Legal
Privacy policy
What CodeMorph collects through this website and the desktop app, why, and the choices you have.
Last updated 12 octobre 2026
Beta draft, pending legal review. This document describes how CodeMorph works today in plain language. It will be reviewed by counsel before general availability.This page is available in English only. The English version is the one that applies.
This policy explains what personal data CodeMorph ("we", "us") collects, why, and what you can do about it. The short version: the desktop app doesn't send us your code or usage data, and this website collects only what you choose to give us.
Who we are
CodeMorph is the controller of the personal data described in this policy for the website and our communications with you. For data you send to a model provider through the app, that provider is responsible under your agreement with them.
The CodeMorph desktop app
- Your code. Scanning, planning and verification run on your device. We do not receive your source code.
- Telemetry. The app has telemetry disabled and no crash-report destination. We do not collect usage analytics from the app.
- API keys. Stored on your device in encrypted secret storage. We never receive them.
- Model providers. When AI features are available and you configure a provider, requests go directly from your device to that provider under your account. Their privacy terms govern that data.
- Third-party services the app talks to. The Extensions view contacts Open VSX when you browse or install extensions. Downloads are served by GitHub.
This website
Information you give us
When you join a waitlist, subscribe to updates or send a message, we collect what you enter: your email address and, for messages, your name, topic, team size if given and message. We use it only to respond, send the updates you asked for, or tell you when the build you're waiting for is ready. If your message is about Teams or Enterprise, we also add your name, email and team size to our list for team updates, and the form tells you so before you send. You can unsubscribe from those at any time.
Analytics
We use Vercel Web Analytics to understand which pages are visited. It does not use cookies, does not collect personal data such as names or email addresses, and reports aggregated page views. Visitors are not tracked across sites.
Hosting logs
Our host, Vercel, processes standard request data such as IP address and user agent to serve the site and protect it from abuse.
Cookies
This site doesn't set cookies for analytics or advertising.
Why we process data
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your messages | Name, email, message, topic | Our legitimate interest in responding, or steps before a contract |
| Sending updates and waitlist emails | Email address | Your consent, which you can withdraw any time |
| Sending occasional updates to Teams and Enterprise inquirers | Name, email, team size | Our legitimate interest in keeping business contacts informed, with an unsubscribe link in every email |
| Understanding which pages are useful | Aggregated, cookieless page views | Our legitimate interest in improving the site |
| Keeping the site secure | Standard request logs | Our legitimate interest in security |
Service providers
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and privacy-friendly analytics |
| Resend | Delivering contact messages and storing waitlist, newsletter and Teams or Enterprise contacts |
| GitHub | Hosting installer downloads |
We don't sell personal data, and we don't share it with anyone except these providers, acting on our behalf, or where the law requires it.
Security
We use reputable providers, encrypted connections, and access limited to the people who need it to respond to you. Because the app doesn't send us your code or usage data, there's very little to protect on our side, which is by design.
Retention
We keep messages for as long as needed to handle your request and for a reasonable period afterwards. Waitlist and newsletter entries are kept until you unsubscribe or ask us to delete them.
Your rights
Depending on where you live, including under the Nigeria Data Protection Act 2023 and the EU and UK GDPR, you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. Every email we send includes an unsubscribe link. To exercise any right, email support@codemorph.codes. You may also complain to your local data protection authority.
International transfers
Our providers may process data outside your country. Where required, we rely on appropriate safeguards for those transfers.
Children
CodeMorph is not directed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top and, for material changes, note it in the changelog.
Contact
Questions about privacy: support@codemorph.codes.