This policy applies to residents of the state of Washington, in the United States, and to residents of other states with similar laws, such as Nevada and Connecticut. It supplements our Privacy Policy, which remains fully in effect, and brings together what these laws require to be stated separately about health data. Questions and requests: contact@morphihealth.com. This is a translation of the original in Portuguese and has the same validity; if the two ever differ, the reading most favorable to you prevails.
1. Who we are
Morphi is offered by The Delusional Company Desenvolvimento de Software sob Encomenda Ltda., registered in Brazil under CNPJ no. 67.758.390/0001-34, headquartered at Rua Carvalho de Freitas, 325, Vila Andrade, São Paulo/SP, CEP 05728-030, Brazil. Contact channel: contact@morphihealth.com.
2. The health data we collect
We only collect what you log in the app, what you authorize us to read and what we calculate from that:
- Body measurements — height, weight, measurements such as your waist, and vital signs.
- Treatment — the medication, the dose, administration dates and sites, and your medication containers.
- Symptoms and well-being — the check-ins: symptoms, sleep, hunger, mood, energy, water, protein and movement, including what you write in the "Other" field.
- Lab tests and reports — the results you save, and the lab report file when you ask for it to be read (we do not keep the file).
- Health history — the conditions, allergies and medications you report, and dietary restrictions.
- Food and exercise — meals with the items on the plate, the meal photo when you ask for it to be read (we do not keep the photo), water and workouts.
- From your phone’s health app — weigh-ins, workouts and, on iPhone, exercise minutes, only with your authorization.
- Notes and documents — what you write and attach in the journal.
- Your questions to Morphi Intelligence — they stay only on your device; the question goes to artificial intelligence to generate the answer (section 5).
We do not collect your location: when you ask for the nearest clinics, the device uses it to calculate the distance and discards it, without sending it. We do not use geofencing around places where health care is provided.
3. What we use it for
- Building your tracking — weight and measurement curves, the dose cycle, adherence, daily goals and the patterns in your symptoms.
- Keeping your journal in your account — so it isn’t lost when you switch devices.
- Organizing the appointment summary you take to your doctor.
- Artificial intelligence features — the conversation, the weekly summary, lab report and meal photo reading, and estimating a dish by its name, only with your consent.
- Sharing with the clinic you choose to connect to, only with your consent.
- Security — protecting your account and the service.
We do not sell health data, we do not use it for advertising and we do not pass it to data brokers.
4. Where it comes from
- From you — what you log, type, photograph or send.
- From your phone’s health app — Apple Health or Health Connect, with your authorization.
- From our calculations — goals, curves and patterns calculated from your entries.
- From artificial intelligence — the answers, readings and estimates it returns based on what you sent.
5. What we share, and with whom
We share health data only in these cases:
- Anthropic (United States), which provides the artificial intelligence — with your consent, and only when you use an AI feature: the question and a summary of your entries (treatment, measurements, symptoms, meals, water, exercise and lab tests), the meal photo, the whole lab report or the name of a dish. It does not use the data to train models and deletes it within 30 days, or keeps for up to 2 years what its safety system flags.
- The clinic you connect to — with your consent, given before connecting: every type of entry and your profile with your health history. While the connection lasts, it sees everything; afterward, only what was logged during the connection, until you delete your account.
- Apple or Google — the audio of your speech, when you use the microphone and the device cannot recognize your language on its own.
- Those who process data for us — Supabase (Brazil), which keeps your account and your journal, and Vercel (Brazil), which acts as intermediary for the AI features without keeping anything. They process the data only on our behalf.
- Authorities, when there is a court order or a legal obligation, and only what is strictly required.
We have no affiliates with whom we share health data. The full list of who processes your data, with what each one receives, is in section 7 of the Privacy Policy; the email, update, subscription and payment services do not receive health data.
6. Your rights
You may, at any time:
- Know and access — confirm whether we collect, share or sell your health data, see what we keep, and receive the list of everyone we share it with, with an email address or a website to contact each of them. The app shows everything you have logged, and Privacy and data › A copy of your data generates the complete file.
- Withdraw consent — for artificial intelligence in Privacy and data › Artificial intelligence; for the clinic, by disconnecting on the clinic’s screen; for the health app, in your phone’s settings.
- Delete — each entry where it appears, or everything in Privacy and data › Delete account, which deletes the account and its data in our database immediately; the backups disappear on their own within 7 days. We notify those who process data for us to delete it as well.
- Not be discriminated against for exercising any of these rights.
For anything not available in the app, write to contact@morphihealth.com from your account’s email address — that is how we confirm the request is yours. We respond within 45 days; if we need another 45, we will tell you beforehand and explain why. The request is free of charge.
7. If you disagree with our response
If we deny a request, we will tell you why, and you can appeal by writing to contact@morphihealth.com with the subject "Appeal". We respond to the appeal within 45 days, in writing, stating what we decided and why.
If the appeal is also denied, you can file a complaint with your state’s Attorney General — in Washington, through the Attorney General’s website (atg.wa.gov); in Nevada, at ag.nv.gov; in Connecticut, at portal.ct.gov/ag.
8. Changes to this policy
If we change what health data we collect, what we use it for or who we share it with, we will notify you in the app beforehand, and ask for your consent again when the law requires it.