Privacy Policy

Mornel ("Mornel", "we", "our", "the app") is a calm, AI-assisted daily planner, journal, and focus app for iPhone (Android follows the iPhone launch). This policy explains what we collect, why, the legal basis we rely on, who helps us run the service, and the choices and rights you have. We keep it short and plain.

1. Who we are (data controller)

Mornel is operated by FFA Studios (Fahim Fardin Abdulla), an independent studio, which is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws.

• Privacy, support & data-rights requests: support@mornel.app
• Governing law for these arrangements: England & Wales.

We have not appointed a statutory Data Protection Officer, as we are not required to. Privacy requests are handled directly by the studio using the contacts above; a postal contact address is available on request.

2. What we collect

We collect only what we need to run Mornel for you.

a) Account information

• Your email address.
• An authentication identifier — either a securely hashed password (managed by our auth provider, Supabase) or a Sign in with Apple / Google identifier. We never see or store your raw password.
• A random device ID generated on first launch, which lets the app hold your data on your device before you sign in.

b) Your content

• Braindumps and notes, AI-generated plans, tasks, and routines.
• Journal entries, mood selections, and focus sessions.
• Photos you choose to attach to journal entries. We access your photo library only when you pick a photo. We do not use the camera.
• Voice audio: when you use voice capture or dictation, the audio is sent to our AI provider to produce a transcript. We do not store the audio recording — only the resulting text, which becomes part of your content.
• Calendar event titles and times, only if you connect a calendar, so the AI can plan around your commitments. You can disconnect at any time.

Your content is stored under your account so it syncs across your devices. Because journals, moods, and voice notes are free-form, they may contain sensitive details you choose to write. We process that content only to provide the app to you (as set out below) — we do not analyse it to infer things about you, and we never use it for advertising.

c) Social features — only if you use them

Friends, shared plan tags, and the leaderboard are optional and require a signed-in account. If you use them, we additionally process:

• The unique @handle and display name you choose, and your friend connections (requests, accepts, blocks).
• Gentle activity cards shared with your accepted friends: the rounded minute count of a finished focus session (15 minutes or longer), streak milestones, level-ups, and completed-day marks — never your journal text, task titles, or notes.
• Shared tag blocks: when you put a shared tag on a plan block, that block's title, notes, times, and colour become visible to the tag's accepted members, attributed to you.
• A weekly, friends-only leaderboard showing your rank, title band, and XP earned that week.
• A snapshot of your companion's appearance, shown with your profile and cards.
• Presence — whether you were recently active — which you can switch off.
• Reports you file about other users, for moderation.

Three independent switches keep this in your control: anonymous mode (hides your name and avatar), leaderboard opt-out, and presence opt-out. Deleting your account removes your social profile, friend connections, and cards in the same step.

d) Usage analytics — telemetry you control

If you allow it, we collect pseudonymous in-app events — for example, which features are used, which screens are viewed, and session counts — tied to a random analytics ID and not linked to your name, email, or content. These are counts, taps, and screen identifiers — never your journal or plan text, search queries, or other free text — and we do not collect your IP address or location for analytics. We use this only to understand which parts of Mornel help and where people get stuck. We use Amplitude for this. See section 4 for how consent works.

e) Diagnostics and crash reports — telemetry you control

If you allow it, we collect crash reports and performance data so we can find and fix bugs and keep the app stable. We use Sentry for this. See section 4 for how consent works.

f) Purchase status

If you buy Mornel Pro or any one-time item (focus scenes, companion forms, or a bundle pack), we receive a record of what you own and, for subscriptions, when they renew. Payment is handled by the App Store — we never see your card or payment details. We use RevenueCat and Apple to manage entitlements.

g) Technical data

Timestamps, timezone, request identifiers, IP address, and basic error logs, used to keep the service reliable and to prevent abuse.

What we do not collect

We do not collect your location, contacts, health data, or advertising identifiers, and we do not use the camera. We do not track you across other apps or websites, we do not sell or share your personal data for advertising, and we do not use your content to train AI models.

