Privacy
Effective 9 September 2026. Written to be read.
What we store
- Your account: the email address or Apple/Google identity you sign in with, and your name if Apple or Google shares it.
- Your profile: weight, height, sex, birthday, the medication and dose you told us, your phase, your consents and your settings.
- Your records: meals (and the photos you take, only while they are being analysed), doses, weigh-ins, symptoms, sleep, notes, questions for your appointment and treatment episodes.
- Your labs: the report you upload and the markers extracted from it, which you confirm.
- Coach: your conversations, until you delete them.
- Apple Health: weight, height, biological sex, date of birth, steps, workouts, active energy and sleep, read with your permission. Morning never writes to Apple Health. Health data is never used for advertising, never shared with any third party (not our AI provider, not analytics, not your Duo) and never leaves your account.
- Safety: when Morning shows a safety card it records that it did, on which screen, of which type and in which language. Never the text you wrote.
- Purchases: your subscription status, through Apple and RevenueCat. We never see your card.
- Usage analytics (optional): counts and taps that show which parts of Morning help. Never a weight, a dose, a food, a note or a message. Switch it off under You › Privacy.
Who can read it
You. Every table is protected by row-level security, so a request can only return rows that belong to the signed-in account. Your Duo sees only what you switch on, category by category: by default your name, whether you closed the day, and the moments you send. Your labs, meals, Coach conversations and safety flags never cross. Either of you can pause or end the Duo; ending removes everything shared from both views.
What we do with it
Compute your score and targets, answer your questions in Coach, build your weekly read and your visit summary, and extract markers from your labs. That is all. We do not sell it, we do not share it with advertisers, and it is never used to train any model.
Who processes it for us
- Supabase hosts the database and file storage (encrypted at rest, US-East).
- OpenAI receives the plate photo, and for Coach a reduced version of your context: only the numbers, dates, units, medication, phase and question needed to answer. Never your name, email, date of birth, identifiers, your Duo's name, storage paths or Apple Health data. Requests carry a random pseudonym and are not used to train models.
- RevenueCat and Apple handle subscriptions.
- PostHog receives usage analytics, only if you keep it on, under your account identifier so it can be deleted with you.
- Expo delivers Duo push notifications. The body is one of four fixed sentences with a name; never a health value.
- Resend sends the sign-in code email.
How long we keep it
- Records and labs: until you delete them, one by one or with the account.
- Coach conversations: until you delete them; a deleted conversation is purged after 30 days.
- Safety events: 400 days.
- Usage analytics: 12 months.
- Shared links: 30 days, or until you withdraw them.
Deleting it
You › Privacy and data › Delete my account. It removes your account and your records now, and checks every table afterwards. Two external services, RevenueCat and PostHog, receive the deletion at the same moment and confirm within 30 days. What remains: anonymous cost counts with no user identifier, and Apple's billing record, which belongs to Apple. You can export everything as JSON from the same screen first.
Children
Morning is for adults on or considering a GLP-1 medication. It is not for anyone under 18.
Contact
hello@morninghealth.app. Morning is made by Sanisimo Inc.