Privacy Policy · Mornel

Mornel ("Mornel", "we", "our", "the app") is a calm, AI-assisted daily planner, journal, and focus app for iPhone (Android follows the iPhone launch). This policy explains what we collect, why, the legal basis we rely on, who helps us run the service, and the choices and rights you have. We keep it short and plain.

1. Who we are (data controller)

Mornel is operated by FFA Studios (Fahim Fardin Abdulla), an independent studio, which is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws.

Privacy, support & data-rights requests: support@mornel.app
Governing law for these arrangements: England & Wales.

We have not appointed a statutory Data Protection Officer, as we are not required to. Privacy requests are handled directly by the studio using the contacts above; a postal contact address is available on request.

2. What we collect

We collect only what we need to run Mornel for you.

a) Account information

Your email address.
An authentication identifier: either a securely hashed password (managed by our auth provider, Supabase) or a Sign in with Apple / Google identifier. We never see or store your raw password.
A random device ID generated on first launch, which lets the app hold your data on your device before you sign in.

b) Your content

Braindumps and notes, AI-generated plans, tasks, and routines.
Journal entries, mood selections, and focus sessions.
Photos you choose to attach to journal entries. We access your photo library only when you pick a photo. We do not use the camera.
Voice audio: when you use voice capture or dictation, the audio is sent to our AI provider to produce a transcript. We do not store the audio recording, only the resulting text, which becomes part of your content.
Calendar event titles and times, only if you connect a calendar, so the AI can plan around your commitments. You can disconnect at any time.

Your content is stored under your account so it syncs across your devices. Because journals, moods, and voice notes are free-form, they may contain sensitive details you choose to write. We process that content only to provide the app to you (as set out below). We do not analyse it to infer things about you, and we never use it for advertising.

c) Social features: only if you use them

Friends, shared plan tags, and the leaderboard are optional and require a signed-in account. If you use them, we additionally process:

The unique @handle and display name you choose, and your friend connections (requests, accepts, blocks).
Gentle activity cards shared with your accepted friends: the rounded minute count of a finished focus session (15 minutes or longer), streak milestones, level-ups, and completed-day marks, never your journal text, task titles, or notes.
Shared tag blocks: when you put a shared tag on a plan block, that block's title, notes, times, and colour become visible to the tag's accepted members, attributed to you.
A weekly, friends-only leaderboard showing your rank, title band, and XP earned that week.
A snapshot of your companion's appearance, shown with your profile and cards.
Presence: whether you were recently active, which you can switch off.
Reports you file about other users, for moderation.

Three independent switches keep this in your control: anonymous mode (hides your name and avatar), leaderboard opt-out, and presence opt-out. Deleting your account removes your social profile, friend connections, and cards in the same step.

d) Meta advertising attribution

Mornel for iPhone includes Meta's CoreKit SDK so we can measure whether advertising for Mornel on Facebook or Instagram leads to an install or a later app open. Version 1.0.1 only activated this after you allowed tracking. From version 1.0.2 the measurement runs for every install: Meta receives an install event and an app-open ("activation") event, Apple's SKAdNetwork attribution signal, a pseudonymous identifier generated for that app installation, session timing, and basic app, device, operating-system, and SDK diagnostic information.

Mornel never reads or shares Apple's advertising identifier (IDFA), keeps Meta's automatic in-app event and purchase logging switched off, and does not expose custom Meta event logging to the rest of the app. Through this integration we do not send Meta your name, email address, Mornel account ID, journal or plan content, voice audio, photos, purchase history, or feature-use events.

Apple's "Allow Tracking" prompt does not switch this measurement on or off. It only controls whether those events are flagged as tracking-allowed; choosing "Ask App Not to Track" flags them as not allowed, and Meta treats them as not permitted for cross-app tracking. To stop the measurement itself, turn off Ad measurement in Settings → Data & privacy (turning off Share usage & diagnostics stops it too): Mornel then sends no further install or app-open events to Meta, and Meta's SDK is not loaded at all on later launches while either switch is off. Events the SDK had already queued before you switched it off may still be delivered.

