Privacy Policy
Morn is local-first. It has no user account, cloud profile, advertising, tracking, or analytics SDK.
Data stored on your device
Alarm settings, mission configuration, normalized scanned-code values, morning history, streaks, achievements, and preferences remain on your iPhone or iPad. Morn does not upload this information to a Morn account or synchronization service. Optional alarm diagnostics contain timing, permission, device, and audio-route information, but no mission images or face data. These diagnostics remain on the device unless you choose to share a report.
Camera missions and face data
Mirror Selfie processes one camera photo that may contain your face, body, mirror reflection, and surroundings. Photo Scan missions, including Running Water, and Handstand use one photo. Push-up and squat checks use four frames, which may also contain faces. Older app versions may use four frames for Running Water and Handstand. Make the Bed processes its check-in on the device only. Camera access alone does not authorize uploading: Morn asks separately before sending an attempt.
Still photos can be reviewed and retaken before submission. Morn reduces uploaded images to at most 768 pixels per edge and removes source metadata through JPEG re-encoding. Legacy QR/barcode scanning stores only the normalized code value on the device.
How face images are used
Images are used only to verify the selected wake-up mission, such as whether a person and a physical mirror are visible. Morn does not perform face recognition, identify or authenticate people, create face templates or profiles, or infer sensitive traits. Morn does not use face images for advertising, tracking, sale, or model training.
Morn does not access Face ID data, TrueDepth face maps, face landmarks, or biometric identity templates. Verification returns a limited pass/fail result and a reason code, not a person's identity or a facial description. Morning history stores the mission outcome, not the image or a face profile.
Image sharing and storage
With your permission, images are JPEG-encoded without source metadata, limited to 768 pixels per edge, and sent over HTTPS to Morn’s Cloudflare relay and then to OpenAI’s Responses API with response storage disabled. Morn does not save images to Photos, alarm history, or its own persistent database, files, logs, analytics, or backups. Images are processed in app memory and on Cloudflare and OpenAI infrastructure. Morn does not configure a specific processing region.
Cloudflare hosts the relay and therefore processes the image upload. OpenAI receives the images, the mission instructions, and a pseudonymous safety identifier for verification and abuse prevention. RevenueCat and Firebase Hosting do not receive mission images. OpenAI states that API data is not used for model training by default. See OpenAI’s API data controls and Cloudflare’s privacy policy.
Image retention and deletion
Morn keeps a photo in app memory while you review it and removes the review copy when you retake, submit, or leave. Processing copies are released when the attempt finishes or cancellation completes. The relay uses request memory without a persistent image store. OpenAI may retain submitted images in abuse-monitoring logs for up to 30 days by default, or longer when required by law; images flagged by its safety systems may be retained for manual review. Disabling response storage does not guarantee zero retention. Canceling or deleting local data cannot recall images already sent or immediately erase provider logs.
Make the Bed images never leave the device and are discarded after the local camera check. Morn has no persistent face-image collection or face-profile database to delete. You may contact us about a privacy request; provider-held information is subject to the provider's applicable retention and deletion obligations.
Purchases
Apple processes payment. RevenueCat receives anonymous purchase, receipt, product, device, and entitlement information needed to provide Morn Pro. Morn displays an anonymous RevenueCat Purchase Support ID so support can locate purchase diagnostics. RevenueCat does not receive mission images or alarm history. See RevenueCat’s privacy policy.
Relay security and hosting
The image-verification relay runs on Cloudflare and receives a random installation token, a random attempt ID, the mission type, limited network metadata, and one photo or four frames. It rate-limits abuse and records only redacted diagnostic codes and random request IDs. It does not log tokens, images, image encodings, or service secrets. The app may log technical image dimensions, byte counts, and verification result codes; it does not log image content or face descriptions.
Morn’s public support and legal pages are delivered through Firebase Hosting, which receives ordinary HTTPS request metadata under Google Firebase’s privacy terms. These pages contain no app-owned cookies, analytics, scripts, or forms.
Your choices
You can deny or revoke camera access, cancel image sharing, use offline Quick Math without uploading an image, manage or restore purchases through Apple, and delete Morn’s local data from Settings. Deleting local data does not cancel an Apple subscription or erase provider-held abuse-monitoring records.
Screen Time
If you choose App Blocking, Morn requests Apple's Family Controls permission. It stores opaque tokens for the apps, categories, and websites you select in a shared on-device container with its Device Activity extension. Morn does not read your app-usage or browsing history. Delete Local Data clears these selections and schedules.
Data Morn does not request
Morn does not request contacts, photo-library access, location, microphone, HealthKit, Bluetooth, advertising identifiers, or tracking permission. Morn does not identify people in mission images or infer sensitive traits.
Contact
For privacy questions, email hello@snugapp.app.