Privacy Policy
Last updated: July 21, 2026
What we collect
We collect only what's needed for the app to work: the answers you provide in onboarding and check-ins (age, height, weight, goal, work, sleep, food, equipment, obstacles), workout logs, and account info (name, email). You can use the app without sharing your location or medical records — and we don't ask for them. Two features are optional and only run if you use them: scanning a meal photo to estimate its nutrition, and speaking to your AI coach instead of typing.
How we use it
We use your information to generate personalized workout and nutrition plans, adjust them when you check in, and explain the reasoning. If you scan a meal photo, the image is sent to our AI vision provider to estimate calories and macros for you to review before logging — we do not store the photo. If you use voice input, your device's built-in speech recognition converts it to text locally; only the resulting text is sent to your coach. We do not sell your personal health, fitness, nutrition, or lifestyle data. We do not share health data with advertising platforms.
Coach explanations
Plans are produced by rule-based engines. AI helps write the explanations. We log recommendations and any safety issues so we can review and improve the system. Free-text you send to the coach is processed by Lovable AI Gateway on our behalf; we automatically strip emails, phone numbers, and card-like numbers from text before it leaves our servers.
Security
Data is encrypted in transit and at rest. Each account's data is isolated so users can only read and write their own records, and access is authenticated on every request.
Reporting a vulnerability
Found a security issue? Contact support with "Security" in the subject. We aim to acknowledge within 3 business days. If a breach affects your personal data, we will notify you without undue delay and within the timelines required by applicable law (for example, 72 hours under GDPR).
Your controls
You can export your data at any time from Account Settings. Requesting account deletion permanently removes your app data and login after you confirm the action. Billing and usage cost records may be retained only where required for tax, accounting, security, or abuse-prevention obligations.
Data retention
Coach conversations are kept for 90 days and food diary entries for 365 days, after which they're automatically removed. You can choose to keep either for longer from Account Settings.
Cookies and consent
We use only essential cookies needed to keep you signed in, remember your preferences, and protect the service from abuse. We do not show ads and do not use advertising identifiers or cookies to track you across other companies' apps or websites. We do not sell or share your data with data brokers. If you are in a region that requires consent, we show a notice before storing consent preferences.
Subprocessors
We use Lovable Cloud for hosting, authentication, database, and storage; Stripe for web payments, Apple/Google app stores for mobile subscriptions; Lovable AI Gateway for AI processing; and our email provider for account and transactional email. These providers process data only so MorphFit AI can operate the service.
Children
MorphFit AI is not directed to children under 16 and we do not knowingly collect data from them. If you believe a child has created an account, contact support and we will remove it.
Not a medical service
We do not collect medical records and do not claim HIPAA compliance. MorphFit AI is a general fitness and wellness app, not a medical service. See our Terms & Safety page for the full disclaimer.
Contact
Questions about privacy? Contact support.