Last updated: 2026-08-18
Читать по-русски: Политика конфиденциальности
This Privacy Policy describes how Morph (also referred to as MorphTrack, “we”, “us”, “the app”) collects, uses, and protects your information when you use the app.
The data controller responsible for your personal data is Raisat Ramazanova, an individual developer based in Serbia. Morph / MorphTrack is the app’s trade name, not a legal entity.
Contact for all privacy matters: morphtrack.app@gmail.com.
Photo metadata. Photos from your camera may contain embedded metadata such as the capture date, device model, or GPS location. We automatically remove all such metadata from every photo during upload — the files we store contain no camera metadata and no location data. Photos that cannot be safely re-encoded are rejected rather than stored with metadata.
Morph is a body/skin change tracker, so some of the data you choose to add — photos of your skin or body, notes about them, and optional profile details such as skin type, sleep, or smoking — may reveal information related to your health.
We process this data only to provide the features you use: storing and showing your photos and trackers, and generating the AI analyses you explicitly request. By uploading such photos, adding such details, and starting an AI analysis, you give your explicit consent to this processing. You can withdraw it at any time by deleting the relevant data or your account (see sections 12–12); withdrawal does not affect processing that already happened.
Many people use Morph to follow changes in their skin, so the photographs you take will often show your face. This section explains exactly what that does and does not mean.
What we collect. Ordinary photographs — a still image taken with your camera, or a file you choose from your photo library. Nothing else is captured: the app does not record video, does not read a live camera stream, and does not process the image on your device beyond a crop you perform yourself.
We do not create biometric data. Morph does not generate a face template, face mesh, landmark geometry, faceprint, or any other numerical representation of a face, and it does not perform face detection, face recognition, or face tracking. It does not use ARKit face tracking, the Vision framework, TrueDepth, Face ID, or any comparable technology. The app cannot identify a person from a photograph and does not attempt to. A photograph you have taken is stored and shown back to you as a picture, and nothing is derived from the face in it.
About the framing guide. The camera screen can optionally show an oval outline to help you frame a shot the same way each time. It is drawn at a fixed position calculated only from the size of your screen; it does not read the camera image, does not detect or follow a face, and is not part of the photograph that is saved. It is switched off each time the camera opens and appears only if you turn it on.
How photographs are used. They are stored so that you can look at them, compare them, and see them on your timeline. They are sent for AI analysis only when you ask for one, and only with your explicit consent — see section 5.
Sharing. Photographs are never sold, never used for advertising, and never used to train AI models. The only third party that ever receives them is our AI provider, OpenAI, and only for an analysis you have requested — see sections 5 and 8.
Where they are stored. In Frankfurt, Germany — see section 7.
How long they are kept. For as long as you keep them. A photograph you delete is removed, and deleting your account removes them all — see sections 11 and 12.
We use your information:
We do not:
The app can generate observations about visible changes between your photos (“AI analysis”). This happens only when you explicitly start an analysis — never automatically in the background.
When you run an analysis, the following is sent to our AI provider for processing:
Your optional profile details (age, gender, skin type, and similar) and your email address are not sent to the AI provider.
Our AI provider is OpenAI (USA), acting as our data processor. Under OpenAI’s API terms, data submitted through the API is not used to train their models. Analysis results are stored in your account until you delete the analysis, delete the tracker it belongs to (its analyses are erased together with the tracker, see section 11), or delete your account. Deleting individual photos does not automatically delete analyses that referenced them — you can delete each analysis separately in the app.
AI analyses are generated only at your request, are informational observations only, and are not used to make any automated decision about you that produces legal or similarly significant effects. They can be incomplete or wrong, and they are not medical advice (see the Terms of Use).
If you are located in the European Economic Area or the United Kingdom, we process your information under the following legal bases:
Your photos and account data are stored on secure servers located in Germany (Frankfurt region).
When you run an AI analysis, the data described in section 5 is processed by OpenAI, which may process it in the United States (see section 15).
The app also keeps a local cache of your data (including downloaded photos) on your device so it loads faster; it lives in the app’s private storage and is cleared when you sign out or uninstall the app. Sign-in tokens are kept in your device’s secure storage (Keychain / Keystore).
We use third-party service providers to operate the app:
These providers process information only on our behalf and only as necessary to provide their services to us. We do not allow these providers to use your photos or content for their own purposes.
We share your information with them only under written agreements that require them to protect it to at least the same standard as this policy describes, to use it solely for the purposes set out here, and to keep it confidential.
Your uploaded photos, trackers, notes, and analyses are private to your account and are not visible to other users.
We restrict internal access to user content to the minimum necessary to operate, secure, troubleshoot, or support the app. We do not access your content except when necessary for security, support requested by you, legal compliance, or troubleshooting a technical issue.
The app requests access to your camera or photo library only when you choose to take or upload photos. The app will ask for permission to show notifications the first time a photo reminder is due; you can turn reminders off in the app or in your device settings at any time. You can change any of these permissions in your device settings.
We store your photos, notes, and analysis results until you delete them or delete your account.
When you delete a tracker or a routine factor in the app, it is hidden from your account immediately and permanently erased from our servers within 30 days.
Server logs are retained for up to 90 days, unless a longer period is required for security, fraud prevention, or legal compliance.
You can delete individual photos, notes, trackers, factors, and analyses at any time from within the app.
You may also delete your entire account from within the app (Profile → Delete account), which permanently removes your photos, trackers, routine data, analyses, and account data. Deleted data may remain in encrypted backups for up to 30 days before being permanently removed.
Deleting your account does not cancel an active store subscription — manage subscriptions in your Apple or Google account settings.
See also: account deletion details — including how to request deletion by email, without the app.
Depending on your location, you may have rights to access, correct, delete, export, or object to the processing of your personal information.
Where processing is based on your consent, you may withdraw it at any time — for example by removing profile details, unmarking a note’s “share with AI” setting, deleting the relevant data, or deleting your account. Withdrawal does not affect processing that happened before it.
You can delete your content and account in the app. For other requests, contact us at morphtrack.app@gmail.com.
You also have the right to lodge a complaint with a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik); in the EEA or the UK, the data-protection authority of your country of residence.
We use reasonable technical and organizational measures to protect your information, including encryption in transit, encryption at rest provided by our storage platform, access controls, and private storage for uploaded photos. However, no method of transmission or storage is completely secure.
Depending on your location, your information may be processed in countries other than your country of residence — in particular, data is stored in Germany (EU), and AI analyses are processed by OpenAI in the United States. Transfers to OpenAI are protected by appropriate safeguards, including the standard contractual clauses incorporated into our data processing agreement with OpenAI.
The app is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18.
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated within the app or by email.
For questions, requests, or concerns related to your data, contact us at morphtrack.app@gmail.com.