Privacy Policy
Effective October 7, 2026. MorningKeep is provided by Mabry Ventures LLC.
1. What MorningKeep handles
Sparks may include text, voice recordings and transcripts, images, drawings, links, and metadata you choose to capture. MorningKeep also handles product settings, permission state, purchase entitlement, bounded usage state, and diagnostic events needed to operate the app. If you use Sign in with Apple, MorningKeep also receives the name and email address Apple shares with it. Unless you turn them off, MorningKeep sends anonymous usage analytics and crash reports that contain none of your content.
2. Where your content lives
On Apple devices, primary Spark storage is on your device and, whenever iCloud is available on your device, in your private CloudKit database. MorningKeep has no setting to turn this mirroring off; it follows your device’s iCloud state. If no iCloud account is signed in on the device, or MorningKeep cannot open its iCloud store, your Sparks stay only on that device. Apple Watch recordings remain on the Watch while delivery is pending and are removed from its queue only after the paired iPhone confirms a durable save.
3. Cue and cloud processing
Eligible bounded work uses Apple Foundation Models on device first. After explicit cloud consent, selected structured workloads may send the minimum required text and source context through MorningKeep’s authenticated Cloud Run service to Google Vertex AI. The client cannot choose the provider or model. MorningKeep does not send raw audio to its cloud AI service and has no OpenAI runtime or secondary provider fallback.
4. Actions and platform permissions
Cue output is a proposal, not an instruction. MorningKeep creates an Apple Reminder or Apple Calendar event only after you approve the outcome and grant the applicable permission. Contact recognition is optional and performed locally.
5. Accounts, purchases, and operations
Sign in with Apple is optional. When you use it, MorningKeep receives an Apple account identifier, your name, and your email address or the private relay address Apple provides. They identify your account across devices and keep a Dawn subscription recoverable. They are stored in the Keychain on your device and, when iCloud is available on your device, your name is also saved to your private iCloud database. To link your account, MorningKeep sends Apple’s sign-in token, which carries your email address, and your name to Firebase Authentication, a Google service, which keeps them with the account that protects cloud routes. Firebase App Check and Firebase Authentication protect cloud routes. StoreKit transaction evidence is verified to maintain Dawn entitlement and prevent abuse. Analytics and crash reporting are on by default and share one setting: Settings, Privacy Dashboard, Share analytics and crash reports. While it is on, TelemetryDeck receives anonymous usage and performance signals, and Sentry receives crash and diagnostic reports: stack traces, exception types, the app version and build, whether a session ended normally or crashed, and a random installation identifier. Before a report leaves your device, MorningKeep removes messages, tags, account details, device details, and file names, and it never attaches screenshots, the view hierarchy, logs, or network activity. As with any internet request, these services see the IP address a report is sent from. Turning the setting off stops both services, cancels any crash report still being sent, deletes crash reports that have not been sent, and keeps them off the next time you open MorningKeep. A report that has already left your device cannot be recalled. Operational telemetry is structured and excludes Spark text, transcripts, attachment contents, reusable credentials, and receipt bodies. MorningKeep does not sell your personal data or use your Sparks for advertising.
6. Export, deletion, and retention
You can export your data or request deletion from MorningKeep Settings. If you have an active Dawn subscription, MorningKeep makes no local or cloud deletion until you link Sign in with Apple and the current verified StoreKit transaction records the recovery proof needed to restore your entitlement later. MorningKeep tells you when that preparation is required. After the safety check passes, local deletion begins and CloudKit and account deletion remain pending until remote completion is confirmed. If a remote step fails, MorningKeep retains the minimum recovery credential and deletion checkpoint so you can retry. This preparation applies to Apple accounts, which are the accounts that hold synced CloudKit records and StoreKit entitlement recovery proof. Deleting your data from Settings also clears your name and email address from your device, removes your profile record from your private iCloud database, and deletes the Firebase account. If you turned analytics and crash reports off, deletion keeps them off. Server request receipts and hashed entitlement records are retained only as needed for security, billing continuity, fraud prevention, and legal obligations.
7. Your choices
You can decline microphone, speech, reminders, calendar, contacts, and cloud AI permissions, and you can turn analytics and crash reports off in Settings at any time. Sign in with Apple is optional, and Apple lets you hide your email address when you use it. Some related features will be unavailable, but local capture remains the core path. You can manage Dawn through Apple Subscriptions.
8. Contact and changes
For privacy questions or requests, email support@mabryventures.com. Material policy changes will be reflected here and, when appropriate, communicated in the app.