Last updated: 2026-10-15
Effective date: 2026-10-15
Translation notice. This is an English translation provided for convenience only. The Simplified Chinese version is the governing text; in the event of any discrepancy, the Simplified Chinese version prevails. This translation has not been reviewed by counsel qualified in your jurisdiction.
Welcome to the "Morphly" product and the related services we provide (the "Services").
This Privacy Policy will help you understand how we collect, use, store, share and protect your personal information, and how you can manage your own information. Please read and fully understand this Policy before using the Services, in particular the provisions highlighted in bold.
We follow the principles of legality, necessity and transparency, and collect your personal information only within the minimum scope required for the specific function concerned.
1.1 Account services
You can complete account creation without providing additional information.
To verify purchases, restore membership benefits, settle points and process refunds, we retain necessary product information, transaction identifiers, subscription status and records of points changes.
1.2 Content-generation services
Based on generative artificial-intelligence model technology, we provide you with services for generating AI content such as images.
Text you enter and images you select or capture are uploaded to our server as required by the corresponding feature; reference-image upload may start when you select an image. Voice input uses Apple system speech recognition to produce text. The app does not upload that raw audio to our server as a message attachment; the resulting text is submitted after you send it.
1.3 Feedback and customer-support communications
When you lodge a complaint, enquiry or appeal, in order to contact you promptly and resolve the issue effectively, we may collect contact details such as your email address. If you do not provide them, we may be unable to give you the outcome of our handling.
1.4 Service operation and safeguarding secure running
We are committed to providing a secure and trustworthy product environment. To maintain the normal operation of the Services and protect your lawful rights and interests and those of other users, we collect information necessary for secure operation. Such information may be used for identity verification, security protection and fraud monitoring, so as to prevent, detect and investigate fraud, security threats, unlawful activity or conduct in breach of the agreements.
The categories of information specifically collected include:
1.5 Third-party components and device permissions
The current iOS app uses the following open-source components for image loading, media browsing and interface animation.
| Component | Purpose | Data or processing involved |
|---|---|---|
| Nuke / NukeUI | Load, decode and cache images | Processes displayed images, resource addresses and the app’s image cache. Loading a remote image sends a request and the network information necessary to complete it to the relevant resource server. |
| Lottie | Play interface animations | Reads and renders animation resources bundled with the app. |
The camera, system Photos picker, saving to Photos, speech recognition and App Store purchases use Apple system services, rather than device-information collection by the components above. AI chat, image and video generation use AI service APIs through our server; see the AI-services sections of this policy for the associated data processing.
1.5.1 Notes concerning AI services
How the technology works
The AI image-generation function in this application is underpinned by models provided by a third-party artificial-intelligence technology service provider. When you actively enable this function, the content you enter is sent to that provider over an encrypted transmission channel (TLS 1.2 or above), which invokes the model and returns the generated result. We transmit only the minimum volume of data strictly necessary to complete the service.
What data we collect
Notes on facial data
We do not share the following information with third-party AI service providers:
How data is collected and transmitted
The above data is collected automatically only when you actively use the AI image functions, and is at all times transmitted over an HTTPS-encrypted connection.
Third-party service-provider information
We share and process the above data with the following third-party service provider:
Storage arrangements
Data protection and security
We have entered into data protection agreements (DPAs) with all third-party AI service providers that receive user data, confirming that they provide data-protection measures at a level equal to or higher than that of this Privacy Policy, including:
1.6 Use of information beyond the scope of this Policy
Where we wish to use your personal information for purposes not set out in these rules, or to use information collected for a specific purpose for another purpose, we will seek your consent in advance. Please understand that the services we provide are constantly being updated and changed. If you choose to use other functions not yet set out in this Privacy Policy, then before we collect your personal information we will explain to you in detail, by agreement or on-page prompt, the purpose, manner and scope of the collection, and seek your express consent. If you do not agree to provide the foregoing information, you may be unable to use that service, but this will not affect your use of other services.
2.1 Principles for using data jointly with partners
Where the processing of personal information is entrusted to another party, we enter into the relevant processing agreement with the entrusted partner in accordance with law and supervise its personal-information activities.
2.2 Transfer of information
If we need to transfer your personal information by reason of merger, division, transfer of assets, dissolution or a declaration of bankruptcy, we will inform you of the recipient's name and contact details and require the recipient to continue to perform the obligations set out in this Privacy Policy. If the recipient changes the original purpose or manner of processing, it must obtain your consent afresh.
2.3 Disclosure of information
We will not proactively disclose information that you have not made public yourself, unless in compliance with national laws and regulations or with your consent.
3.1 Retention period
3.1.1 General principle: we retain your personal information only for the time necessary to achieve the purposes of the Services and for the retention periods provided by laws and regulations.
3.1.2 Termination of services: if "Morphly" terminates its services or ceases operations, we will notify you in advance by service or public announcement, and will delete or anonymise your personal information within a reasonable period after the termination of services or operations.
3.1.3 After account deletion or data deletion: when you delete your account, delete personal information yourself, or the retention period expires, we will delete or anonymise your personal information, save in the following cases:
4.1 We attach great importance to the security of your personal information, and will take reasonable technical and managerial measures to protect your personal information from improper use or unauthorised access, disclosure, use, modification, damage, loss or leakage.
4.2 Although we have taken the above reasonable and effective measures and complied with the relevant provisions of law, please understand that, because of technical limitations and the possible existence of malicious means, it is not possible in the internet industry to guarantee information security one hundred per cent at all times. We will use our best efforts to ensure the security of the personal information you provide to us.
We attach great importance to your autonomous control over your personal information, and do our utmost to protect your rights to access, copy, correct, supplement and delete your personal information, to withdraw consent and authorisation, to delete your account, to lodge complaints and reports, and to configure privacy features, so that you are able to safeguard your privacy and information security.
Please understand that particular business functions and services require your information in order to be delivered. Once you withdraw your consent or authorisation, we will be unable to continue providing the functions and services corresponding to the withdrawn consent or authorisation, and will no longer process the corresponding personal information. However, your decision to withdraw consent or authorisation will not affect the processing of personal information previously carried out on the basis of your authorisation.
5.1 How to exercise personal-information rights
If you, or another party you have authorised, wish to exercise the personal-information rights conferred by the relevant laws and regulations, you may contact us by email at morphlyivai@gmail.com. We will respond within 15 working days after verifying your identity.
5.2 Managing system permissions
In the app, Settings → Permissions opens the system settings page for this app. You can also use system Settings → Privacy & Security to manage camera, microphone, speech recognition, Photos or local-network access that has actually been requested. Permissions not yet requested may not appear; paths and options vary by system version. Selecting individual images in the system picker does not grant full-library access, and sandbox storage is not a separate permission switch. Withdrawing permission stops the corresponding future device access; it does not automatically delete data already uploaded or saved. See the data-deletion provisions of this policy.
5.3 Account deletion
You may apply to delete your account through the feedback page of "Morphly" or by sending an email to morphlyivai@gmail.com. We will act promptly on receipt of your application and complete our response within 15 working days or within the period required by laws and regulations. Before deletion, we will verify your personal identity, security status, device information and the like.
7.1 As the services are continually optimised, the app's related services may be updated from time to time. We will revise this Privacy Policy accordingly. We will not diminish the rights to which you are entitled under the version currently in force without your express consent.
7.2 After this Privacy Policy is updated, we will publish the updated version in the app so that you can learn its latest content in good time.
If you have any question, complaint, comment or suggestion concerning the protection of personal information or the AI generation services, you may contact us by: