Privacy

In short

• The parent agrees on their own phone, sees exactly what is shared, and can stop at any time.
• Only the time they start moving, hourly steps and their “I’m okay” taps leave the phone. Raw Health and motion samples never do.
• No location, messages, calls or other health information, ever.
• No ads, no selling data, no tracking across apps or websites.
• The person who set it up can delete the whole family, every morning with it, at any time.

From the parent’s phone

With the parent’s consent, given on the phone itself: the time the parent first started moving each morning, steps counted each hour, whether an Apple Watch added steps, the battery level, and each tap of “I’m okay”. The app reads step count and stand hours from Health and motion from Motion & Fitness; nothing else in Health is read, and nothing is ever written to Health. Raw Health and motion samples never leave the phone.

From the family

What the family enters: what they call the parent, the parent’s first name, phone number and time zone; each watcher’s first name and, optionally, phone number; the neighbors or friends to text on a missed morning (name, phone number, how they know the parent). Sign in with Apple gives us a private identifier; we never see a password. Each phone’s push token and chosen language are kept so notifications reach it. If you subscribe, RevenueCat tells us whether the family has Plus; Apple handles the payment and we never see card details.

Anonymous usage

Watchers are asked once whether to share anonymous usage (which features are used, and crash reports), and can change their answer in Settings. Until they say yes, nothing is sent. It never includes names, phone numbers, times or health data. The parent’s phone never shares it.

This website

This website sets no cookies of its own and runs no analytics, ads or third-party trackers. Its fonts and images are served from this domain. Our host, Vercel, processes your IP address and browser details to deliver the pages and keeps short-lived logs for security and reliability.

The contact form

If you write to us, we receive the email address you give, your name if you give it, the topic and your message. Cloudflare Turnstile checks in your browser that a person is sending it, using your IP address and browser signals; Cloudflare then delivers the message to our inbox. We use it only to answer you and keep it as long as that and any follow-up need, then delete it.

Why, and on what basis

Only to run the service and answer you:

• To tell the family how the morning went and, when a morning looks off, to ask the parent first, call the parent, tell the watchers and text the contacts. This is the service you asked for.
• Readings from the parent’s phone are health-related: we use them only with the parent’s explicit consent, which they can withdraw at any time.
• Anonymous usage is sent only with the watcher’s consent.
• Keeping the service and this website secure, and turning away spam, is in our legitimate interest and yours.

We do not sell data, show ads, or use it to track anyone across apps or websites. Morning Signal is not a medical device and gives no medical advice.

Who receives it

These services process data for us, under agreements that protect it at least as well as this policy:

Where it is processed

The server and database run in the United States; anonymous usage is processed in the European Union. Some of the services above are in the United States, so your data may be processed there. Where the law requires it, these transfers rely on the providers’ standard contractual clauses.

How long it is kept

• Each report from the parent’s phone: 90 days.
• A summary of each morning (first-motion time, total steps, the check-in): until it is deleted.
• Family details, contacts and invites: until you delete them or the account.
• Contact form messages: as long as needed to answer and follow up, then deleted.

How it is protected

• Everything travels over encrypted connections (HTTPS).
• The parent’s phone joins a family only when the family confirms a matching number on both phones, so a guessed code never joins.
• Pairing codes expire after 30 minutes, work once, and repeated wrong guesses are blocked.
• Device and invite tokens are stored only as one-way hashes.
• Raw Health and motion samples stay on the parent’s phone.

Your choices and rights

A watcher can delete their account in Settings › Delete account. The person who set Morning Signal up deletes the whole family with it: the parent’s phone, every morning, alert, contact and invite. The parent can stop sharing on their own phone (What’s shared › Stop sharing), which deletes every morning it shared. See Delete your account.

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, or to stop a use of it, and you can withdraw a consent at any time. Write to us through the contact form; we answer within 30 days. We do not sell or share personal information as California law defines those terms. You may also contact your local data protection authority.

Children

Morning Signal is for adults and is not directed at children.

Changes and contact

We may update this policy; the date above changes when we do. Questions or requests: the contact form.