Privacy Policy

Last updated: August 3, 2026

1. Introduction

Morph Fit ("we", "our", "us") is operated by Holden Spitznagle. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and related services.

2. Information We Collect

Account information: email address, username, password, display name, and profile picture
Workout data: exercise logs, sets, reps, weights, workout duration, personal records, and body weight (if you choose to log it)
AI interactions: conversations with the AI trainer, training preferences, goals, injury information, and equipment preferences
Apple Health (HealthKit) data: if you connect Apple Health, we read workouts, heart rate and heart rate variability, resting heart rate, active energy, walking/running, cycling and swimming distance, step count, and sleep. See Section 6.
Contacts: if you use "Find Your People", the app compares scrambled (hashed) identifiers derived from your contacts. Contact names never leave your device. See Section 7.
Location: if you grant location access, your device checks whether you are at one of your saved places (home, gym, work). See Section 8.
Referral information: referral codes used and payout email address (if you participate in the referral program)
Automatic data: device type and identifiers, usage data, log data (IP address, access times), subscription/transaction data, and push notification delivery data

3. How We Use Your Information

To provide, maintain, and improve the Morph Fit service
To track your workouts, progress, and fitness goals
To enable social features such as friends, leaderboards, live workouts, and shared workouts
To provide AI-powered workout recommendations and personalized training insights
To estimate recovery/readiness and schedule training using Apple Health data
To process your subscription and payments
To send transactional emails and relevant notifications about your activity
To detect and prevent fraud or abuse, and to generate anonymized, aggregate statistics

4. Third-Party Services

We do not sell your personal information. We share data with the following service providers only as needed to operate the app, and each has its own privacy policy:

Cloudinary: image hosting for profile pictures and workout photos
RevenueCat & Apple: subscription management and payment processing
OpenAI, Anthropic, and Google: AI providers that generate workout recommendations and AI trainer responses. They act as processors on our behalf and do not use your data for their own purposes or to train their models. See Section 5.
OneSignal: push notification delivery
Resend: transactional email delivery (password resets, email verification)
OpenStreetMap (Overpass API): when you request a nearby-walk suggestion, your device queries this service directly to find nearby walking routes. See Section 8.

Certain fitness data may be visible to other users based on your privacy settings (e.g., friends, leaderboards, live workouts).

5. AI-Powered Features

Morph Fit uses AI to provide personalized workout suggestions and an AI trainer chat. When you use AI features, the following may be sent to our AI providers to generate recommendations: your workout history, profile information (experience level, goals, equipment), the workout being planned, your AI trainer profile (preferences and injury information), previous conversation context, and a derived recovery/readiness summary from Apple Health (your readiness score and the signals behind it — heart rate variability, resting heart rate, and sleep).

We do not send your raw Apple Health data to AI providers, we do not use your data to train AI models, and AI providers do not use your data for their own purposes. AI features are available to Pro subscribers, with a daily usage limit, and can be disabled in Settings.

6. Apple Health (HealthKit)

If you connect Apple Health, Morph reads the data types listed in Section 2 through Apple's HealthKit framework, only after you grant permission on Apple's Health permission screen. We use this data solely to provide app features — scheduling cardio around your lifts, estimating training load and readiness, prescribing mobility, and showing your fitness trends. This data is stored on our secure servers and linked to your account so these features work across your devices.

We never use Apple Health data for advertising or marketing
We never sell it or share it with data brokers, and never share it with third parties for their own purposes
We use read-only access and do not write any data back to Apple Health

You can revoke access at any time in the iOS Settings app under Privacy & Security → Health → Morph, or by disconnecting Apple Health in the app. Deleting your account deletes your synced Health data.

7. Contacts (Find Your People)

"Find Your People" helps you see which of your contacts already use Morph and invite the rest. Contacts are read on your device; names and raw phone numbers/emails never leave your phone. The app uploads only one-way scrambled (SHA-256 hashed) identifiers, which we match against other users' hashes. You can disconnect at any time in Settings, which immediately deletes the uploaded hashes. Deleting your account also deletes them.

8. Location

If you grant location access, your device checks whether you are at one of your saved places (home, gym, work) so the day's suggestion fits what you have access to. Your saved-place profiles are stored on our servers, but your raw coordinates are not sent to or stored by Morph's servers. When you request a nearby-walk suggestion, your device queries the OpenStreetMap Overpass API directly for nearby routes; those coordinates are sent to OpenStreetMap for that lookup only. You can revoke location access at any time in iOS Settings.

9. Subscription

Morph Fit offers a subscription at $9.99/month with a 7-day free trial. Payment is processed securely by RevenueCat and our payment provider. You can cancel at any time from the Subscription page in the app or the manage link in your receipt emails. Subscriptions purchased through the Apple App Store before we moved to web billing can be cancelled through your App Store settings.

10. Data Security

We use industry-standard security measures including encrypted (HTTPS) connections and secure password hashing (bcrypt). However, no method of electronic transmission or storage is 100% secure.

11. Data Retention & Deletion

We retain your information for as long as your account is active. You can delete your account and all associated data at any time from within the app (Profile → Edit Profile, or Settings → Privacy). When you delete your account, we permanently delete your personal information — including workouts, Apple Health data, contact hashes, and saved places — within 30 days, except where we are required to retain limited records for legal or financial purposes.

12. Children's Privacy

Morph Fit is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can remove it.

13. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. You can delete your account and update your privacy settings directly in the app, or contact us to exercise these rights.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or by email and update the "Last updated" date above.

Contact Us

If you have questions about this Privacy Policy, contact us at:
morphfitnessapp@gmail.com