Privacy Policy

MorphIt - Reimagining Spaces Together

Effective Date: January 3, 2025 | Last Updated: 11/2/2025 | Version 2.0

MorphIt is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our civic imagination platform. By using MorphIt, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

  • Name and email address (via Google OAuth through Clerk)
  • Profile information and preferences
  • Contact information for support requests

Content You Create:

  • Photos of public spaces you upload
  • AI-generated visualizations and reimagined spaces
  • Comments, votes, and community interactions
  • Location descriptions and project details

1.2 Information We Collect Automatically

Usage Data:

  • Pages visited and features used
  • Time spent on the platform
  • Device and browser information
  • IP address and general location

Location Data:

  • Approximate location for uploaded images (if enabled)
  • EXIF metadata from photos (automatically stripped from public content)
  • IP-based location for service optimization

1.3 Information from Third-Party Services

We receive information from:

  • Clerk/Google OAuth: Basic profile information and authentication tokens
  • AI Service Providers: Content processing metadata (temporarily)
  • Analytics Services: Usage statistics for service improvement

2. How We Use Your Information

2.1 To Provide and Maintain Our Service

  • Create and manage your account
  • Process and display your content
  • Generate AI visualizations at your request
  • Enable community features (voting, commenting, remixing)
  • Provide customer support

2.2 To Improve and Personalize Our Service

  • Analyze usage patterns and user behavior
  • Improve AI model performance (with your consent)
  • Develop new features and functionality
  • Conduct research and analytics

2.3 To Communicate with You

  • Send service-related notifications
  • Respond to your inquiries and support requests
  • Send updates about new features
  • Provide security and legal notices

3. How We Share Your Information

3.1 Public Information by Default

⚠️ MorphIt is a community platform where content is public by default:

  • Your uploaded photos and reimagined spaces
  • Comments and votes on community proposals
  • Your username and basic profile information
  • Project descriptions and location information

Who Can Access Public Content:

  • Other MorphIt users
  • Government entities and organizations
  • Researchers and journalists
  • Search engines and web crawlers
  • General public via shared links

3.2 Third-Party Service Providers

We share information with trusted service providers:

AI Services:

  • Recraft API: Image generation and editing (content processed temporarily)
  • Fal.ai: Video generation services
  • Content transmitted solely for requested features, not stored permanently

Infrastructure:

  • Google Cloud Platform: Hosting and database services
  • Vercel: Frontend hosting and deployment
  • Ably: Real-time notifications
  • Clerk: Authentication and user management

3.3 Legal Requirements

We may disclose your information to comply with legal obligations, respond to valid legal requests, protect our rights and property, prevent fraud or security threats, or in connection with a business transfer.

4. Data Processing and AI Training

4.1 AI Model Training

You Have Control:

  • We may use your public content to improve our AI models unless you opt out
  • You can opt out in your account settings at any time
  • Training data is deidentified and anonymized
  • We do not use private or restricted content for training without explicit consent

4.2 Face Detection and Privacy

Biometric Data Protection:

  • We may apply automatic face detection for privacy protection
  • Face detection is ephemeral processing only
  • We do not create, store, or retain biometric identifiers or face templates
  • Blurred images replace originals automatically for privacy

5. Data Security and Protection

5.1 Security Measures

  • Technical Safeguards: Industry-standard encryption in transit and at rest
  • Access Controls: Role-based access to user data with regular reviews
  • Infrastructure: Secure cloud infrastructure (Google Cloud Platform)
  • Monitoring: Automated threat detection and security audits

5.2 Data Retention

  • Account Data: Retained while your account is active
  • Deletion: Deleted within 30 days of account termination
  • Public Content: May remain on platform after deletion with attribution removed
  • Analytics: Individual identifiers removed after 24 months

6. Your Privacy Rights

6.1 General Rights

Access & Portability

  • View and export your data
  • Download content in machine-readable format
  • Request copies of data we hold

Control & Deletion

  • Delete your account and data
  • Remove specific content
  • Control content visibility settings

6.2 AI Training Opt-Out

Model Training Control:

  • Opt out of using your public content for AI model training
  • Change opt-out preferences anytime in account settings
  • Opt-out applies prospectively (doesn't affect already-trained models)

6.3 Jurisdiction-Specific Rights

California Residents (CCPA/CPRA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt out of sale/sharing (Note: We do not sell or share personal information)
  • Right to non-discrimination for exercising privacy rights

European Residents (GDPR) - If Applicable:

  • Right to access personal data
  • Right to rectification and erasure
  • Right to data portability
  • Right to object to processing

To Exercise Your Rights:

Contact us at [email protected] with "Privacy Request" in the subject line.

