Privacy & Data Handling
Last updated: June 28, 2026
The short version: morrisai.family is a private platform for one family. Your financial, health, and academic data is stored in a dedicated database, never sold, never shared with advertisers, and only shared with other family members when you explicitly choose to do so. AI features send data to Anthropic for processing — never for training.
Who we are
morrisai.family is a private, invitation-only platform operated for personal family use. It is not a commercial product available to the general public. Access is managed by invitation only.
Contact: tmorr16@gmail.com
Data we collect
We collect only data that you actively provide or that is necessary for platform features to work:
- Account data: Name and email address via Google OAuth. We do not store passwords.
- Health data: Body weight, body composition, workout logs, dose tracking (Zepbound/GLP-1), sleep and HRV metrics synced from Oura and Withings. Stored only for your own personal use.
- Financial data: Bank account balances, transaction history, and net worth via Plaid. Investment account data via Alpaca. Manually entered account balances.
- Academic data: LSAT practice scores, course progress, certification tracking, and study logs.
- Career data: Resume text, career goals, learning logs, and professional contacts that you enter. Used solely to power the AI career advisor.
- Preferences: Location, news topics, stock tickers, sports teams, and widget settings that personalise your home screen.
- Usage data: Standard server logs (request timestamps, error rates). No ad tracking, no fingerprinting, no behavioural profiling.
How we store and protect your data
All data is stored in a dedicated Supabase (PostgreSQL) database. Row-Level Security (RLS) is enforced at the database level — every query is scoped to your user ID. No user can read another user’s data unless you have explicitly shared it.
Sensitive credentials (OAuth tokens, API keys, encryption keys) are stored as environment variables in Vercel and never committed to source code.
Financial account access tokens (Plaid) are encrypted at rest using AES-256-GCM before storage.
The platform is deployed on Vercel (US) with Supabase (US East) as the data store. Data does not leave US infrastructure except when sent to third-party APIs listed below.
Data by module
| Module | Data collected | Stored where | Retention | Family-shareable |
|---|---|---|---|---|
| Health | Weight, body comp, workouts, doses, sleep, HRV | Supabase (hub/health schema) | Until you delete it | No — private by default |
| Finance | Account balances, transactions, net worth | Supabase (finance schema) | Until you disconnect or delete | Per-account, you choose |
| Investments | Watchlist tickers, research notes, paper trades | Supabase (hub schema) | Until you delete it | No |
| Career | Resume, goals, notes, contacts | Supabase (career schema) | Until you delete it | No |
| Student | LSAT scores, courses, certifications | Supabase (student schema) | Until you delete it | No |
| Hub | Reminders, preferences, widgets | Supabase (hub schema) | Account lifetime | No |
Third-party services
The following external services receive data to power platform features:
Family sharing
morrisai.family includes voluntary sharing between family members. Sharing is always:
- Explicit: You initiate each share. Nothing is shared by default.
- Per-item: You choose which accounts to share, not a blanket “share everything.”
- Revocable: You can revoke access at any time from the import settings page.
- Scoped: The recipient sees a read-only view of what you shared. They cannot modify your data.
Health, career, academic, and investment data are never shared automatically. Only financial accounts explicitly shared by the owner are visible to other members.
AI and your data
Several features use Anthropic’s Claude API. When you use these features, relevant context (your messages, profile summary, account data) is sent to Anthropic to generate a response.
- Data sent to the Claude API is not used to train Anthropic’s models per their API usage terms.
- Conversation context is sent only when needed for a specific request — it is not stored by Anthropic beyond the API call.
- We do not send financial credentials, raw bank data, or health device tokens to the Claude API. We send summaries and figures only.
Your rights and controls
- Access: All your data is visible through the platform.
- Export: Contact us to request a data export.
- Delete: Contact us to request full account and data deletion. Third-party connections (Plaid, Alpaca) should be disconnected from within the platform before requesting deletion.
- Correction: You can update most data directly through the platform settings.
- Disconnect integrations: You can disconnect Plaid, Oura, Withings, or Alpaca at any time from the relevant settings pages. This removes our access tokens but does not delete historical data unless you also request deletion.
Cookies and tracking
We use a single session cookie (set by Supabase Auth) to maintain your login. No advertising cookies, analytics pixels, or cross-site tracking. We do not use Google Analytics, Facebook Pixel, or similar tools.
Children
The platform is not directed at children under 13. Family members using the platform must be 13 or older.
Changes to this policy
We will notify platform members of material changes via the hub notification system. The date at the top of this page reflects the most recent update.
Contact
Questions or requests: tmorr16@gmail.com