Meta CoreKit's Apple privacy manifest declares a linked Device ID used for tracking and for third-party advertising, analytics, and app-functionality purposes, and Mornel's App Store privacy label reflects this. This attribution flow is separate from the Amplitude and Sentry control described below.

e) Usage analytics: telemetry you control

If you allow it, we collect pseudonymous in-app events: for example, which features are used, which screens are viewed, and session counts, tied to a random analytics ID and not linked to your name, email, or content. These are counts, taps, and screen identifiers, never your journal or plan text, search queries, or other free text, and we do not collect your IP address or location for analytics. We use this only to understand which parts of Mornel help and where people get stuck. We use Amplitude for this. See section 4 for how consent works.

f) Diagnostics and crash reports: telemetry you control

If you allow it, we collect crash reports and performance data so we can find and fix bugs and keep the app stable. We use Sentry for this. See section 4 for how consent works.

g) Purchase status

If you buy Mornel Pro or any one-time item (focus scenes, companion forms, or a bundle pack), we receive a record of what you own and, for subscriptions, when they renew. Payment is handled by the App Store. We never see your card or payment details. We use RevenueCat and Apple to manage entitlements.

h) Technical data

Timestamps, timezone, request identifiers, IP address, and basic error logs, used to keep the service reliable and to prevent abuse.

What we do not collect or send for advertising

We do not request your contacts, health data, or precise GPS location, and we do not use the camera. We do not access Apple's IDFA, and Mornel does not display third-party ads. We never send your journal, plans, notes, voice audio, photos, account details, or purchases to Meta or use that content for advertising. The limited future Meta attribution flow described above would measure advertising for Mornel itself. We do not use your content to train AI models.

3. Why we use your data, and our legal basis

Under the GDPR and UK GDPR we must tell you the purpose of each kind of processing and the lawful basis we rely on.

To provide the app, legal basis: performance of our contract with you (Art. 6(1)(b)). We process your account information and your content to authenticate you, generate your plans and run the AI features, save and sync your content, and manage your purchases. This is necessary to provide the service you asked for.
To keep the service safe and working, legal basis: our legitimate interests (Art. 6(1)(f)). We process technical data for reliability, rate-limiting, and abuse prevention, balanced against your rights, and not involving your journal or plan content.
Usage analytics and diagnostics (telemetry), legal basis depends on where you are (see section 4): your consent (Art. 6(1)(a)) where consent is required, and our legitimate interests (Art. 6(1)(f)) with an opt-out elsewhere.
Advertising measurement in a future Meta-enabled version: the required legal basis and user controls depend on where you are. We will not enable this processing where consent or another permission is required unless and until that requirement is met.
To meet legal obligations, legal basis: legal obligation (Art. 6(1)(c)), for example responding to a valid data-rights request or a lawful order.

Mornel's AI produces suggestions such as a draft plan or a transcript that you review and can edit or undo. We do not make automated decisions that produce legal or similarly significant effects about you.

4. Amplitude analytics & Sentry diagnostics: exactly how consent works

This section covers Amplitude and Sentry and mirrors their control inside the app. It does not cover the future Meta attribution described in section 2(d), which is a separate release-gated flow.

In the EEA, the UK, and Switzerland, usage analytics (Amplitude) and diagnostics (Sentry) are opt-in. They are OFF by default and stay off until you turn them on. The legal basis is your consent.
In other regions, analytics and diagnostics are on by default with an opt-out. The legal basis is our legitimate interest in improving and stabilising Mornel, and you can switch them off at any time.

You can change this at any time, in either direction, at Settings → Data & privacy → "Share usage & diagnostics". Turning it off stops further analytics and diagnostics collection going forward; it doesn't affect anything collected beforehand, and the app keeps working normally.

5. Companies that receive data

We do not sell your data. We rely on a small set of companies to provide and measure the service. Their legal role can vary by service, contract, and jurisdiction, so we describe the actual data flow rather than treating every company as the same kind of sub-processor. Items marked (telemetry) receive data only according to the control described in section 4; items marked (optional) only if you use that feature.

