Last updated: August 2, 2026
We collect information you provide directly, including your email address, name, and sleep data you log in the app (bedtimes, wake times, quality scores, and notes). We also collect usage data such as sessions played and habits tracked. Morpheo includes sleep content made for children, which plays from the account holder's own account: we never ask for or store any information about the child, and we do not create accounts for children.
We use your information to provide and improve the Service, calculate your personal sleep metrics (sleep debt, energy schedule), send you the emails described below, and deliver sleep insights personalized to your data.
Your data is stored securely using Supabase (PostgreSQL), hosted on AWS infrastructure in the United States (Oregon, us-west-2). Our email provider (Resend) and our payment processor (Stripe) also process data outside your country. This means that if you use Morpheo from outside the United States, your data is transferred and stored there. We implement industry-standard security measures including row-level security and encrypted connections.
Payment processing is handled entirely by Stripe, Inc. We never store your credit card numbers or payment details — they are collected and processed directly by Stripe. Stripe's privacy policy governs the handling of your payment information.
We send two kinds of email. Transactional emails are necessary to operate your account and cannot be turned off: your access link, your welcome email, delivery of anything you purchase, password resets, and the notice we send before your first monthly charge. Promotional emails — a reminder if you start checkout without finishing, an offer if you cancel, and your weekly sleep summary — carry an unsubscribe link in every message, and one click stops them for good. Email delivery is handled by Resend.
We do not sell your personal data. We share data only with service providers necessary to operate the platform (Supabase for database, Stripe for payments, Resend for email). We also send Meta (Facebook) a record of purchases made through our advertising, so that we can measure which ads work; your email address is sent hashed, never in the clear, together with the advertising identifiers described in the Cookies section. These providers are contractually bound to protect your data.
You have the right to access, correct, or delete your personal data, including your account and everything logged in it, at any time. To exercise any of these rights, email us at hello@morpheo.space from the address on your account. We will complete the request within 30 days.
We retain your data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days, except where retention is required by law.
We use session cookies necessary for authentication. On pages where you can pay, Stripe sets its own cookies (__stripe_mid and __stripe_sid) to detect fraud; they are required for the payment form to work and are governed by Stripe's privacy policy. On our quiz and checkout pages — but never inside the app once you are signed in — we load the Meta (Facebook) pixel, which sets advertising cookies (_fbp and _fbc) so that we can tell which ad brought you here and measure whether our advertising works. We load no other analytics or advertising scripts.
For users in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD). You have the right to confirm the existence of processing, access your data, correct incomplete data, and request deletion. Contact hello@morpheo.space for LGPD requests.
We may update this Privacy Policy periodically. We will notify you of significant changes via email. Continued use of the Service constitutes acceptance of the updated policy.
For privacy inquiries, contact us at hello@morpheo.space.