Privacy policy

The controller under Art. 4(7) GDPR for the app and this website is:

Morning AI E-mail: support@morning-ai.app

For anything about your data, write to this address. We have not appointed a data protection officer.

• Audio stays on your iPhone. Meetings, Day Record and imported phone recordings are recorded and transcribed on the device. There is no upload path for audio in the app.
• Text goes to our server when a feature needs it. Meeting and Day Record transcripts (unless you use Closed Room), the sources you connect for your briefing (calendar, email, health summary, location) and your settings are processed on our server in Frankfurt am Main, Germany.
• AI providers process that text for us: Google Gemini, with Anthropic Claude as a fallback if Gemini is unavailable.
• The free plan shows ads (Google AdMob). Health, email, calendar, meeting and location data are never used for advertising.
• You can export or delete everything in the app: Settings › Account › Export my data / Delete account.

The following is processed only on your device and is not sent to us or to any provider:

• Recorded audio of meetings, voice notes and Day Record. Speech is turned into text on the device (Apple's on-device speech recognition and the WhisperKit model). Meeting recordings are kept on the phone for 30 days so you can play them back (you can turn this off in Settings or delete them earlier). Day Record keeps a rolling 48-hour audio archive and the audio of each conversation for 7 days.
• Closed Room (iOS 26, supported iPhones with Apple Intelligence): the meeting or Day Record analysis is done by Apple's on-device Foundation Models. The text and the result stay on the phone; Day Record text there is deleted after 90 days.
• Imported phone recordings (files you choose, e.g. from iOS Local Capture) and their transcripts stay on the device and are not added to briefings automatically.
• Voice recognition of known speakers (off by default; not offered in Illinois): a voiceprint — a numeric summary of how a voice sounds — and a short sample are kept only on the device, excluded from iCloud backup, and deleted when you remove them, withdraw consent, or after 12 months in which that voice was not heard. We only receive the date and version of your acceptance of the notice and a count of automatic deletions.
• Night sound detection (snoring, coughing) with Apple's Sound Analysis. Short clips stay on the phone for 7 days. Your sleep score is calculated on the device.
• Home pause zone for Day Record (optional): if you turn it on, iOS watches one 150 m region around your home with "Always" location permission so Day Record pauses there. The coordinate stays on the device; no location history is created.
• On-device voice for the evening review (Supertonic) and the word timing of your briefing (WhisperKit).

Two exceptions where Apple, not we, may process audio: voice input to the in-app assistant and the spoken alarm task use iOS speech recognition, which may send the audio to Apple depending on your device and settings (Apple's privacy policy). Speech models (WhisperKit) are downloaded from Hugging Face, which sees your IP address during the download.

Depending on what you use, our server (hosted by Render in Frankfurt am Main) processes:

• Account: name, e-mail address, sign-in identifier (Sign in with Apple, Google, or e-mail with a hashed password), language, time zone, subscription tier.
• Settings and alarms: alarm times, briefing sections and their order, voices, news topics and sources, sports teams, birthdays you enter, your zodiac sign if you use that section (your birth date is not stored), prayer times and religious content if you turn them on, home and work addresses if you enter them.
• Location: the coordinates of your phone, sent while you use the app (or that you pick by hand), for weather, prayer times, your news edition and travel times. Only the latest position is kept. Home, work and meeting addresses are sent to Google Maps only to calculate a route.
• Calendar and reminders (only if you turn the source on): from your iPhone, today's and tomorrow's events (title, time, location, attendee names) and open reminders, sent as one snapshot that each sync replaces. From Google Calendar (if connected) the same, read through Google's API. Events or reminders are only created when you confirm them.
• E-mail (only if you connect a mailbox): sender, subject and a preview of recent messages from Gmail (read-only; draft creation only if you grant it — drafts are never sent), Microsoft Outlook (Mail.Read, User.Read, offline_access; where offered) or an IMAP mailbox. Access tokens and IMAP credentials are stored encrypted.
• Apple Health (read-only, only if you allow it): a summary of sleep stages, heart rate, heart-rate variability, blood oxygen, respiratory rate, steps, active energy and workouts for your briefing and evening review, and — if you use sleep tracking — the measurements of each night. We never write to Apple Health.
• Meetings: the transcript text (never the audio), speaker names you assign, and the results: summary, decisions, action items, suggested events and drafts; questions you ask about a meeting.
• Day Record (Gün Kaydı, Tagesaufnahme): the text of each conversation of the day and its analysis, unless you use Closed Room; plus technical health figures of the recording (running time, pauses, battery — no content). With "Only my voice in calls" (off by default) only your own side of a phone call is written; the other party's audio is never available to the app.
• Briefings and evening reviews: the texts we generate from your sources, the audio we synthesise from them, listening events (played, skipped, alarm dismissed or snoozed), saved moments, open items you carry to tomorrow.
• Assistant and memory: questions you send to the assistant (we store only the time of each message for rate limits, not its content) and memory notes you keep in Settings › Memory.
• Notion (optional): action items you choose to send to your Notion workspace, and the access token for it.
• Notifications: your device's push token.
• Subscriptions: via RevenueCat — product, transaction IDs, start and expiry dates, trial and renewal status. We never see your payment details.
• Support and e-mails we send: messages you write to us; transactional e-mails (sign-in codes, password reset, welcome, data export link).

