Privacy

What we store

• Your account: the email address or Apple/Google identity you sign in with, and your name if Apple or Google shares it.
• Your profile: weight, height, sex, birthday, the medication and dose you told us, your phase, your consents and your settings.
• Your records: meals (and the photos you take, only while they are being analysed), doses, weigh-ins, symptoms, sleep, notes, questions for your appointment and treatment episodes.
• Your labs: the report you upload and the markers extracted from it, which you confirm.
• Coach: your conversations, until you delete them. And the notes you ask it to remember (for example "no red meat"), only when you tap Remember; never medications, doses, symptoms or numbers. You can see, edit and delete them in Coach or under You › Privacy.
• Apple Health: weight, height, biological sex, date of birth, steps, workouts, active energy and sleep, read with your permission. Morning never writes to Apple Health. Apple Health data is never used for advertising, never shared with any third party (not our AI provider and not analytics) and never leaves your account.
• Safety: when Morning shows a safety card it records that it did, on which screen, of which type and in which language. Never the text you wrote.
• Purchases: your subscription status, through Apple and RevenueCat. We never see your card.
• Usage analytics (optional): counts and taps that show which parts of Morning help. Never a weight, a dose, a food, a note or a message. It is off until you turn it on, and you can change it under You › Privacy.

Who can read it

You. Every table is protected by row-level security, so a request can only return rows that belong to the signed-in account.

What we do with it

Compute your score and targets, answer your questions in Coach, build your weekly read and your visit summary, and extract markers from your labs. That is all. We do not sell it, it is never used to train any model, and it never goes to Meta or any other ad platform: not what you log, ask or upload, and not your Apple Health data. Ad measurement, described below, is separate, optional and off until you turn it on.

Who processes it for us

• Supabase hosts the database and file storage (encrypted at rest, US-East).
• OpenAI, only if you allow AI processing (it is off until you turn it on), receives the plate photo, and for Coach a reduced version of your context: only the numbers, dates, units, medication, phase and question needed to answer. Never your name, email, date of birth, identifiers, storage paths or Apple Health data. Requests carry a random pseudonym and are not used to train models.
• RevenueCat and Apple handle subscriptions.
• PostHog receives usage analytics, only if you keep it on, under your account identifier so it can be deleted with you. During setup and on the subscription screen it also records how the screen is used, with all text, images and fields masked, so we can see where people get stuck.
• This website (morninghealth.app) uses PostHog analytics without cookies: page views, taps and scrolling, with the language and the link you came from, plus anonymous screen recordings with everything you type masked. PostHog sets no cookies, no analytics identifier outlasts the visit, and shared answers are never recorded. The site remembers your language and your cookie choice in your browser.
• Meta (Facebook and Instagram ads) on this website, only if you accept ad measurement in the cookie banner. It is off until you accept, and you can change your answer at any time under Cookie settings at the bottom of every page. With it on, Meta's pixel sets cookies, and The Pixel only runs on our general pages (home, about, FAQ and two ad pages about protein and muscle), never on guides, medicine or symptom pages, or tools, so the page address says nothing about your health. There, Meta receives that you viewed the page or tapped Download on the App Store, together with that page's address, the ad you came from, your IP address and your browser. Never what you type, and never anything you log in the app. Because this is a site about GLP-1 medication, the visit itself can tell Meta you are interested in it; that is why it stays off unless you say yes. We keep the ad you came from in your browser until you close the tab, so it isn't lost between pages. Meta handles what it receives under its own privacy policy. It is never on for shared answers.
• Meta in the app (from version 1.2.4), only if you turn on Measure ads and choose Allow in Apple's tracking prompt. Both are off until you say yes, and you can change either at any time: Measure ads under You › Privacy, Apple's choice in your iPhone's Settings. With both on, Meta's SDK reports that the app was opened and that you created an account, with the sign-in method, together with your device's advertising identifier, and RevenueCat tells Meta when a trial or subscription starts or renews, with its price and currency. If either answer is no, nothing from the app reaches Meta. Never your medication, dose, weight, meals, symptoms, answers or anything else you log.
• OneSignal shows messages inside the app (tips, news, offers), only if you keep analytics on. It receives your account identifier, language, plan, the week you started and where you came from, and moments such as finishing setup or opening Coach. Never your medication, your phase or any health record.
• Resend sends the sign-in code email.

How long we keep it

• Records and labs: until you delete them, one by one or with the account.
• Coach conversations: until you delete them; a deleted conversation is purged after 30 days.
• Safety events: 400 days.
• Usage analytics: 12 months.
• Shared links: 30 days, or until you withdraw them.

Deleting it

You › Privacy and data › Delete my account. It removes your account and your records now, and checks every table afterwards. Three external services, RevenueCat, PostHog and OneSignal, receive the deletion at the same moment and confirm within 30 days. What remains: anonymous cost counts with no user identifier, and Apple's billing record, which belongs to Apple. You can export everything as JSON from the same screen first. Saying no to ad measurement, on the website or in the app, stops anything new from reaching Meta. What Meta already received stays under Meta's own policy, and you can review it in your Facebook or Instagram settings under "Your activity off Meta technologies".

Children

Morning is for adults on or considering a GLP-1 medication. It is not for anyone under 18.

Contact

hello@morninghealth.app. Morning is made by Sanisimo Inc.