3. Why we use your data, and our legal basis

Under the GDPR and UK GDPR we must tell you the purpose of each kind of processing and the lawful basis we rely on.

• To provide the app — legal basis: performance of our contract with you (Art. 6(1)(b)). We process your account information and your content to authenticate you, generate your plans and run the AI features, save and sync your content, and manage your purchases. This is necessary to provide the service you asked for.
• To keep the service safe and working — legal basis: our legitimate interests (Art. 6(1)(f)). We process technical data for reliability, rate-limiting, and abuse prevention, balanced against your rights, and not involving your journal or plan content.
• Usage analytics and diagnostics (telemetry) — legal basis depends on where you are (see section 4): your consent (Art. 6(1)(a)) where consent is required, and our legitimate interests (Art. 6(1)(f)) with an opt-out elsewhere.
• To meet legal obligations — legal basis: legal obligation (Art. 6(1)(c)), for example responding to a valid data-rights request or a lawful order.

Mornel's AI produces suggestions — a draft plan, a transcript — that you review and can edit or undo. We do not make automated decisions that produce legal or similarly significant effects about you.

4. Analytics & diagnostics — exactly how consent works

This mirrors the control inside the app, so the policy and the product match.

• In the EEA, the UK, and Switzerland, usage analytics (Amplitude) and diagnostics (Sentry) are opt-in — they are OFF by default and stay off until you turn them on. The legal basis is your consent.
• In other regions, analytics and diagnostics are on by default with an opt-out. The legal basis is our legitimate interest in improving and stabilising Mornel, and you can switch them off at any time.

You can change this at any time, in either direction, at Settings → Data & privacy → "Share usage & diagnostics". Turning it off stops further analytics and diagnostics collection going forward; it doesn't affect anything collected beforehand, and the app keeps working normally.

5. Who we share data with (sub-processors)

We don't sell your data and we don't share it for advertising. We do rely on a small set of trusted companies to run the service. Each receives only what it needs for its stated purpose, under a data processing agreement. Items marked (telemetry) receive data only when you've turned on "Share usage & diagnostics"; items marked (optional) only if you use that feature.

• Supabase — authentication (sign-in with email, Apple, or Google). Your content itself is stored with Cloudflare below. supabase.com/privacy
• Cloudflare — backend hosting, edge, and storage of your content; reliability and abuse prevention. cloudflare.com/privacypolicy
• Google (Gemini API) — AI features. Receives the braindump, journal, or note text and voice audio you submit to an AI feature, solely to return your plan or transcript. We do not use your content to train AI models. policies.google.com/privacy
• Amplitude (telemetry) — usage analytics. Receives pseudonymous in-app events (counts, taps, screen/feature identifiers) tied to a random analytics ID, plus basic device/app metadata (app version, OS/device type). IP-address and location collection are turned off, and no name, email, content, free text, or advertising identifier is sent. amplitude.com/privacy
• Sentry (telemetry) — crash reports and diagnostics. Receives crash/error and performance data and device/OS context, scrubbed of personally-identifying data such as IP address, tied to a non-identifying identifier rather than your name. Not intended to carry your journal or plan content. sentry.io/privacy
• RevenueCat — subscriptions and purchases. Receives your purchase status and a purchase identifier so the app unlocks what you own. No card numbers, no content, no advertising identifier. revenuecat.com/privacy
• Apple — App Store purchase/billing, and Sign in with Apple (optional). Apple, not Mornel, handles your card. apple.com/legal/privacy
• Google (Sign-In & Calendar) (optional) — Google Sign-In as a login option, and read access to your Google Calendar event titles and times only if you connect it. policies.google.com/privacy

None of these arrangements involves selling your personal data, and none involves cross-app or cross-site tracking or advertising identifiers.

