← back

privacy policy

last updated: july 22, 2026

what we collect

  • account: email + password (or anonymous session id).
  • uploads: photos and reference images you upload.
  • outputs: AI-generated images and videos linked to your account.
  • usage: anonymized analytics events (uploads, swaps, checkouts).
  • payments: handled by Stripe — we never see your card details.

face & biometric data

MORPH does not perform biometric identification, verification, or long-term face recognition. we don't build a face template of you, don't match you against a database, and don't share your face with any third party for identification.

your uploaded image is sent to our AI generation provider (Google via a secure API) purely to produce the output you asked for. it is not used to train third-party models.

minors

MORPH is not intended for children under 13. do not upload photos of minors without a parent/guardian's consent. any content sexualising minors is banned and reported.

how long we keep things

  • uploads + outputs: kept in your library until you delete them or your account is deleted.
  • account data: kept while your account is active.
  • account deletion: within 30 days of request all your data is permanently removed. request via /help.

who we share with

  • Supabase — database, auth, storage
  • Google — AI image / video generation
  • Stripe — payments
  • Cloudflare — hosting

we never sell your data.

your rights (GDPR / CCPA)

you can request access, correction, export, or deletion of your data. use /help.

cookies

we use only what's needed to keep you signed in and understand basic usage. no third-party ad tracking.

contact

data questions → /help.