Privacy Policy

Morphika is built and operated by Trixode Studios Inc., a company incorporated in British Columbia, Canada. This policy covers the Morphika website (morphika.ai), the Morphika authorization server and dashboard (auth.morphika.ai), the governed MCP hub (mcp.morphika.ai), and the Morphika iPhone app — together, “Morphika” or “the service.”

Morphika’s account and service data below — an account, its memories, its audit trail — is invite-only: you cannot create any of it without an invite. Visiting this public website does not require one, and like any website that visit still reaches our host and produces a standard request log entry (see “Server logs” below). Short of that, if you did not receive an invite and did not ask for one through the invite form, we have not collected anything about you.

We collect the following, each for a specific, functional reason:

• Invite requests — if you ask for an invite on this website, your name, your email address, and anything else you choose to tell us (which agents you use, a note). Used only to reply to you and send your invite. We email you one confirmation that we received it.
• Account information — your email address, a name if you give us one, and your password. Your password is stored as a cryptographic hash; we never store or see it in plain text. Used to create and secure your account and to send account-related email (verification, password reset).
• Sessions — records that keep you signed in to the dashboard and confirm who is making a request.
• OAuth tokens and connected clients — when you connect an AI client (Claude Code, Codex, Claude Desktop) to Morphika, we record which client is connected and issue it a scoped access token, so you can see and revoke it later from the dashboard.
• Device push tokens — if you use the iPhone app, an Apple Push Notification service token for that device, so we can deliver approval alerts and, if you leave them on, new-memory alerts to it. A push carries only identifiers — which action, which workspace — never what the action does or what a memory says.
• Memories and workspace content — the notes, context and other entries you or your connected AI clients write to your personal memory or to a shared workspace. This is the content the service exists to hold; we do not generate or add to it ourselves.
• Audit log of governed actions — a tamper-evident, hash-chained record of tool calls: which internal account identifier made the call, which tool, when, and the verdict (approved, denied, allowed automatically), along with which client and workspace made it. Call arguments and results are recorded as cryptographic hashes, not as their raw content; a few descriptive fields are kept as text, such as the name of the memory a write targeted and any note an approver adds.
• Server logs — standard infrastructure request and error logs from our hosting providers, kept for operating and securing the service.

We use a small number of processors, each for one function, and none of them may use your data for their own purposes:

• Railway — hosts the Morphika authorization server, the governed MCP hub, and this website.
• Resend — sends account-related email (sign-up verification, password reset) and delivers invite requests to us, with their confirmation to you.
• Cloudflare — routes email sent to morphika.ai addresses, such as support@morphika.ai, to our inbox.
• Apple Push Notification service — delivers approval and memory alerts to the iPhone app.

This website loads no analytics, no cookies and no third-party scripts — there is nothing on it to load them from. It only remembers the display and accessibility settings you choose, in your browser’s local storage on your own device; see the Cookie Policy. The iPhone app is built with zero third-party dependencies, by design, so there is no third-party analytics or advertising code in it either. We do not run advertising, and we do not sell your personal data to anyone, in any part of the service.

We keep an invite request while the pilot runs, so we can send your invite; ask us at support@morphika.ai and we will delete yours sooner. We keep account data for as long as your account is active. The audit log is append-only by design — entries are not routinely edited or deleted, because an editable audit trail would not be one you could trust. See “Deleting your account” below for what happens to it if you leave.

Memories are versioned. Saving an entry again replaces its text; the earlier text is not kept. What stays readable, through the entry’s history, is a record of every version: when it was written, by whom, its expiry date, what it replaced and where it came from.

When an entry expires, or you or a workspace owner forget it, it is hidden at once from every read, list, search, history and export. After a grace period of 7 days, its version records and its search index data (the vector used for search by meaning) are deleted, the next time that memory space is used; a space nobody uses keeps them, hidden, until it is used again or deleted. The stored entry itself, with its last text, is not erased by forget or expiry: it stays hidden in storage, together with its name and version number so it stays hidden, and is erased when your account is deleted, or, for an entry in a shared workspace, when that workspace is deleted. The audit log records every forget and expiry, like every other call.

You can delete your account two ways: in the iPhone app, under Settings, Delete account — confirmed with Face ID, Touch ID or your passcode; or in the web dashboard, under Account, Delete account — confirmed by typing DELETE and your current password. If you can’t use either, email support@morphika.ai.

Deleting your account immediately removes: your personal memories and all other personal data on the hub; any workspace where you are the only member, including its content; your pending approval requests; your workspace memberships and any unredeemed invites you created; your registered devices; your connected AI clients’ tokens and consents; your sessions; and your sign-in credentials and account record (email, name).

If you are the only owner of a workspace that has other members, deletion is refused until you transfer ownership or remove the other members — a workspace people are still using is never dropped out from under them.

Memories you wrote into a shared workspace stay with that workspace, because they belong to its shared record, not only to you. Audit log entries in a shared workspace are kept too, so the workspace’s audit trail stays verifiable for the people still in it — any free text in a kept entry (a memory’s name, a note, a reason) is replaced with the words “removed: account deleted,” and what remains carries only an internal identifier that no longer links to a person once your account is deleted.

For 24 hours after deletion, that internal identifier is held to block any client still signed in with an old credential; after that, it is removed too. The invite you signed up with stays marked as used, with no link back to you.

Passwords are stored hashed, not in plain text. Access tokens for connected AI clients are bound to a single plane — full access or read-only — and a client can be revoked individually from the dashboard at any time, which cuts it off on its next call. Sign-in to the authorization server uses OAuth 2.1 with PKCE. On the iPhone app, approving or denying requires Face ID or Touch ID, checked on-device through Apple’s LocalAuthentication framework; one confirmation covers up to five minutes of decisions in the same workspace, and ends as soon as the app leaves the screen. Your biometric data itself never leaves your device and never reaches Morphika.

Our infrastructure runs on Railway, which may locate servers outside Canada, including in the United States. By using Morphika you understand your data may be processed in a country other than the one you live in.

If you are in Canada, this service handles your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA): you can ask to access, correct, or delete the personal information we hold about you.

If you are in the European Union or United Kingdom, you have equivalent rights under the GDPR / UK GDPR, including access, correction, deletion, and the right to lodge a complaint with your local supervisory authority.

You can download your personal memory yourself, as a JSON file, from the dashboard (Account, Export my memory), and forget a single entry through your AI client; see “Retention” for what forgetting removes and when.

To exercise any of these rights, email support@morphika.ai.

Morphika is not directed to, and is not intended for use by, children under 16.

We may update this policy as the service changes. We will change the effective date at the top of this page when we do; we encourage you to check back if you have concerns about how your data is handled.

Trixode Studios Inc.
British Columbia, Canada
support@morphika.ai