Archive of a previously published revision. The service description may have changed. Read the current document.
Updated: 30 October 2026
Русская версия · Health data policy · Deletion
This update describes server-side product statistics, database backups, deletion-recovery records, unfinished registration expiry and analysis-allowance records, alongside processing, recipients and deletion options. It does not constitute consent to new processing purposes.
Raisat Ramazanova, an individual developer based in Serbia, operates MorphTrack (also called Morph). MorphTrack is a trade name, not a separate legal entity. Contact: morphtrack.app@gmail.com.
This policy covers the app and website. Our separate Consumer Health Data Privacy Policy explains health-related information.
Photo metadata: uploaded images are re-encoded to remove embedded camera metadata, including GPS tags. We separately retain photo dates and image dimensions for the journal. Re-encoding does not remove information visible in a picture or text you enter.
Account and journal data provide the features you request; purchase records validate subscriptions; support messages let us answer you; limited technical records support operation, security and troubleshooting.
Where GDPR or comparable rules apply, our grounds are performance of the service contract, legitimate interests in security and reliability, legal obligations, and consent for optional processing that requires it. Health data also requires a separate permitted basis under sensitive-data rules. Where explicit consent is required, it must cover the relevant purpose and be obtained separately. Accepting this policy or uploading a photo does not by itself establish that consent. The journal-permission screen in the updated app explains the photos, dates, notes, trackers, factors and optional profile information we process to provide your private journal, and identifies the service providers involved. Continuing records your affirmative journal permission. A separate, initially unchecked choice on the same screen controls optional sharing with OpenAI; you can use the journal without selecting it. These choices are recorded against your account, with the disclosure version and date. Older app versions may not show the journal-permission control; update the app or contact us to exercise these choices.
You may withdraw consent without affecting processing already lawfully carried out. A feature may stop working if it needs the data covered by withdrawal. Controls and requests are described below.
Our server records recent authenticated account activity. Internal dashboards use account identifiers and the dates, counts and status of registrations, photo uploads, trackers, routine marks, analyses and subscriptions to measure active/returning use, feature adoption and subscription conversion. Some reports also group tracker and factor names, including names you enter. Those names can reveal health information. These reports help us understand use of the product and plan improvements; they are separate from website analytics and advertising.
The underlying records are linked to accounts, even when a report displays totals. These product-statistics queries do not inspect photo pixels or analysis text. Internal measurement is a separate purpose from providing your journal: the journal and AI switches do not grant consent to unrelated analytics. Where this processing requires consent, a notice alone does not provide it. To object to product measurement or request a restriction, contact us using the privacy-request procedure below.
AI journal analysis starts when you request it and have enabled AI sharing. We send OpenAI selected photos and dates, tracker name/goal and capture settings, relevant routine/ongoing factors and dates, app language, and previous-analysis context where used. A photo note is included only when marked shareable with AI. Your email and optional profile fields are not included as separate AI inputs; a goal, note or picture can still reveal them.
Results and retained input context remain in your account. Deleting a source photo or changing a note’s sharing setting does not erase a saved analysis or recall a previous provider request. Delete the analysis too, or ask us to delete associated data.
We do not use your journal to train our models. OpenAI’s API does not train on customer inputs/outputs by default. Standard abuse-monitoring retention is up to 30 days, with legal and safety exceptions, including flagged image review. We do not promise zero provider retention. See OpenAI’s data controls.
Turn off future AI sharing in More → About → AI and your data, or contact us. This does not delete past results. AI can be wrong; it is not medical advice and does not make decisions about you with legal or similarly significant effects.
The camera provides preview and capture when you take a photo; library access is used for selected uploads. The optional framing guide is fixed, not face recognition. We do not create faceprints or identify people from photos. AI may describe visible features; that is different from identifying you.
Camera, library and notification permissions are controlled in device settings. The app keeps private local caches and sign-in tokens in device secure storage. Signing out clears app caches; exports and device/OS backups are separate copies under your control.
We do not sell personal or consumer health data, use journal content for advertising, or disclose it for cross-context behavioural advertising. The app has no advertising or usage-analytics SDKs. We do use the server-side product statistics described in section 3; absence of an SDK does not mean absence of analytics. Website analytics is separate.
Providers process data for the relevant service under applicable terms and data-protection arrangements. Some also act independently for payment, account, security or legal obligations. Not every provider acts only as our processor.
Internal access is restricted to authorised support, operations, security, the product statistics described above and legal compliance. Journal content is not public to other users. Limited disclosure may be required by law or necessary to establish or defend legal claims, subject to applicable safeguards.
Processing may occur outside your country, including in Serbia through operation/support, Germany and the US. Where law requires transfer safeguards, these must cover the transfer, such as applicable standard contractual clauses. Contact us for information about safeguards relevant to your data.
We do not promise instant disappearance of every residual/provider copy or an unverified fixed backup lifetime. For an applicable deletion request, we identify relevant copies, instruct recipients where required, and explain lawful exceptions and deadlines. See the deletion procedure.
We use HTTPS, authenticated access, private photo storage and access restrictions. No system is completely secure. Storage is not end-to-end encrypted: the service processes content to provide requested features.
You can edit profile details, delete content, disable future AI sharing, or delete your account in More → Profile → Delete account. For access/export, correction, withdrawal, restriction, objection, deletion or recipient information, email morphtrack.app@gmail.com, subject Privacy request. Rights depend on applicable law.
We verify identity proportionately, preferably through an authenticated account or verified control of its email. We do not require a new account, payment, your password or unnecessary health information. An authorised representative may contact us; we may verify their authority.
Under GDPR, we respond within one month, with a lawful extension explained within that month. Under applicable US consumer-health rules, the usual response period is 45 days; shorter deletion deadlines can apply. See the health policy. We explain refusals and review appeals sent with subject Privacy appeal, within 45 days or an earlier applicable deadline.
You may complain to the authority competent under the law that applies to your case: for example, Serbia’s Commissioner under Serbian data-protection law, the competent supervisory authority under EEA/UK law, or a state’s Attorney General where that US state’s law applies. US complaint channels are not intended as universal destinations for all users. Complaining is optional, and our internal appeal does not limit statutory complaint rights. The Health Data Policy provides further details. We do not discriminate for exercising privacy rights.
MorphTrack is intended for adults 18 and over. Contact us if you believe we hold information from someone under 18 so we can investigate and address it.
We communicate material changes through an appropriate notice, such as in the app or by email. New consent-required purposes require new consent; changing this document does not itself provide it.