Privacy Policy

MORPH helps you track how your body changes over time. Some of what you record — your weight, body measurements and progress photos — is personal and health-related. This policy explains what we collect, why, where it is kept and the choices you have.

Who is responsible

MORPH is provided by Daniel Couraceiro, [to be confirmed] ("we", "us"). For any question about this policy or your data, contact mymorphjourney@gmail.com.

What we collect

• Account information: your email address, password (stored only as a secure hash by our authentication provider), name if you add one, language, units and app preferences.
• Body information: age, height, starting weight, goal and goal weight that you enter during onboarding.
• Check-ins: weight, optional body measurements (waist, chest, hips, arm, thigh), optional energy, sleep and motivation scores and notes.
• Progress photos: front, side and back photos you choose to add to a check-in.
• Training information: sessions you schedule or complete, exercises, sets, repetitions, loads, durations, effort ratings and notes.
• MORPH Coach information (MORPH Pro): your training goal, experience, location, equipment, available days, session length, sports, exercises you want to avoid and physical limitations you describe, and the plans generated for you.
• Subscription information: your plan (Free or Pro), subscription status, billing interval, trial and renewal dates, and the identifiers our payment provider uses for your customer and subscription. We do not receive or store your full card details.
• Technical information needed to run the service, such as session tokens kept in your browser or app, and error reports.

Why we use it

• To provide MORPH: store your check-ins, show your timeline, comparisons and progress, and run the training calendar and guided workouts.
• To generate and adapt MORPH Coach plans and progression suggestions from your preferences and workout history. This is done by fixed rules in the app, not by automated decisions with legal or similarly significant effects.
• To manage your account and subscription, including the free trial, renewals and cancellations.
• To send account emails such as email confirmation and password reset.
• To keep the service secure and fix problems.

We process your account and subscription data to provide the service you signed up for. Because weight, measurements and progress photos can reveal information about your health, we ask for your explicit consent to process them when you create your account. You can withdraw that consent at any time by deleting the data or your account; this does not affect processing that took place before.

We do not sell your data, use it for advertising, or share your photos or body data with other users. MORPH has no social or public features.

Progress photos

Progress photos can be intimate: they may show your body in underwear or without clothing. We treat every photo as highly sensitive personal data. Adding photos is optional; only add photos you are comfortable storing online.

• Photos are stored in a private storage area. They are never public, and access is limited to your own account by access rules enforced on the server.
• When you view a photo, the app creates a temporary private link to it that expires after 15 minutes. Anyone who has that link can open the photo until it expires, so do not share it.
• Before upload, the app re-encodes each photo on your device. This removes embedded metadata such as GPS location and device details and limits the image to 1600 pixels on its longest side.
• Photos are encrypted in transit and stored encrypted at rest by our storage provider. They are not end-to-end encrypted: the service can decrypt them in order to show them to you.
• Photos are never shown to other users. They are not analysed by automated systems or artificial intelligence, not sent to any moderation, recognition or analytics service, and not used to train any model.
• Access by MORPH personnel: MORPH personnel do not routinely access or review progress photos. Progress photos are not available through normal staff or support workflows. Privileged infrastructure access is restricted to exceptional security, integrity or legal operations and is not intended for viewing photo content. Support will not ask you to provide progress photos.
• You can replace or remove any photo at any time. Removing a photo, or deleting your account, deletes the stored file. Copies kept on your own device, such as in your camera roll, are not affected.

Where your data is stored and who processes it

We use the following service providers to run MORPH. They process data on our behalf and only for these purposes:

• Supabase — database, user authentication and private file storage for your account data and photos.
• Stripe — payment processing for MORPH Pro subscriptions on the web, including the subscription management portal. Stripe processes your payment details directly; see stripe.com/privacy.
• Website hosting: [to be confirmed].
• Account emails (confirmation, password reset): sent through our authentication provider (Resend).
• Google Fonts — the app loads its typefaces from Google's servers, which receive your IP address when the fonts load.

Some providers may process data outside the European Economic Area. Where that happens we rely on the safeguards those providers offer, such as the European Commission's standard contractual clauses. Details of the hosting region and transfers: [to be confirmed]

Security

• All connections to MORPH are encrypted (HTTPS).
• Every account's data is separated by access rules in the database, so one user cannot read or change another user's records or photos.
• Pro features and subscription status are checked on the server; they cannot be unlocked from the app.

No system is perfectly secure. If we become aware of a breach that affects your personal data, we will notify you and the competent authority as required by law.

How long we keep your data

We keep your data for as long as your account exists. When you delete your account, your account, check-ins, measurements, photos, training and Coach data are deleted. Backup retention: [to be confirmed]. Our payment provider may keep transaction records it is legally required to retain.

Your choices and rights

• Export: in Settings you can download a copy of your MORPH data as a file.
• Delete: in Settings you can permanently delete your account and associated data. An active web subscription is cancelled as part of the deletion.
• Correct: you can edit or remove check-ins, measurements and photos in the app at any time.
• Depending on where you live, you may also have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent. To exercise these rights, contact mymorphjourney@gmail.com.
• You have the right to lodge a complaint with your local data protection authority.

Age

MORPH is intended for adults aged 18 or over. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18, we will close it and delete its data, including any photos.

Changes

If we change this policy in a meaningful way, we will tell you in the app before the change applies. The date of the latest version is shown at the top of this page.