Supabase: authentication (sign-in with email, Apple, or Google). Your content itself is stored with Cloudflare below. supabase.com/privacy
Cloudflare: backend hosting, edge, and storage of your content; reliability and abuse prevention. cloudflare.com/privacypolicy
Google (Gemini API): AI features. Receives the braindump, journal, or note text and voice audio you submit to an AI feature, solely to return your plan or transcript. We do not use your content to train AI models. policies.google.com/privacy
Amplitude (telemetry): usage analytics. Receives pseudonymous in-app events (counts, taps, screen/feature identifiers) tied to a random analytics ID, plus basic device/app metadata (app version, OS/device type). IP-address and location collection are turned off, and no name, email, content, free text, or advertising identifier is sent. amplitude.com/privacy
Sentry (telemetry): crash reports and diagnostics. Receives crash/error and performance data and device/OS context, scrubbed of personally-identifying data such as IP address, tied to a non-identifying identifier rather than your name. Not intended to carry your journal or plan content. sentry.io/privacy
RevenueCat: subscriptions and purchases. Receives your purchase status and a purchase identifier so the app unlocks what you own. No card numbers, no content, no advertising identifier. revenuecat.com/privacy
Apple: App Store purchase/billing, and Sign in with Apple (optional). Apple, not Mornel, handles your card. apple.com/legal/privacy
Google (Sign-In & Calendar) (optional): Google Sign-In as a login option, and read access to your Google Calendar event titles and times only if you connect it. policies.google.com/privacy
Google user data and Limited Use: if you connect Google Calendar, Mornel requests read-only access to your calendar events (the Google Calendar read-only scope) and your Google account email. We use event titles and times only to show your day in the app and to let the assistant plan around your commitments. We do not use this data for advertising, we do not sell it, we do not share it with anyone except as needed to run the app, and no human reads it except with your permission, for security, or to comply with the law. Encrypted access tokens are stored on our servers so the connection stays live; disconnecting in Settings deletes them. Mornel's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Meta Platforms (future advertising measurement; separate from the telemetry switch): if the release gate described in section 2(d) is completed, Meta would receive the limited install, activation, session, device, and SDK information described there so we can measure advertising for Mornel on Facebook and Instagram. The integration is configured without IDFA, Meta Login, automatic purchase events, custom feature-use events, or Mornel account and content data. facebook.com/privacy/policy

No company receives your journal or plan content for advertising. The future Meta attribution described above is the only advertising-measurement flow we have prepared; Mornel does not access IDFA or display third-party ads.

YouTube API Services

Mornel uses YouTube API Services in an internal tool. The tool uploads Mornel's own videos to our own YouTube channel (Mornel, @Mornel_App) and reads the view and like counts of those videos. It does not access, collect, store, or share YouTube data about anyone else, and it is not part of the Mornel app.

YouTube's Terms of Service apply: youtube.com/t/terms
Google's Privacy Policy explains how Google handles data: policies.google.com/privacy
Any YouTube data we read about our own videos is kept for no more than 30 days.
You can remove this tool's access to a Google account at any time at security.google.com/settings/security/permissions, and you can ask us to delete any data by emailing support@mornel.app.

6. International data transfers

Mornel is operated from the United Kingdom, and some of the companies listed in section 5 process data in the United States and other countries outside the UK and EEA. When data is transferred internationally, we rely on a recognised safeguard so it keeps GDPR / UK GDPR-level protection, such as the European Commission's Standard Contractual Clauses (with the UK Addendum / IDTA where relevant), and recognised data-transfer frameworks where a provider offers them, as provided in our agreements with each provider. Email support@mornel.app for detail on the safeguards that apply to a specific transfer.

