This policy explains what information Morfit collects, why we collect it, who we share it with, and the choices you have. Morfit is operated by Morfit Wellness Ltd (“Morfit”, “we”, “us”), a company registered in Nigeria.
Morfit is a nutrition and fitness tracking app. To do its job it handles health-related information — your weight, your goals, and photographs of your meals. We treat that as sensitive and describe our handling of it in detail below.
1. Information we collect
Information you give us
| Data | Why |
|---|---|
| Email address, full name | To create and secure your account |
| Password | Stored only as a cryptographic hash — never in readable form |
| Phone number (optional) | Account recovery and service messages |
| Date of birth, gender | Required to calculate calorie and nutrient targets accurately |
| Height, current weight, target weight | To calculate your goals and show progress |
| Activity level, fitness goal, dietary preferences | To personalise recommendations |
| Meals you log and photographs of them | To identify food and estimate its nutrition |
| Weight entries and fasting sessions | To track progress over time |
Information collected automatically
- Region and time zone, so reminders arrive at sensible local times
- Sign-in timestamps and basic account activity
- A push notification token, if you allow notifications
- Crash and error diagnostics, so we can fix faults in the app
Information from sign-in providers
If you sign in with Google or Apple, we receive an account identifier and your email address from them. We do not receive your password.
2. How we use your information
- To provide the app: logging meals, tracking weight, running fasting timers
- To analyse meal photos and descriptions and estimate nutrition — see section 4
- To calculate personalised calorie and macronutrient targets
- To generate progress insights and award achievements
- To send service messages, reminders, and notifications you enable
- To operate subscriptions, billing, and customer support
- To detect abuse, secure accounts, and diagnose faults
- To improve food recognition accuracy. Where corrections you make are used to improve our models, we do so in a de-identified form
3. Legal bases
We process your data under the Nigeria Data Protection Act (NDPA) 2023, and — where it applies to you — the UK/EU General Data Protection Regulation. Our bases are:
- Contract — to deliver the service you signed up for
- Consent — for health data, meal photographs, and notifications. You may withdraw consent at any time
- Legitimate interests — security, fraud prevention, and improving the service
- Legal obligation — tax, accounting, and regulatory record-keeping
4. Meal photographs and automated analysis
These providers process the image on our instructions in order to return a result. Nutrition figures produced this way are estimates and may be inaccurate. You can always correct them, and you never have to use photo scanning — meals can be logged by search or by description instead.
5. Who we share data with
We do not sell your personal information. We share it only with service providers who help us run Morfit:
| Provider | Purpose |
|---|---|
| Google (Gemini), OpenAI | Analysing meal photographs and descriptions |
| Google Sign-In, Apple Sign In | Authentication, if you choose those options |
| Cloudinary | Storing and serving images |
| Firebase Cloud Messaging (Google) | Delivering push notifications |
| Paystack | Processing subscription payments. Card details are handled by Paystack — Morfit never sees or stores your full card number |
| Sentry | Crash and error reporting |
| Open Food Facts | Looking up packaged-food nutrition data |
We may also disclose information where required by law, or to protect the rights and safety of our users.
6. International transfers
Some providers above operate outside Nigeria. Where your data is transferred abroad, we rely on the safeguards permitted under the NDPA, including contractual protections with those providers.
7. How long we keep data
- Account and health data — for as long as your account is open
- Meal photographs — retained to show your history; you can delete individual entries at any time
- After deletion — removed from live systems within 30 days, and from backups within 90 days
- Transaction records — kept as long as tax and accounting law requires, even after account deletion
8. Your rights
You may at any time:
- Access the personal data we hold about you
- Correct anything inaccurate
- Delete your account and data — see Delete your account
- Request a copy of your data in a portable format
- Withdraw consent, including for notifications or photo analysis
- Object to processing based on legitimate interests
- Complain to the Nigeria Data Protection Commission, or your local supervisory authority
To exercise any of these, email privacy@morfit.fit. We respond within 30 days.
9. Security
Data is encrypted in transit. Passwords are stored only as hashes, and payment credentials are encrypted at rest. Access to production data is restricted to staff who need it. No system is perfectly secure, so we cannot guarantee absolute security — but we will notify you and the relevant authority of a breach affecting your data as required by law.
10. Children
Morfit is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.
11. Not medical advice
Morfit provides general nutrition and fitness information. It does not diagnose, treat, cure, or prevent any disease, and it is not a substitute for advice from a qualified healthcare professional. Talk to a doctor or dietitian before making significant changes to your diet or exercise, particularly if you are pregnant, managing a medical condition, or taking medication.
12. Changes
We will post any changes to this policy on this page and update the date above. Significant changes will be notified in the app or by email. As we introduce new features, this policy will be updated to describe any additional data they involve.
13. Contact
Morfit Wellness Ltd
Privacy enquiries: privacy@morfit.fit
General support: support@morfit.fit