Morrow Plan privacy policy

Last updated: 28 August 2026

Morrow Plan is a local-first notebook. You can use it without an account. This policy explains what stays on your device and what is sent to Firebase when you choose account backup.

The developer operating under the Morrow Plan name is responsible for the processing described here. Firebase acts as a service provider. Privacy questions can be sent to support@morrowplan.com.

Guest notebooks

Guest entries, Ladders, photos, voice notes, dates, outcomes, and history stay on the device where they were created. Signing in does not upload, import, relabel, or clear the guest notebook; it remains separate from every account. Anyone who can use the same device and browser profile may be able to see that guest notebook. Local notebook data is not separately end-to-end encrypted by Morrow Plan; it relies on the protections of your device, operating system, and browser profile. Clear the guest notebook or its app/browser storage before handing the device or browser profile to another person.

Account backup

When you use a free account, Morrow Plan processes:

• your email address, Firebase user ID, authentication state, and credentials needed by Firebase Authentication;
• entry identifiers, text, dates, types, outcomes, Ladder placement, projection history, and creation or update times for private backup and sync;
• Ladder identifiers, names, order, and creation or update times;
• small media descriptors: whether an entry is a photo or voice note, its attachment identifier, originating Morrow installation identifier and label, and voice-note duration when present;
• the current Morrow installation identifier and label, browser or device category, latest reported sign-in state, last-use time, and count of media files stored by that installation;
• technical information processed by Firebase and Firebase App Check, such as IP address, user agent, app or package identifiers, and app-integrity signals, to provide and protect the service;
• when you request an email sign-in code, the destination email address and message content needed by Resend to deliver that requested code.

Passwords are handled by Firebase Authentication and are not stored in the Morrow Plan notebook or Cloud Firestore.

A signed-in Morrow Plan app or browser session relies on the device and browser profile being private. Anyone able to use that unlocked app or profile may use the current session, so sign out before handing it to another person.

Account data is stored in Firebase Authentication and Cloud Firestore. Firestore rules restrict each account notebook to its signed-in owner. This is private account storage, but it is not end-to-end encrypted: authorized project administrators and Firebase as the service provider can technically process cloud data. Morrow Plan does not currently upload photo or voice-recording files. Their small descriptors let another signed-in installation show a placeholder in the correct entry.

Sign-in codes and abuse prevention

Email sign-in codes are sent through Resend's Ireland sending region. Resend stores account data, email metadata, logs and API records in the United States. Morrow Plan stores a one-way code digest and pseudonymous email, installation, and network rate-limit keys in server-only Firestore records; it does not put the plaintext code or raw network address in those records. The code expires after ten minutes, while the temporary security records remain briefly for replay protection and rate limiting before automatic deletion. On Android, Firebase App Check uses Google Play Integrity; on the web, it uses reCAPTCHA Enterprise. These services process the technical signals needed to assess whether a request came from a legitimate app or browser.

Microphone and photos

Morrow Plan asks for microphone, camera, or photo-library access only when you choose the related capture action. These media files remain on the device in the current version.

Notebook data and the clipboard

If you select Copy notebook data, Morrow Plan places a complete JSON export on the system clipboard, including local photo and voice-note data. Morrow Plan does not currently import or restore this format. Clipboard managers, other apps, or clipboard-sync services may be able to read or copy it. Paste it only somewhere you trust, then clear the clipboard when you no longer need it.

Advertising and analytics

Morrow Plan does not currently contain advertising or an intentional usage analytics service.

Deletion

A signed-in user can open Account & sync and select Delete account and cloud data. This deletes the account's Firestore entries, Ladders, reported installation records, and Firebase Authentication identity. See the account deletion instructions for a browser-accessible route.

Security and retention

Firebase encrypts data in transit and at rest. Cloud account data remains until you delete the account or its notebook, or it is removed for a legitimate operational or legal reason. Firebase may retain deleted data in protected backups for a limited period under its service policies. Resend may retain delivery, bounce, complaint, and suppression records under its service policies. Local data remains until you delete entries, clear the notebook, remove the app, or clear the relevant browser storage. No internet service can promise absolute security, so keep a trusted backup of anything irreplaceable.

Your choices and rights

You may use guest mode without providing an email address, delete entries individually, clear a notebook, or delete an account and its cloud data. Depending on where you live, you may also have rights to access, correct, restrict, object to, or receive a copy of personal data, and to complain to your local data-protection authority. Contact the address below to exercise a right that is not available directly in the app.

Contact

Email support@morrowplan.com with privacy questions.