Privacy

Last updated 18 August 2026. Morrowyn is operated by WispMade LLC.

Morrowyn asks you to write down private things about people you love. Notes about a partner, a budget for a parent, what your sister has been hinting at. That is the most personal kind of data a small app can hold, and this page is written to be read rather than to be survived. If anything here is unclear, ask us at hello@morrowyn.com.

The short version

• What you write about your people is yours. We do not sell it, ever.
• We never use it to advertise to you, and never to advertise to the people you add.
• Our analytics never see your people. Not their names, not your notes, not your budgets.
• To generate gift ideas, a person's details are sent to an AI provider. That is the one time this data leaves our servers, and it is explained in full below.
• You can delete any person, or your entire account, yourself. You can ask us for a copy of everything at any time.

What we collect

Your account

Your email address, your name, your password (stored only as a bcrypt hash, never as text you typed), and your time zone. Your time zone is detected by your browser when you sign up, and it exists so a reminder about a birthday arrives on the right morning for you.

If you sign in with Google

You can create a Morrowyn account with an email address and a password, or with Sign in with Google. If you choose Google, Google gives us your name, your email address, your profile picture, and a permanent identifier for your Google account. We use those to create your account and to sign you in. That is all.

Morrowyn requests only the basic sign-in permissions, which Google callsopenid, email, and profile. We never request and never receive access to your Gmail, your Google Drive, your Contacts, or your Calendar. You can disconnect Morrowyn at any time from your Google account permissions page, and you can delete your Morrowyn account from inside the app whichever way you signed in.

The people you add

Their name, your relationship to them, the notes you write about them, the budget range you usually spend, and the dates that matter. Alongside that, the gifts you log, the suggestions Morrowyn generated, and whether you liked them. This is the memory that makes the product work, and it is the part we guard hardest.

Note that the people you add do not have Morrowyn accounts and are not contacted by us. We do not email them, profile them, or build anything about them beyond what you have written in your own account.

Sessions and security

When you sign in we store a hashed session token, the IP address, and the browser you used. This is what lets us detect a stolen session and sign it out. Revoked and expired sessions are kept for thirty days after they end, so that a security investigation still has a trail, and are then deleted automatically.

Payment

If you subscribe, Stripe handles the payment. Your card never touches our servers. We store which plan you are on, your Stripe customer and subscription identifiers, and the dates of your billing period.

Product analytics

We measure how the product is used so we can improve it: which pages get visited, whether a person got added, whether a suggestion was generated. These events carry an opaque account identifier and nothing else about you. They never carry a person's name, your notes, or your budgets, and no analysis is ever run over the notes you write. That boundary is enforced in the code, not just promised here.

How gift suggestions work, and what leaves our servers

This is the section worth reading twice. When you ask Morrowyn for gift ideas for someone, we send that person's details to an AI provider to generate them: their name, your relationship to them, the notes you have written, the budget range, the occasion, and the gifts you have already logged for them.

We use established AI providers, on paid business terms under which they do not train their models on what we send them. Which providers we use can change as the models do, and the commitment above is the part that does not: we will not send your people's details to a provider that would train on them. We do not send them your email address, your payment details, or anything about your account itself, and we send a person's details only at the moment you ask for suggestions for that person.

If you would rather this never happened, do not use the suggestion feature. The rest of Morrowyn, your people, their dates, and your reminders, works without it.

Families

On the Family plan you can share a person with the people in your household. Sharing is deliberate and it is not partial: once you share someone, every member of your family can see everything about them, including the notes you wrote. We warn you about this in the app at the moment you share, and the warning is worth taking literally, particularly if the person you are sharing is also in your family.

Chip-in amounts recorded against a shared occasion are a record between you, not a payment. No money moves through Morrowyn.

Who else touches your data

We use a small number of outside services. Each one gets only what it needs to do its job.

• Stripe: your email, name and payment details, for taking payment.
• Resend: your email address and the contents of the emails we send you, such as verification, password resets, reminders and family invitations. Never a person's notes.
• AI providers: the suggestion details described above, on terms that forbid training on them. Named individually in our internal records rather than here, because the list changes as the models do.
• Google: separately from the above, Google provides Sign in with Google, if you choose to use it.
• PostHog: the anonymous product analytics described above. For visitors in the EU and UK we drop the IP address before it is stored.
• Amazon Web Services: hosts the app and the database.

How long we keep things

Your people and everything attached to them are kept until you delete them or delete your account. Expired sessions and unused family invitations are cleaned up automatically.

When you delete your account we schedule it for deletion and wait thirty days before removing it for good. That window exists so that an accidental or angry deletion can be undone: signing back in during those thirty days cancels it. After that the deletion is permanent and cascades through everything, your people, their occasions, your gift history, your suggestions. If you are a paying subscriber we cancel and erase your customer record at Stripe first, specifically so that a deleted account can never keep being charged.

Your rights over your data

Wherever you live, you can do all of the following. If you are in the EU, the UK, or California, some of these are also legal rights and we treat them the same way regardless.

• See and correct it. Everything Morrowyn knows about a person is on that person's page, and you can edit it.
• Get a copy. Email us and we will send you your data. We do this by hand today rather than with a download button, so allow us a few days. We would rather tell you that than promise a button that does not exist.
• Delete it. Delete a single person from their page, or your whole account from Settings. Both are yours to do without asking us.
• Object or complain. Write to us first if you can. You also have the right to complain to your local data protection authority.

Children

Morrowyn is not for children. You must be at least 16 to have an account. We do not knowingly collect anything from a child, and if we learn that we have, we delete it. Note that this is about who holds the account: writing down that your niece is 8 and likes dinosaurs is you keeping a note, and it is treated like any other note you write.

Security

Passwords are hashed. Traffic is encrypted in transit. Every query the app makes is scoped to your account at the database itself, so one account cannot read another's rows even if the application code were wrong. Sessions rotate on use, and a reused session token invalidates the whole family of tokens it belongs to. No system is perfect, and if we ever have a breach that affects you, we will tell you.

Where your data lives

Our servers are in the United States. Our AI and email providers may process data in the United States and elsewhere. If you are in the EU or UK, that means your data is transferred outside your region, under the standard contractual terms those providers offer.

Changes

If we change this policy in a way that matters, we will email you before it takes effect rather than quietly updating the date at the top.

Contact

WispMade LLC, hello@morrowyn.com. Write to us about anything on this page, including a request for a copy of your data or a complaint. A person reads that address.