Briefings, evening reviews, meeting and Day Record summaries, the assistant, sleep insights and article ranking are written by large language models. The text needed for each task — for example a transcript, your calendar events, e-mail previews, a health summary or your location's weather — is sent from our server to Google Gemini (Google's Gemini API). If Gemini fails, the same request goes to Anthropic Claude. Briefing audio is synthesised by Gemini text-to-speech from the briefing text.

We use the Gemini API on a paid (billed) Google Cloud project. Under Google's terms for paid Gemini API services, Google does not use our prompts or responses to improve its products; it may keep them for a limited time to detect abuse. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models by default.

AI output can be wrong or incomplete. It is not used to make decisions about you that have legal or similarly significant effects (Art. 22 GDPR). Personalisation — which news, which order, what to remind you of — is based on your settings and listening events.

• Firebase Analytics (Google): screen views and app events (e.g. briefing played, alarm dismissed), linked to your account ID and an app-instance ID, to understand which features work. Data is kept according to the Google Analytics retention setting of our Firebase project.
• Sentry (EU data region, Germany): crash reports and performance traces of the app and the server (about 10 % of sessions are traced). Personal data is not attached by default, screenshots are off; your account ID is attached so a crash can be matched to a support request.
• Google AdMob (free plan only): rewarded ads you choose to watch. In the EEA, the UK and Switzerland Google's consent form asks whether ads may be personalised; on iOS the App Tracking Transparency prompt asks whether the advertising identifier (IDFA) may be used. Without your consent ads are not personalised, but AdMob still processes device information, IP address and ad interactions to deliver ads, limit frequency and prevent fraud. Paid plans show no ads.

These providers process personal data on our behalf (Art. 28 GDPR) or, where stated, as independent controllers:

Public data sources are queried by our server without your account data, only with the place, station or topic needed: Open-Meteo (weather), Deutsche Bahn timetable via transport.rest, Diyanet and the adhan library (prayer times), news publishers' RSS feeds and Google News, CoinGecko, Yahoo Finance, football-data.org, Wikimedia and religious-text APIs.

Several providers are based in the USA or may process data there. Transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified under it (Art. 45 GDPR), and otherwise on the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of the safeguards.

On our server, deletion runs automatically every night. Deleting your account removes everything listed here at once.

On your iPhone: meeting audio 30 days; Day Record archive 48 hours, conversation audio 7 days, Closed Room Day Record text 90 days; night-sound clips 7 days; voiceprints until deleted or 12 months unheard; imported phone recordings and Closed Room meeting notes until you delete them. Deleting the app removes all of it.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) — in particular to processing based on legitimate interests. You can withdraw any consent at any time with effect for the future (Art. 7(3)), for example by turning a source off, disconnecting an account, or in iOS Settings.

• Export: Settings › Account › Export my data. We e-mail you a link to a JSON file with your data; the link works for 7 days.
• Delete: Settings › Account › Delete account. Your account and its server-side data are deleted at once; stored audio files follow through a deletion job shortly after, and connected Google access is revoked. Apple and RevenueCat keep their own purchase records. In Day Record you can also forget all of today's recording or the last 10 minutes. Cancel a subscription separately in your Apple ID settings.
• Anything else: write to support@morning-ai.app.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. You can also contact the competent data protection supervisory authority in Germany.

Recordings, e-mails and calendar entries contain other people's names and words. We process them only to provide your notes, briefing and reminders, keep them for the periods above, and never use them for advertising or to build profiles of those people. If you record people, you must tell them where the law requires it — see our terms. People who appear in a user's data can exercise their rights with us at the address above (Art. 14 GDPR).

An account (name or e-mail) is needed to use the app, because briefings and notes are tied to it. Everything else — location, calendar, e-mail, health, microphone, notifications, ads consent — is optional; without it the related feature does not work or works with less information.

Morning AI is not directed at children. You must be at least 16 years old to use it. We do not knowingly process data of children; if you believe a child has given us data, write to us and we will delete it.

Connections use TLS. Mail tokens and IMAP credentials are encrypted on our server. On the iPhone, recordings live in the app's private storage protected by iOS Data Protection. No system is perfectly secure; if a breach affects you, we will inform you as the law requires.

morning-ai.app is hosted by Vercel. When you visit, Vercel processes your IP address, the page requested, time, browser and referrer in server logs to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The site sets one cookie, NEXT_LOCALE, to remember the language you chose (one year). There is no analytics, no tracking and no advertising on the website; fonts are served from our own domain.

We update this policy when the app changes. The date at the top shows the current version; important changes are announced in the app.