Morusu Privacy Policy

01. Information we collect

Morusu issues a user ID (UUID) through Supabase authentication. The information you provide and the information we collect automatically is as follows:

• Email address and password (at sign-up)
• Nickname (alphanumeric, unique worldwide)
• Your personal nickname tap pattern (a rhythm sequence)
• Messages you send and receive (a tap pattern paired with a meaning)
• Meanings you register in the dictionary (text, AI-generated translations, normalized key)
• Follow / follower relationships
• Your receiving, notification, and display-language settings
• A device push token, only if you enable push notifications
• Product analytics events (via PostHog — see below)

We do not access your location, contacts, photos, or camera.

02. How we use it

• To provide the core features (messaging, dictionary, follows, notifications)
• To normalize and translate dictionary meanings with AI (English, Japanese, Spanish, Chinese, Korean)
• To respond to abuse and policy violations, and to improve service quality
• To deliver push notifications (when you allow them)
• To understand product usage and improve the app

03. Analytics

We use PostHog to understand how the app is used. Analytics events (screen views and key actions such as sending, following, and sharing) are associated with your user ID and nickname so we can analyze per-user behavior and improve the product. We do not send your message contents or the meaning text to PostHog, and we do not use this data for third-party advertising or cross-app tracking.

04. Third parties

We do not provide your information to third parties except with your consent or as permitted by law. We use the following services to operate Morusu; each provider's privacy policy applies.

• Supabase (PostgreSQL hosting, authentication, Edge Functions, Realtime)
  Provider: Supabase Inc. (USA) / supabase.com/privacy
• Anthropic Claude API (multilingual normalization of meaning text)
  Provider: Anthropic, PBC (USA) / anthropic.com/privacy
  Only the meaning text you register is sent. No personal identifiers such as name or email are sent.
• Expo / EAS (app build, distribution, push relay)
  Provider: 650 Industries, Inc. (USA) / expo.dev/privacy
• Apple Push Notification service (push delivery)
  Provider: Apple Inc.
• PostHog (product analytics)
  Provider: PostHog Inc. (USA) / posthog.com/privacy

05. Data retention and deletion

If you request account deletion in the app, we promptly delete your user ID and all associated data (messages, follows, push token, analytics identity) from our servers. Dictionary entries you created remain in the shared world dictionary, but their author ID is anonymized (set to NULL) so they are no longer linked to you.

06. Children

Morusu is not intended for use by anyone under 13. If you are under 13, please do not use the app.

07. Changes

We may revise this policy in response to changes in law or our services. The revised policy takes effect when posted on this page.