Privacy Policy

We collect only what is required to operate Morable:

• Account information — your name, email address, and authentication identifiers provided through our authentication provider (Supabase Auth), including optional Google sign-in.
• Content you create — check-ins, reflections, goals, roadmaps, and other inputs you provide to the app.
• Billing information — subscription status and customer identifiers from Stripe. We never receive or store your full card details.
• Product analytics — anonymized usage events, device and browser metadata, and session replays with sensitive inputs masked, collected via PostHog.

• To generate your personal roadmap, focus, and reflections.
• To operate authentication, billing, and account security.
• To improve reliability and quality of your Morable experience.
• To respond to support requests you send us.

We do not sell your data. We do not share it with advertisers. We do not use your private content to train third-party foundation models.

Morable uses large language models — including models provided by OpenAI — to generate roadmaps, coaching, and reflections. When you use an AI feature, the content required to produce a response is sent to the model provider under a zero-retention data processing agreement. Providers do not use your content to train their models.

A private, evolving Personal Learning Model is maintained inside Morable to remember your patterns, values, and direction. It updates only when there is enough evidence to justify a change and is used solely to improve your next recommendation.

We use PostHog to understand how the product is used and to detect errors. PostHog stores a device identifier in local storage and cookies. Text inputs, passwords, and email fields are masked in session replays. We do not use advertising cookies.

Subscriptions are processed by Stripe. When you subscribe, Stripe collects and stores your payment method on our behalf. We receive only the information needed to manage your subscription: customer ID, plan, status, renewal date, and receipt history.

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted, authenticated, and logged. We use row-level security to isolate every user's data.

We retain your data for as long as your account is active. When you delete your account, your content and Personal Learning Model are permanently removed from our production systems. Limited billing records may be retained where required by law.

You can, at any time:

• Export your data from Settings → Privacy.
• Permanently delete your account from Settings → Account.
• Contact us with questions or requests about your data.

Depending on where you live, you may have additional rights under GDPR, UK GDPR, or CCPA — including the right to access, correct, or restrict processing of your data. Email us to exercise any of these rights.

We rely on a small set of trusted providers to run Morable:

• Supabase — authentication, database, storage
• OpenAI — AI model inference
• Stripe — payments and subscription management
• PostHog — product analytics and session replay
• Cloudflare — hosting and content delivery

Morable is not intended for anyone under 16. We do not knowingly collect information from children.

We may update this Privacy Policy to reflect changes to the product or the law. Material changes will be communicated through the app or by email.

Questions or requests? Email support@morable.ai or visit our Support page.