Legal

Subprocessors

Last updated: September 20, 2026

The following third-party services process data on behalf of Morphonic to operate the product. Each service receives only the minimum data necessary for its function. This list is updated whenever we add or remove a subprocessor.

Vercel

Application hosting, edge functions, anonymous page view analytics, and performance monitoring (Web Vitals).

Hosting and infrastructureUnited States

Supabase

Managed PostgreSQL database, user authentication (email + password, one-time email codes), and row-level security. Also stores and serves the audio files the app streams (voice cues and curated tracks).

Database, authentication, and file storageUnited States (US East)

Anthropic

Claude API generates session parameters from the goal and notes a user enters, their session length and streak, and a summary of past session ratings. API inputs are not used to train models.

AI session generationUnited States

Resend

Email delivery for sign-in codes and occasional product updates.

Email deliveryUnited States

Inngest

Background job scheduling for emails and routine data maintenance.

Job schedulingUnited States

PostHog

Product usage analytics linked to user accounts, and anonymous counts of website visits and button taps. Users can opt out in Settings, and analytics identity is deleted with the account.

Product analyticsUnited States

Sentry

Application error tracking and performance monitoring. Error reports carry technical context and pseudonymous identifiers, never message content or email addresses.

Error monitoringUnited States

Upstash

IP-based rate limiting on authentication and AI generation endpoints to prevent abuse. Stores short-lived request counts only; no personal content.

Rate limiting and cachingUnited States

Changes to this list do not require a privacy policy version update. If we add a subprocessor that materially changes how your data is processed, we will notify you via email.