Legal
Privacy Policy
Who We Are
Morning Kept LLC is a Connecticut limited liability company that operates Tuned (AI fitness coaching) and Handled (AI meal planning). Both products are accessible at subdomains of morningkept.com. References to "Morning Kept," "we," "us," or "our" refer to Morning Kept LLC.
Questions about this policy can be directed to alan@morningkept.com.
What This Policy Covers
This policy covers both Tuned and Handled. Both products share the same underlying infrastructure and the same data handling practices described here. Where a practice applies to one product only, it is labeled accordingly.
What We Collect
1. Account information
When you create a Morning Kept account, we collect your email address and display name. Your email address is used to authenticate your account via a magic link login. We do not collect passwords.
2. Onboarding conversation data
Both products configure themselves through a conversational onboarding experience. During onboarding you share information voluntarily that we use to personalize your experience. This may include:
For Tuned:
- Fitness goals and priorities
- Physical limitations, joint issues, and injury history
- Home gym equipment inventory and available weights
- Training history and experience level
- Preferred workout schedule and available time
- Wearable device type
- Alternative physical activities
For Handled:
- Household composition and member names
- Dietary restrictions, food allergies, and health-related food needs
- Protein and cuisine preferences
- Cooking schedule and time preferences
- Location (city and state, used for seasonal ingredient relevance only)
- Meal plan delivery day preference
- Beverage pairing preferences
This information is stored in our database and used solely to generate personalized recommendations for you. It is not used for advertising, not shared with third parties for marketing purposes, and not aggregated across users.
Some information collected during onboarding touches on health — including physical limitations, dietary restrictions tied to medical conditions, and general wellness goals. This information is treated as sensitive personal information. Morning Kept is not a healthcare provider. This information is used only for personalization and is never shared with third parties.
3. Wearable device data (Tuned)
If you connect a wearable fitness device to Tuned, we access biometric and activity data from that device through its official API using OAuth authentication. This may include sleep data, heart rate, heart rate variability, steps, active minutes, calories, recovery scores, and device-specific metrics depending on your device.
Wearable OAuth tokens are stored locally on your device. Biometric data returned from wearable APIs is stored in our database on your behalf and used only to generate your personalized daily recommendations. We do not sell wearable data.
4. Session and training data (Tuned)
When you log a workout session, we store your session data including exercises performed, sets, reps, weights used, and any notes you add. This data is used to track your progress and improve future recommendations.
5. Meal and cooking data (Handled)
When you log a cook night, we store what you made, how you rated it, any tags applied, and optional notes. We also store your meal library and recipe library as you build them. This data is used to improve future meal plan recommendations.
6. Usage data
We collect basic usage data to operate and improve the service — including which screens you visit, actions you take, and errors that occur. This data is associated with your account and used for product improvement only.
How We Use Your Information
We use the information we collect to:
- Authenticate your account and maintain your session
- Configure your personalized experience through onboarding
- Generate daily fitness recommendations (Tuned)
- Generate weekly meal plans (Handled)
- Improve the quality of recommendations over time as you use the product
- Communicate with you about your account and the service
- Diagnose and fix technical problems
We do not use your information for advertising. We do not sell your information to third parties. We do not use your information to train general-purpose AI models.
AI-Generated Recommendations
Both Tuned and Handled use the Claude API (provided by Anthropic, PBC) to generate personalized recommendations. When generating a recommendation, relevant portions of your profile and history are included in the request to the Claude API. Anthropic's data handling practices are described in their privacy policy at anthropic.com.
Important: Recommendations generated by Tuned and Handled are not medical advice, dietary advice, or a substitute for professional guidance. If you have a medical condition that affects your diet or physical activity, consult a qualified healthcare professional before relying on Morning Kept's recommendations.
Service Providers
We share data with the following service providers who help us operate the service. Each provider receives only the data necessary to perform their function.
| Provider | Function | Data shared |
|---|---|---|
| Supabase | Database and authentication | All user data stored in Supabase's infrastructure |
| Vercel | Application hosting | Request metadata; no persistent user data stored |
| Anthropic (Claude API) | AI recommendation generation | Relevant profile and history data included in API requests |
| Make.com | Meal plan email delivery (Handled) | Email address and generated meal plan content |
| Stripe (Phase 3, not yet active) | Payment processing | Name, email, payment method |
We do not share your data with any other third parties except as required by law.
Data Storage and Security
Your data is stored in Supabase's infrastructure, hosted on servers located in the United States. Data is encrypted at rest and in transit. Access to your data within the application is enforced through Row Level Security policies at the database level — your data is accessible only to you and to Morning Kept LLC for the purpose of operating the service.
If you discover a security vulnerability or believe your account has been compromised, contact us immediately at alan@morningkept.com.
Data Retention
We retain your data for as long as your account is active. If you cancel your subscription, your account and data remain accessible to you. If you request deletion of your account, we will delete your personal data within 30 days of your request, except where retention is required by law.
To request deletion of your account and data, contact alan@morningkept.com.
Your Rights
You have the right to access, correct, delete, and export your personal information. To exercise any of these rights, contact alan@morningkept.com. We will respond within 30 days.
Children
Morning Kept's products are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us at alan@morningkept.com and we will delete it promptly.
Connecticut Residents
Morning Kept LLC is incorporated in Connecticut. Connecticut residents may have additional rights under the Connecticut Data Privacy Act (CTDPA), including the right to access, correct, delete, and obtain a portable copy of your personal data, and the right to opt out of the sale of personal data. We do not sell personal data. To exercise your rights under the CTDPA, contact alan@morningkept.com.
Changes to This Policy
We may update this policy as the product develops. When we make material changes, we will notify you by email or by a notice in the app. Continued use of the service after a policy update constitutes acceptance of the updated policy.
Morning Kept LLC · Connecticut, United States · alan@morningkept.com