7. Data Deletion

How to Request Data Deletion

To request deletion of your MorphIt account and all associated data, please send an email to [email protected] with the subject line "Data Deletion Request".

Please send the request from the email address associated with your MorphIt account. We will process your request within 30 days and send you a confirmation once complete.

What Gets Deleted

When you request data deletion, we will remove:

  • Your profile information (name, email, profile photo)
  • All locations you've created
  • All reimagined spaces you've generated
  • Your comments and votes
  • Your account credentials and authentication data

Note on Social Login

If you signed in using Google or Facebook, you can also remove MorphIt from your connected apps:

8. Special Categories of Data

8.1 Biometric Data

🚫 No Biometric Data Storage:

  • MorphIt does not create, collect, or store biometric identifiers
  • We do not retain biometric information or face templates
  • Face detection for blurring is ephemeral processing only
  • No facial recognition or identity matching capabilities

8.2 Location Data

  • EXIF geolocation data is automatically stripped from public images
  • You can choose to display approximate location (city/neighborhood level)
  • Precise coordinates are never displayed publicly
  • IP-based location used only for service optimization

9. Children's Privacy

9.1 Age Requirements

  • General use requires users to be 16+ years old
  • Users 13-15 may use with verifiable parental consent
  • We do not knowingly collect information from children under 13 without consent

9.2 Educational Use (EDU Mode)

School-Managed Accounts:

  • Students under 13 may use MorphIt through school-managed accounts
  • Schools provide necessary consent under COPPA
  • EDU Mode includes enhanced privacy protections
  • Public-by-default posting disabled
  • Social discovery features limited

9.3 FERPA Compliance

  • For educational use, MorphIt acts as a "school official"
  • Student data processing limited to educational purposes only
  • No sale or marketing use of student data
  • Data deletion/return at school's direction

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

Essential Cookies

  • Authentication and sessions
  • Security and fraud prevention
  • Basic functionality

Analytics Cookies

  • Usage patterns
  • Performance monitoring
  • Error tracking

Functional Cookies

  • User preferences
  • Language settings
  • Personalization

11.2 Cookie Management

  • Configure cookie preferences in your browser
  • Opt out of non-essential cookies
  • Clear cookies and browsing data
  • Use browser privacy modes

12. Changes to This Privacy Policy

12.1 Updates and Notifications

  • We may update this Privacy Policy periodically
  • Material changes will be notified 30 days in advance
  • Continued use constitutes acceptance of changes
  • Previous versions archived and available upon request

12.2 Notification Methods

  • Email to your registered address
  • Platform notifications and announcements
  • Website banner notifications
  • Updated effective date and version number

13. Contact Information

13.1 Privacy Questions and Requests

Email: [email protected]

Please include the appropriate subject line for faster routing:

  • Data access: "Privacy Request - Data Access"
  • Data deletion: "Privacy Request - Data Deletion"
  • Opt-out requests: "Privacy Request - Opt-Out"
  • Corrections: "Privacy Request - Data Correction"
  • General questions: "Privacy Question"

Website: https://morphit.ai

Mailing Address:

MorphIt

[Address to be added]

Honolulu, Hawaii, USA

13.2 Response Time

  • We aim to respond to privacy requests within 30 days
  • Complex requests may require additional time
  • We'll notify you if we need an extension

Acknowledgment

By using MorphIt, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Your privacy is important to us, and we're committed to protecting your personal information while providing a valuable community platform for civic imagination.

Document Version: 2.0 | Effective Date: January 3, 2025 | Last Review: 11/2/2025