nothing in iCloud. There is no CloudKit or iCloud storage in the app, so no health or fitness information is placed there by MORPH.
Every row in the database is locked to your account by row-level security, enforced by the database itself rather than by the app.
Third parties handle your data to the standard set out here. Supabase and OpenAI are bound by their agreements with MORPH to protect the data they process to the same or an equal standard as this policy describes, and to use it only to provide the service MORPH asks them for. Neither is permitted to use it for their own purposes, to sell it, or to pass it on. No other company receives your data, and there are no parent, subsidiary or affiliated companies with access to it.
The meal scanner
The scanner is optional. If you never use it, no photo ever leaves your phone.
MORPH asks for your explicit permission before the first photo is ever sent, and tells you at that moment that the image goes to OpenAI in the United States. You can decline and keep using every other part of the app. You can withdraw that permission at any time, and the feature stops sending anything.
- Before the photo leaves your phone, MORPH strips its metadata — including GPS location, capture time and camera model — and shrinks it. Only the picture itself is sent.
- MORPH never stores the photo. Not in the database, not in file storage. It passes through the server in memory and is gone.
- OpenAI does not use data submitted through its API to train its models.
- OpenAI retains it for up to 30 days for abuse monitoring and then deletes it. During that window it is held in the United States.
- What comes back and is saved to your record is the estimate — a calorie range and a description — never the image.
How long it is kept
| Data | Kept for |
|---|---|
| Your profile and daily record | Until you delete your account. There is no expiry — the history is the point of the app. |
| Meal photos | Never stored by MORPH. Up to 30 days at OpenAI, then deleted by them. |
| The estimate from a scan | With your daily record, until you delete your account. |
| Scan usage counts | With your account, to enforce the daily limit. Deleted with it. |
| Data on your device | Until you delete your account or remove the app. |
Deleting everything, and withdrawing consent
Profile → Delete account. It is immediate and permanent. It removes your account, every day you have logged, your plan and metrics, your stones, and your Challenger links — on the server and on the device. Nobody at MORPH can undo it or recover it afterwards.
You can also, without deleting anything:
- Revoke Health access at any time in the Health app. MORPH stops reading steps.
- Revoke notification permission in Settings.
- Withdraw meal-scanner consent in the app, after which no photo is sent.
- Unlink your Challenger, which ends their access immediately.
To ask what is held about you, to get a copy of it, or to have it corrected or erased, write to support@morph-me.com. Requests are answered within 30 days.
Your rights
Depending on where you live you may have the right to access your data, correct it, delete it, object to or restrict how it is used, receive a portable copy, and withdraw consent at any time. MORPH does not sell personal information and does not share it for behavioural advertising, so there is nothing to opt out of on that front. Exercise any of these by writing to support@morph-me.com, or by using the in-app deletion, which is immediate and needs no request.
The lawful basis for handling your profile and daily record is the contract between you and MORPH — the app cannot do its job without them. Health data and meal photos are handled on the basis of your explicit consent, which you give separately and can withdraw.
The Challenger
If you link an accountability partner, they can see four booleans and a streak: whether each of the four items was done, and how many days you have run. They cannot see your weight, your calories, your step count, or your plan. This is enforced by the database, not by the app — your Challenger has no permission to read the table those numbers live in. Either of you can end the link at any time.
Children
MORPH is not for under-18s and does not knowingly collect anything from them. It refuses to set a weight-loss target for anyone who tells it they are under 18.
This is not medical advice
MORPH is not a medical service, and its calorie target has not been reviewed by a clinician. Talk to a doctor before changing how you eat, particularly if you are pregnant, breastfeeding, recently gave birth, or under medical supervision.
Changes
If this policy changes materially you will be told in the app before the change takes effect. The effective date at the top always reflects the current version.