How Your Data Is Used in Morphee
User-facing document — intended for display in the app or on the website.
DRAFT — Requires review before publication.
Last updated: 2026-02-13
What Happens When You Chat
You type a message
↓
Morphee backend receives it
↓
Your message is stored in our database
↓
Relevant memories are retrieved (if you opted in)
↓
Your message + context is sent to Anthropic's Claude AI (in the US)
↓
Claude generates a response
↓
The response is streamed back to you and stored
What Anthropic receives: Your message text, your name, your group name, and any relevant memories from past conversations.
What Anthropic does NOT do: They do not use your messages to train their AI models (per their API Terms of Service). Data is retained for 30 days for safety monitoring, then deleted.
You control this: You must consent to AI data sharing before using chat. You can withdraw consent at any time in Settings > Privacy.
Alternative: Use Morphee in self-hosted mode with a local AI model to keep all data on your device.
What Happens When Morphee Remembers Things
If you opt in to memory extraction:
After your conversation ends
↓
Morphee's AI extracts facts, preferences, and events
↓
These are stored as "memories" in our database
↓
Memories are converted to numerical embeddings (vectors)
↓
In future chats, relevant memories are injected as context
You control this: You can disable memory extraction in Settings > Privacy. You can also ask the AI to correct or delete specific memories.
What Data Is Stored Where
| Data | Where It's Stored | Who Can Access It |
|---|---|---|
| Your messages | Our database (PostgreSQL) | You and your group members |
| AI memories | Our database (vectors + Git) | Your group's AI context |
| Your account info | Our database + Supabase Auth | Only you (via login) |
| Google Calendar data | Google's servers (via API) | Only when you use the integration |
| Gmail data | Google's servers (via API) | Only when you use the integration |
| Push notification tokens | Our database + Apple/Google | Used to deliver notifications |
What Leaves Your Group
Your data stays within your group by default. Here's what crosses group boundaries:
| Data Flow | Destination | Why | Your Control |
|---|---|---|---|
| Chat messages → Anthropic | United States | AI response generation | Consent required; can use local AI instead |
| Push notification content → Apple/Google | United States | Mobile notification delivery | Generic titles used; opt out of push |
| Auth credentials → Supabase | Varies by hosting | Account authentication | Required for login |
| Calendar/email → Google | United States | Integration features | Only if you connect Google |
What You Can Do
| Right | How |
|---|---|
| See all your data | Settings > Export My Data |
| Delete your account | Settings > Delete Account (permanent, irreversible) |
| Stop memory extraction | Settings > Privacy > Disable memory extraction |
| Withdraw AI consent | Settings > Privacy > Consent Management |
| Disconnect Google | Settings > Integrations > Disconnect |
| Correct AI memories | Ask the AI: "That memory about X is wrong, it should be Y" |
Self-Hosted: Maximum Privacy
When you host Morphee yourself:
- All data stays on your infrastructure
- Use local AI models (via Tauri) — no data sent to cloud AI
- Only external transfers: push notifications (if enabled) and integrations you connect
- You are the data controller — full control over retention, backups, and deletion
For the complete legal privacy policy, see Privacy Policy.