6. International data transfers

Mornel is operated from the United Kingdom, and some of our sub-processors process data in the United States and other countries outside the UK and EEA. When data is transferred internationally, we rely on a recognised safeguard so it keeps GDPR / UK GDPR-level protection — such as the European Commission's Standard Contractual Clauses (with the UK Addendum / IDTA where relevant), and recognised data-transfer frameworks where a provider offers them — as provided in our agreements with each provider. Email support@mornel.app for detail on the safeguards that apply to a specific transfer.

7. How long we keep data

• Your content is kept while your account is active, and is deleted within 30 days of you deleting your account.
• Usage analytics and diagnostics are kept only as long as needed to improve and stabilise the app — we aim to retain them no longer than about 18 months — after which they are deleted or aggregated into statistics that can no longer identify a device.
• Device-scoped data (the random device ID and anything held locally before sign-in) stays on your device until you clear the app's storage or delete the app.
• Technical logs are kept only as long as needed for reliability and abuse prevention, then deleted.

8. Your rights and choices

If you are in the EEA or the UK you have the rights below, and we honour them for all users wherever we reasonably can:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate data; you can edit most content directly in the app.
• Erasure — delete your account and data from Settings → Account. Your content is removed within 30 days; pseudonymous analytics and diagnostics not linked to your account fall off on the retention schedule above, or sooner on request.
• Portability — you can export your journal as a PDF or Markdown file in the app, and request a copy of your account data from us.
• Restriction — ask us to pause certain processing while a question is resolved.
• Objection — object to processing we carry out on the basis of legitimate interests.
• Withdraw consent — where we rely on consent (analytics and diagnostics), turn it off any time at Settings → Data & privacy → "Share usage & diagnostics".

To exercise any of these, use the in-app controls or email support@mornel.app. We respond within the time the law requires — generally within one month under UK/EU GDPR, and within 45 days under California law. We won't charge you or treat you differently for exercising your rights.

Right to complain. You can lodge a complaint with your data protection authority — in the UK, the Information Commissioner's Office (ICO); in the EEA, the authority in your country. We'd appreciate the chance to resolve it with you first.

9. US privacy rights (including California)

We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA), and we will not. Mornel uses no advertising SDKs and no advertising identifiers (such as the IDFA), and does not track you across other companies' apps or websites.

If you are a California resident, you also have the right to:

• Know what we collect and how we use it (described throughout this policy).
• Access, delete, and correct your personal information.
• Opt out of any sale or sharing — though we don't sell or share. You can also turn off analytics and diagnostics at Settings → Data & privacy.
• Non-discrimination — we won't deny service, change prices, or lower quality for exercising your rights.

To make a request, email support@mornel.app or use the in-app controls; you may use an authorised agent where the law allows. Residents of other US states with comparable laws have equivalent rights and can contact us the same way.

10. Children

Mornel is not directed to children. We do not knowingly collect personal data from children under 13 (United States / COPPA) or, in the EU, under the age set by their member state (between 13 and 16). If you believe a child has provided us personal data, contact support@mornel.app and we will delete it.

11. Security

• Authentication uses industry-standard cryptography; we never store raw passwords.
• Data in transit is encrypted via HTTPS.
• Data at rest is encrypted by our storage providers.
• Access to systems is limited to what is needed to run the service.

No system is perfectly secure, but we work to keep your data safe. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

12. Cookies & the Mornel website

The Mornel marketing website (mornel.app) is a simple, static site. It does not run advertising trackers or set marketing cookies, and it does not require a cookie consent banner. We may use Cloudflare Web Analytics, which is cookieless and privacy-preserving — it measures aggregate page views without tracking individuals across sites and without storing personal data. The in-app analytics described above are separate from, and not affected by, anything on the website.

13. Changes to this policy

We may update this policy as Mornel evolves. If we make a material change, we'll announce it in the app and update the "Last updated" date above. Continued use after a change means you accept the updated policy.

14. Contact

• Privacy, support & data-rights requests: support@mornel.app
• Operated by FFA Studios (Fahim Fardin Abdulla), England & Wales.