Privacy Policy

Account data

Morph uses Firebase Authentication for account access. Depending on how you sign in, Firebase may process account details from Google, GitHub, or an email-and-password account, such as your email address, profile details, provider identifier, and authentication records.

Product analytics and session replay

The website uses PostHog to understand product usage. This includes product analytics, page activity, device and browser information, and session replay. Replay inputs are masked, and captured network requests and URLs are redacted. We use this information to operate and improve Morph.

Desktop app, CLI agents, and workspaces

Morph is a desktop app that works with BYO CLI coding agents and local workspaces. Local workspaces are designed to run on your machine, and your agent is designed to use your own provider credentials or subscription. These design statements are pending the confirmation described above and are not promises that data never leaves your device.

Optional hosted cloud workspaces run code and workspace content in E2B sandboxes. Content placed in a cloud workspace must be sent to that hosted environment so the workspace can operate.

Sharing

Apps you share can be reached by anyone who holds the share URL. Do not publish secrets or information that should not be available to recipients of that link.

Payments

Stripe processes payments for paid add-ons. Stripe receives the payment and billing information needed to complete a transaction; Morph receives transaction and subscription records needed to provide and administer the purchased feature.

Retention, deletion, and contact

Specific retention and deletion periods are pending legal and operational confirmation. To ask about your data or request deletion, email hello@morph.dev. We will evaluate the request against applicable obligations and system capabilities.