Privacy Policy

• Account info: provided by you. If you create an account, we store your email address through our authentication provider (Supabase).
• Chat content: provided by you. The messages, tasks, and files/images you send to Mori. On a paid plan, your conversations and memories sync to your account so they follow you across devices. On the free plan, and whenever you are signed out, they stay on your device.
• Mori Link traffic: provided by you and generated in use. When you pair the phone app with your own computer, your commands, Mori’s replies, status updates, and any screenshots of your own machine that you request are relayed between your devices over an encrypted realtime channel hosted by Supabase. Pairing uses a short-lived 6-digit code; only your confirmed device can send commands.
• Subscription & usage data: collected automatically. If you subscribe, we store your plan tier and metered usage of managed AI (session/daily/monthly totals and reset times) so we can enforce fair limits and show you honest meters.
• Payment records: from our payment processors. Card payments are handled by Stripe; iOS purchases by Apple (we verify Apple’s signed transaction and link it to your account id). We never see full card numbers.
• Crash reports: collected automatically, in packaged builds only. If the app crashes or hits an error, a crash report goes to Sentry: the error and its stack trace, the app version and operating system, and which copy of Mori it came from. On an error the desktop app also sends a short replay of its own window with all text masked and images blocked. Console output is never attached, so a report does not deliberately include your chat content, file contents, or typed values.

• With your own API keys (BYOK): requests go from your machine to the provider you chose (Anthropic, OpenAI, OpenRouter, or others) using your key. Your keys are stored on your device and are never sent to us.
• With managed mode (a subscription, or the small allowance on the free plan): your messages are forwarded through Studio Mori’s servers to our AI providers, Anthropic and OpenRouter (and the model providers OpenRouter routes to), to generate the response. We relay and meter this traffic; we don’t use your conversations for advertising or sell them.
• Mori Link relays to a computer you have paired it with: your commands run on that machine and its configured providers. Without a paired computer the app can show your account, plan and usage, but it cannot run a task or reach a model on its own.
• Our AI providers process this data under their API terms, which provide protections equivalent to ours, including that API inputs and outputs are not used to train their models.

• Providing the product: generating AI responses, syncing your content on paid plans, running tasks on your paired machine.
• Billing and subscription management; enforcing usage limits with honest meters.
• Security, abuse prevention, and fixing crashes.
• We do not sell your data, run ads, use third-party ad trackers, or use your conversations to train models.

• Supabase: authentication, synced storage, and the encrypted realtime channel that connects your own devices.
• Anthropic & OpenRouter: AI processing in managed mode (or your configured provider with BYOK), governed by their API privacy terms (no training on API data).
• Stripe: card payments. Apple: iOS in-app purchases.
• Vercel: hosts our website, downloads, and the managed-mode relay.
• Sentry: crash reports and masked error replays from packaged builds of the desktop app.

We send transactional emails, such as your sign-up confirmation code, from noreply@studiomori.ai. We don’t send marketing email.

• Use Mori entirely without an account. Your content stays on your machine (BYOK requests go only to your chosen provider).
• Delete your account and its synced data in Mori Link: Settings, then Delete account. That permanently removes your account and everything synced to it from our systems. You can also email support@studiomori.ai and we will do it for you.
• On the desktop, signing out from the Account page asks whether to keep your data or delete everything. Sign out and delete everything removes that account’s chats, memory, and settings from that computer. It does not delete the account itself: anything synced to your account stays in the cloud until you delete the account.
• Local data on your own devices stays yours. Deleting the apps removes it.

Mori is not directed to children under 13, and we don’t knowingly collect their data.

We’ll update this page if our practices change and revise the date above.

Questions about privacy? Email support@studiomori.ai.