Privacy Policy

This explains what Morph collects, why, and what you can do about it. It is written to be read, not to be survived. If anything here is unclear, contact us and we'll be happy to explain.

You can use most of this app without an account

When you first open Morph, we create an account for you automatically. It does not contain your name, email address or contact details. It exists so your app activity and settings can be associated with your installation.

Designs you save stay on your phone. They are not uploaded, we cannot see them, and they exist nowhere but the device you made them on.

Because they live on your phone rather than on our servers, deleting the app deletes them with it. There is no copy for us to hold or for you to recover.

Drawing, editing, saving and sending a design to your case all work without signing up, and none of it uploads anything. Making an account is optional. It gives you a way to sign in, and it attaches the details in the next section to you rather than to the automatically created account described above.

What we collect when you do make an account

Your email address, if you sign up with email. If you sign in with Apple or Google, we receive the information that service provides to us, which may include an email address and a user identifier.

Not your designs. They stay on your phone and are never sent to us.

Which phone model and case finish you told us you own, so the app can show your case rather than a generic one.

A record of transfers to your case: when a transfer started, whether it finished, and, if it did not, the reason for the failure. This information is associated with your app account where necessary so the app can resume transfers and explain what happened.

What we count, and what we never do

We record certain product events, such as when the app is opened, a design is created, a transfer starts, a transfer succeeds or a transfer fails.

These events contain fixed values rather than the content of anything you write, draw or upload. We do not record free text, drawings or the actual images you use.

Where an event is associated with your app account, it is used to understand how the app and transfers are working for you. We use this information primarily to diagnose problems, improve reliability and understand which transfer failures are most common.

Transfers are the hard part of this product, and knowing which failure is common is the difference between fixing it and guessing.

What we do not collect

We do not track you across other apps or websites. There is no advertising identifier in this app and no third-party analytics that follows you. What we count stays with us.

We do not sell your data. There is no arrangement under which anyone pays us for it.

We do not have access to your entire photo library. The app only receives the specific photos or images you choose to give it.

Sharing

Morph has no sharing or community feature at the moment. Your designs are not shown to other people through the app and cannot be, because they never leave your phone. If we add sharing in future, this policy will change before it does, and we will tell you in the app.

Where your data is kept

Our primary application database and file storage are hosted by Supabase in its Sydney region, in Australia.

Some of the service providers we use may process personal information outside Australia. These may include the provider that hosts and serves this website, Shopify, payment providers, Apple and Google where you sign in with them, and delivery providers. Where applicable, those providers may process information in countries outside Australia, including the countries in which they or their service providers operate.

Deleting your account

You can delete your account from inside the app, in Settings. You do not have to email anyone or fill in a form.

Deleting removes your account and your transfer history. It is not a flag on a row that we keep; the records are removed. Your designs were never on our servers, so they are untouched until you delete the app.

Deletion cannot be undone.

Your rights

Under Australian privacy law you can ask what we hold about you, ask us to correct it, and complain if you think we have handled it badly. Write to support@themorph.com.au.

If you are in the UK or the EU you have further rights, including asking for a copy of your data in a portable form and objecting to how we use it. The same address reaches us.

We will respond to requests within the timeframe required by applicable privacy law. Where permitted, we may extend that timeframe for complex or multiple requests and will tell you if we need more time. Asking costs nothing.

We may need to check you are who you say you are before we hand over a copy of anything, which is a protection for you rather than an obstacle. If we refuse a request we will tell you in writing why, and what you can do next.

If our answer does not satisfy you, you can take it to the Office of the Australian Information Commissioner, which is the regulator for privacy in Australia. They are at oaic.gov.au and they will usually ask that you have complained to us first, which is why the address above comes before this line.

How long we keep things

Different things last for different reasons, so this is the list rather than one number.

Your designs are on your phone and nowhere else. They last until you delete them or delete the app, and we cannot remove them for you because we do not have them.

Your account, which is your email address and the id everything is keyed on, lasts until you delete the account.

The events we count carry no name, no email and no free text, so there is nothing in them to identify you by. We keep them while they are still telling us something about which transfers fail.

How we protect it

Data transmitted between the app and our services is encrypted in transit using industry-standard encryption.

Our database refuses access by default and then allows exactly what it must, row by row, rather than trusting the app to ask nicely. The key that ships inside the app can only reach your own rows and cannot read anyone else's. That is enforced by the database rather than by the app being well behaved.

Nothing in the app carries a key that could act for another person or across the whole store. The powerful credentials live on the server side and never reach a phone.

No system is perfect. If something goes wrong that puts your information at risk in a way likely to cause you serious harm, we have to tell you and the Commissioner, and we will.

Children

Morph is not directed at children under 13, and we do not knowingly create accounts for or collect personal information from children under 13.

If you believe a child has made an account, contact us at support@themorph.com.au and we will review the account and take appropriate action.

Buying a case on the website

None of the above is about ordering, because ordering does not happen in the app. This is the part of Morph that handles a purchase.

When you buy a case through our website, we collect the contact, delivery and order information needed to process and fulfil your purchase, along with the messages you send us and standard device and usage data from your browser.

Payment information is processed through Shopify and our payment providers. We only receive and retain the payment information made available to us through those services and do not store full payment card details on Morph's own systems.

We use this information to fulfil your order, process payment, provide customer support, prevent fraud and, where you have chosen to receive it, send marketing communications.

Our website and checkout are provided through Shopify. Other service providers, including payment providers and delivery carriers, may also receive information necessary to process and deliver your order. Shopify may also use store data across the merchants it hosts.

Your order and your Morph app account are not automatically joined together. Buying a case does not create an app account, and creating an app account does not tell us what you bought.

Who holds your data

Morph is published by Real Build Services Pty Ltd trading as The Morph AU, ABN 66 610 275 548.

Post: PO BOX 979, Narellan NSW 2567, Australia.

Every request, question or complaint about privacy goes to support@themorph.com.au and reaches a person rather than a queue.

Changes

If we change how any of this works we will update this page and change the date at the top. If a change is significant we will tell you in the app rather than quietly editing the page.