7. How long we keep data

Your content is kept while your account is active, and is deleted within 30 days of you deleting your account.
Usage analytics and diagnostics are kept only as long as needed to improve and stabilise the app, we aim to retain them no longer than about 18 months, after which they are deleted or aggregated into statistics that can no longer identify a device.
Device-scoped data (the random device ID and anything held locally before sign-in) stays on your device until you clear the app's storage or delete the app.
Technical logs are kept only as long as needed for reliability and abuse prevention, then deleted.
Future Meta attribution data, if that release gate is completed, would be retained by Meta according to the retention criteria in Meta's privacy policy. Those criteria vary according to the service, legal obligations, and safety and integrity needs; we do not state an unverified fixed period for Meta's systems.

8. Your rights and choices

If you are in the EEA or the UK you have the rights below, and we honour them for all users wherever we reasonably can:

Access: get a copy of the personal data we hold about you.
Rectification: correct inaccurate data; you can edit most content directly in the app.
Erasure: delete your account and data from Settings → Account. Your content is removed within 30 days; pseudonymous analytics and diagnostics not linked to your account fall off on the retention schedule above, or sooner on request.
Portability: you can export your journal as a PDF or Markdown file in the app, and request a copy of your account data from us.
Restriction: ask us to pause certain processing while a question is resolved.
Objection: object to processing we carry out on the basis of legitimate interests.
Withdraw consent: where we rely on consent (analytics and diagnostics), turn it off any time at Settings → Data & privacy → "Share usage & diagnostics".
Object to advertising measurement: email support@mornel.app. The “Share usage & diagnostics” switch controls Amplitude and Sentry, not the separate future Meta attribution flow. You may also use Meta's own privacy controls for activity it receives from businesses.

To exercise any of these, use the in-app controls or email support@mornel.app. We respond within the time the law requires, generally within one month under UK/EU GDPR, and within 45 days under California law. We won't charge you or treat you differently for exercising your rights.

Right to complain. You can lodge a complaint with your data protection authority: in the UK, the Information Commissioner's Office (ICO); in the EEA, the authority in your country. We'd appreciate the chance to resolve it with you first.

9. US privacy rights (including California)

We do not sell your personal information. Mornel does not access IDFA or display third-party ads. If the future Meta release gate described above is completed, we would send the limited install and activation data described above to Meta to measure advertising for Mornel. Depending on the law that applies to you, that disclosure may be treated as “sharing” or targeted advertising. You may contact us to exercise any applicable opt-out right, and we will assess and respond to the request as the law requires.

If you are a California resident, you also have the right to:

Know what we collect and how we use it (described throughout this policy).
Access, delete, and correct your personal information.
Opt out of any sale or sharing covered by applicable law. We do not sell personal information. You can turn off Amplitude analytics and Sentry diagnostics at Settings → Data & privacy, or contact us about the future Meta advertising-measurement flow.
Non-discrimination: we won't deny service, change prices, or lower quality for exercising your rights.

To make a request, email support@mornel.app or use the in-app controls; you may use an authorised agent where the law allows. Residents of other US states with comparable laws have equivalent rights and can contact us the same way.

10. Children

Mornel is not directed to children. We do not knowingly collect personal data from children under 13 (United States / COPPA) or, in the EU, under the age set by their member state (between 13 and 16). If you believe a child has provided us personal data, contact support@mornel.app and we will delete it.

11. Security

Authentication uses industry-standard cryptography; we never store raw passwords.
Data in transit is encrypted via HTTPS.
Data at rest is encrypted by our storage providers.
Access to systems is limited to what is needed to run the service.

No system is perfectly secure, but we work to keep your data safe. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

12. Cookies & the Mornel website

The Mornel marketing website (mornel.app) is a simple, static site. It does not run advertising trackers or set marketing cookies, and it does not require a cookie consent banner. We may use Cloudflare Web Analytics, which is cookieless and privacy-preserving, meaning it measures aggregate page views without tracking individuals across sites and without storing personal data. The in-app analytics described above are separate from, and not affected by, anything on the website.

13. Changes to this policy

We may update this policy as Mornel evolves. If we make a material change, we'll announce it in the app and update the "Last updated" date above. Continued use after a change means you accept the updated policy.

14. Contact

Privacy, support & data-rights requests: support@mornel.app
Operated by FFA Studios (Fahim Fardin Abdulla), England & Wales.