Moro privacy policy

Effective 7 October 2026

Moro is a small creature on your phone who listens to your days and keeps track of your life for you. Doing that means hearing personal things, so this page sets out plainly what Moro keeps, who else handles it, and how to make it all go away.

Moro only listens while you're talking to him. Your voice is never recorded or kept. The words are.
What you say becomes your life in the app: your days, the people in them, and a picture of who you are. It's kept for you, encrypted, until you delete it.
Getting there takes four outside companies. ElevenLabs handles the voice, Anthropic writes Moro's replies through ElevenLabs, DeepSeek reads your days (in China), and Supabase and Railway store and serve it (in the United States).
No ads, no tracking, no analytics. Your information is never sold.
You can delete everything from Settings, at any time.

What Moro keeps

Your sign-in. If you sign in with Apple, Apple gives Moro an anonymous id for you, plus your name if you choose to share it; Moro doesn't ask Apple for your email address. If you sign in with Google, Google gives Moro an id for you, your name, your email address and your profile picture.
Your timezone, so each day starts and ends where you live.
What you say to Moro, as text: the transcript of each conversation, his side and yours.
What Moro makes of it: an entry for each day, the people, events, places, facts and periods of your life, readings of your personality, questions he'd like to ask you, and a short summary he reads before each conversation so he remembers you.
Your corrections: anything you remove or mark as not right, so he doesn't make the same mistake twice.

Moro does not collect your location, contacts, photos, health data, advertising identifier, or how you use the app.

The microphone

Moro uses the microphone only during a conversation, which starts when you tap his orb and ends when you tap it again. The sound goes live to ElevenLabs, which turns your speech into text and Moro's replies into speech. Neither ElevenLabs nor Moro records it.

Personality

Over time Moro forms a view of your personality from what you tell him: how you think, what drives you, how you are with people. These readings are guesses, and he shows them with how sure he is. Some, about sex, jealousy, religion and politics, are marked just for you: the app keeps them in a separate, folded part of your portrait. They're used only to show you your own portrait, never to advertise to you or to decide anything about you.

Who else handles it

Moro is a small project and relies on these companies. Each one gets only what its part needs.

ElevenLabs: Moro's voice and ears

United States

Hears your voice live during a conversation and keeps the text transcript. At the start of each conversation it also receives your name, the summary Moro keeps of your life, and any question he means to ask. Audio is not recorded. Transcripts are deleted after 30 days, or sooner when you delete your account.

Anthropic: Moro's replies

United States, through ElevenLabs

ElevenLabs uses Anthropic's Claude model to write what Moro says, so the conversation and the summary pass through it while you talk. That happens under ElevenLabs' agreement with Anthropic; Moro has no separate arrangement and sends Anthropic nothing directly.

DeepSeek: reading your days

People's Republic of China

After each conversation, the transcript and what Moro already knows about your life (names, recent days, earlier readings) are sent to DeepSeek's AI to work out what happened, who was there, and what it says about you. This data is processed in China, under DeepSeek's terms and Chinese law, which may allow authorities there to access it. If you're not comfortable with that, please don't use Moro.

Supabase: where your life is stored

United States (Ohio)

Holds your account and everything listed above. The database is encrypted at rest, and transcripts are also encrypted by Moro before they're stored, with a key Supabase doesn't have.

Railway: Moro's server

United States (Virginia)

Runs the small server that passes information between the app and the companies above. It stores nothing of yours. Its logs record that requests happened, not what you said.

Apple

Apple handles signing in, if you sign in with Apple. While Moro is in testing, crash reports and any feedback you choose to send go to Apple through TestFlight.

Google

Google handles signing in, if you sign in with Google. Moro asks Google only who you are, nothing else in your Google account.

On your phone

The app keeps a copy of your life on the phone so it opens quickly and works offline, and keeps your sign-in in the iOS Keychain. Both are removed when you sign out or delete your account.

What Moro never does

Sell or rent your information, or share it with anyone not named above.
Show you ads, or let anyone track you across apps.
Let anyone else see your life. There is no social side to Moro.

How long it's kept, and deleting it

Your life stays until you delete it. To delete it, open Settings in the app and choose Delete account. That immediately and permanently deletes your account, your life, your transcripts and everything Moro has worked out about you from Moro's database, asks ElevenLabs to delete your conversations, and signs you out.

Anything ElevenLabs couldn't delete straight away expires within 30 days.
Database backups roll over within 7 days, after which nothing of yours remains.
What was already sent to DeepSeek is kept under DeepSeek's own terms, and Moro can't delete it there.

Inside the app you can remove anything Moro filed or mark it not right. To get a copy of your data or ask anything else about it, write to the address below.

Children

Moro is not meant for anyone under 16 and doesn't knowingly keep information about them. If you think a child has been using it, write to us and we'll delete the account.

Changes

If this policy changes, the new version will be posted here with a new date, and Moro will tell you in the app about anything significant before it applies.

Contact

Moro is made by Saeid Fard. Questions or requests: saeidm@gmail.com.