Morning Form

Privacy

Your record is yours.

A plain-English summary of how Morning Form handles your data. The short version: it is never sold, never used for advertising, you can export all of it, and you can delete all of it.

What Morning Form holds

What you give it: wearable metrics from the providers you connect, blood panels you upload and the values read from them, daily check-ins, your conversations with Ask, and the email address you sign in with. For visitors who are not signed in, we set two first-party cookies — one remembers which market site to show you, one lets us recognise a returning visitor. There are no third-party analytics or advertising scripts on any page.

Where it lives

Your record is stored in a UK-region database (London), encrypted at rest. Uploaded documents sit in private storage — they are never exposed at public URLs, and downloading them requires your signed-in session. Everything moves over encrypted connections.

AI processing — only with your consent

Morning Form asks for your explicit consent before any AI processing of your health data, and you can withdraw it at any time in Settings → Privacy. Interpretation runs through Anthropic (United States) under a contract that commits to zero retention and no training on your data. The cross-border transfer is covered by the UK–US Data Bridge adequacy decision, with Standard Contractual Clauses as fallback.

Who else touches data, and why

  • Anthropic (United States). AI interpretation of your record, under a zero-retention, no-training contract.
  • Terra API (United States). Wearable-provider aggregation — sleep, activity, recovery and heart metrics only.
  • Resend (United States). Sign-in email delivery. Sees your email address and a one-time sign-in token, never health data.
  • Vercel (United States). Application hosting and deployment. Request metadata and encrypted-in-transit payloads only.
  • Neon (United Kingdom). The database itself — London region, encrypted at rest.

Your controls

Export: from settings you can request a complete archive of your record — every data category as readable files, plus the original documents you uploaded. Delete: account deletion is available from settings, confirmed by email, and is permanent and immediate once you confirm — your record, documents, and connections are all erased.

Legal basis

We process your data to provide the service you asked for (UK GDPR Article 6(1)(b)), and we process health data — special category data — only with your explicit consent (Article 9(2)(a)), captured at onboarding and withdrawable at any time.

Questions or requests

For any data-subject request — access, correction, erasure — or any privacy question, write to privacy@morningform.health.