At Morphed, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered creative platform ("Service"). Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
1.1. Information You Provide
- Account Information: Email address, name, and password when you create an account
- Payment Information: Web billing is processed by Stripe. In-app subscriptions are processed by Apple, and RevenueCat helps us associate subscription status with your Morphed account. We do not store full card numbers or Apple payment credentials.
- User Content: Prompts, photos, videos, audio, and other content you choose to upload or generate using our Service
- Communications: Information you provide when contacting support or providing feedback
1.2. Automatically Collected Information
- Usage Data: Information about how you interact with our Service (features used, generation history, preferences)
- Device Information: Browser type, operating system, device identifiers, and IP address
- Cookies: We use essential cookies for authentication and optional analytics cookies with your consent
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process your AI generation requests and deliver outputs
- Process payments and manage your subscription
- Send transactional emails (account verification, password reset, billing notifications)
- Provide customer support and respond to your inquiries
- Detect, prevent, and address technical issues, fraud, and abuse
- Analyze usage patterns to improve user experience and develop new features
- Comply with legal obligations
3. Face Data in Uploaded Photos
3.1. What we collect: Morphed does not collect faceprints, facial geometry, biometric identifiers, Face ID data, or face-recognition templates. If you choose to upload a photo or video that contains a face, the face visible in that media is treated as user content and is used only to provide the generation, editing, animation, headshot, avatar, try-on, or template workflow you requested.
3.2. How we use it: Photos or videos containing faces are processed to create the requested output. We do not use face data to identify you, authenticate you, build a biometric profile, track you, advertise to you, or train our AI models without your explicit consent.
3.3. Sharing and storage: Uploaded media and generated outputs may be stored in Morphed's secure media storage. When you give in-app permission and request a generation, the prompt and media you selected are sent to Features & Labels, Inc. (fal.ai), our third-party AI processing provider, only as needed to produce the requested result. We do not sell face data or share it with unaffiliated third parties for advertising or marketing.
3.4. Retention and deletion: Uploaded media used only for processing is deleted within 24 hours unless it is saved as part of your account library or generation history. Generated outputs and saved user content remain in your account until you delete them or close your account. When you delete content or your account, we remove it from active systems within 30 days, with backup copies retained for up to 90 days.
4. AI Model Training & Your Content
4.1. Default Behavior: We do not use your personal uploads or generated content to train our AI models without your explicit consent.
4.2. Anonymized Data: We may use anonymized, aggregated usage data (such as popular prompts or generation parameters) to improve model performance. This data cannot be linked back to individual users.
4.3. Third-Party AI Processing: Morphed uses Features & Labels, Inc. (fal.ai) to run AI models for image and video generation. After you give explicit in-app permission, we send fal.ai the prompt you enter and any photo, video, or audio you select. We do not send fal.ai your Morphed password, payment details, or contacts. fal.ai processes these inputs to provide the generation you requested, operate and secure its service, and create anonymized or aggregated service-usage data.
4.4. Permission and revocation: The mobile app asks for permission before it sends a prompt or selected media to fal.ai. If you decline, you can continue browsing Morphed but the generation will not be submitted. You can revoke this permission at any time under Settings > Third-party AI processing. Revocation prevents future sharing; you may separately delete existing content or your account.
4.5. Equivalent protection: We require fal.ai and every service provider that processes user data for us to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable law. Our current providers are listed on our Sub-Processors page.
5. Data Retention
5.1. Account Data: We retain your account information for as long as your account is active or as needed to provide you services.
5.2. Generated Content: Your generated images and videos are stored in your account library and retained until you delete them or close your account.
5.3. Upload Processing: Images you upload for processing (e.g., for upscaling or style transfer) are temporarily stored during processing and may be cached for performance. Temporary files are deleted within 24 hours.
5.4. After Deletion: When you delete content or your account, we will remove your data from our active systems within 30 days. Some data may remain in backups for up to 90 days.
6. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third parties who assist us in operating our Service, including Stripe and Apple for payments, RevenueCat for subscription entitlement management, Customer.io for account and lifecycle communications, Google Analytics for product analytics and conversion measurement, and Meta for advertising attribution. Customer.io may process your name, email address, internal user ID, plan status, and account lifecycle events. Google Analytics may process your internal user ID and product usage or transaction events. Meta receives only hashed versions of your email address and internal user ID, together with signup or subscription events. Our current provider list is available on the sub-processors page.
- AI Processing: With Features & Labels, Inc. (fal.ai) after you give explicit permission, to process the prompt and media you selected and return the image or video you requested. We do not share this data with fal.ai for advertising.
- Legal Requirements: When required by law, court order, or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share information
7. Your Rights & Choices
Depending on your location, you may have the following rights:
7.1. For All Users
- Access and download your personal data
- Correct inaccurate information in your account
- Delete your account and associated data
- Opt out of marketing communications
- Manage cookie preferences
- Revoke third-party AI processing permission in the mobile app under Settings
7.2. GDPR Rights (EEA/UK Users)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
7.3. CCPA Rights (California Residents)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising rights
8. Cookies & Tracking Technologies
Essential Cookies: Required for authentication, security, and basic functionality. These cannot be disabled.
Analytics Cookies: Help us understand how users interact with our Service. You can opt out of these through your browser settings or our cookie preferences.
Performance Cookies: Used to improve loading times and optimize the Service.
You can manage your cookie preferences at any time through our cookie settings or your browser controls.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of sensitive data at rest
- Regular security assessments and monitoring
- Access controls and authentication requirements
- Secure cloud infrastructure with reputable providers
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by relevant authorities.
11. Children's Privacy
Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: privacy@morphed.app
- Data Protection Officer: dpo@morphed.app
We will respond to your requests within the timeframes required by applicable law (typically 30 days).