Privacy Policy

Odyssey Health, Inc., doing business as Morph (“Morph,” “we,” or “us”), provides workout-recording, analysis, and community services through its apps, websites, and participating fitness facilities (“Gyms”). This policy explains how we handle personal information and how to contact us about it.

1. Information we collect

Depending on the features you use, we collect:

• Account information: contact and sign-in details, Gym membership, preferences, permissions, and consent choices.
• Workout and community information: training records, programming, posts, interactions, and support communications.
• Images and video: photographs, gym-camera footage, generated videos, and related information. Gym cameras are configured to record video without audio and may capture people incidentally in shared workout areas.
• Biometric information: facial measurements and templates, matching results, and related identification and training records, subject to separate consent.
• Connected health information: heart-rate data and associated information described in Section 5.
• Device and usage information: device and app information, identifiers, IP address, usage events, and diagnostics. Analytics and diagnostics may be linked to your account and contact information.

We receive information from you, your Gym, gym cameras, connected health services you authorize, and automatically through our apps, websites, and service providers.

2. How we use information

We use information to provide, support, and improve Morph, including workout analysis, videos, training records, and community features; manage accounts and Gym access; communicate with you; protect security and prevent abuse; and meet legal obligations.

We use workout footage and related data to develop, train, and improve workout-analysis and related machine-learning models. This work may include authorized people reviewing and labeling footage to test models and correct errors. Facial-model development is subject to Section 3, and the health-data restrictions in Section 5 apply throughout this policy.

With your separate permission and subject to applicable restrictions on health, fitness, and biometric information, we may use your name, image, or footage in Morph advertising. You may withdraw permission for future use by contacting us. Withdrawal does not affect prior authorized uses.

3. Cameras and facial recognition

Automatic facial identification and facial-model development require separate affirmative consent under our Biometric Notice and Consent. You may decline or withdraw through Morph settings or by contacting us and continue using supported manual features. Withdrawal stops future biometric processing and triggers deletion as described in Section 6.

4. Access and sharing

Morph and Gyms. Authorized Morph personnel may access information for the purposes described here. Authorized administrators may access their Gym's membership, attendance, workout information, and unpublished footage. Gym members may see information through Gym features such as leaderboards. Gyms' independent activities follow their own privacy practices.

Community and links. Videos you publish and related profile information and interactions may be visible to all signed-in Morph members, including people outside your Gym. Anyone with a video link may view or download it without signing in, including unpublished videos. Removing a video from the feed does not disable its link. Copies retained outside Morph remain outside our control.

Service providers. Third-party infrastructure and compute, video-processing, analytics and diagnostics, communications, and security providers process information on our behalf, including video, biometric, and health data where needed and permitted. We require service providers to follow contractual restrictions on their use of personal information and provide the same or equivalent protection for that information as described in this policy and required by applicable rules.

Other disclosures. We may disclose information at your direction, for legal compliance or protection of rights and safety, or in connection with a financing or business transfer, subject to applicable safeguards and restrictions on sensitive information.

We do not sell personal information or share it for cross-context behavioral advertising. Information may be processed in the United States and other countries where our providers operate.

5. Apple Health and Health Connect

With your permission, Morph reads heart-rate samples, times, and source app or device information from Apple Health or Android Health Connect. This information is sent to Morph's servers and processed by Morph and its service providers to display heart-rate insights with workouts and videos and improve these features. We do not use it for advertising, marketing, sale, data brokerage, or credit or lending decisions. Access and sharing follow your permissions and applicable health-platform restrictions.

Health Connect access may include older records and optional background synchronization, subject to separate device permissions. Disconnecting in Morph or revoking platform permissions stops further collection. You can separately request deletion of information already collected as described below.

6. Retention and deletion

We retain information, including raw gym footage, as reasonably necessary for the purposes described here. We delete your account and associated personal information following a verified request, including through relevant providers. When you withdraw biometric consent, we delete the records we keep for facial identification and facial-model development, including enrollment images, facial templates, and development records that can reasonably be linked to you. Your account and workout history remain available unless you request deletion of either.

Raw gym footage may retain incidental appearances until it is deleted under our retention policy.

Requests are fulfilled within applicable legal deadlines or otherwise within a reasonable period. Limited legal, security, and dispute records and residual backup copies may remain as permitted by law. Where lawful, we may continue using models developed before withdrawal that no longer contain information reasonably linked to you. Information no longer needed is deleted or de-identified.

7. Your choices and requests

For account or content deletion, access, correction, or other privacy requests, contact morph@odysseylabs.com. We may verify your identity and will explain any applicable retention exception. You can manage available permissions and sharing settings in Morph or on your device.

8. Security, age, and updates

We use safeguards appropriate to the information, including access controls and encryption in transit. No system can guarantee absolute security.

Morph accounts are for adults 18 and older. Contact us about any concerns involving minors' information or footage.

We may update this policy with additional notice or consent where required. Material changes to biometric processing require renewed affirmative consent before the changed processing begins.

Contact Morph / Odyssey Health, Inc. at morph@odysseylabs.com.