Privacy Policy
Last updated: 7 July 2026
Draft — pending legal review
Who we are
Metamorphy ("we", "us") provides life-planning and retirement-projection tools at metamorphy.io. We are the data controller for the personal data described here. Privacy questions and requests: [email protected].
What data we collect, and why
- Account data — email address, name, password (stored only as a secure hash). To create and secure your account.
- Profile data — date of birth, city and country. Because projections depend on your age and the rules of where you live (for example CPF in Singapore).
- Financial entries you provide — accounts, balances, income, spending, goals and scenarios you type in. This is the service: we do the arithmetic on the numbers you give us. We never connect to your bank and never move money.
- Payment data — handled by Stripe. We never see or store your full card number.
- Usage analytics — pages visited and features used, collected only after you consent via the cookie banner.
- Newsletter email — if you subscribe, with the IP address at the time of consent as a record of that consent.
We collect the minimum needed to provide the service, and nothing is sold to anyone, ever.
Legal bases (GDPR Article 6) and PDPA purposes
- Contract — account, profile and financial entries: we need them to provide what you signed up for.
- Legal obligation — payment and tax records.
- Consent — analytics cookies, marketing communications and the newsletter. You can withdraw consent at any time, as simply as you gave it.
- Legitimate interests — service security, fraud prevention and essential operational email (for example password resets).
Under Singapore's Personal Data Protection Act (PDPA), we collect, use and disclose personal data only for the purposes above, which we notify you of at or before collection, and with consent where the PDPA requires it.
How long we keep it
| Data type | Retention | On expiry |
|---|---|---|
| Active account and financial entries | Until you delete them or your account | Deleted or anonymised on request |
| Inactive account | 2 years from last sign-in | Email warning, then deletion |
| Payment records | 7 years (legal and tax obligations) | Retained in Stripe only |
| Server logs | 90 days | Automatically purged |
| Session data | 7 days (rolling) | Automatically expires |
| Consent records | Until withdrawn | Deleted on withdrawal |
| Newsletter subscription | Until you unsubscribe | Deleted on unsubscribe |
Who we share data with (sub-processors)
We use a small number of service providers to run Metamorphy. Each processes data only on our instructions, under contract, and with appropriate safeguards (Standard Contractual Clauses or equivalent) for transfers outside Singapore, the EEA and the UK.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Render | Application hosting | All application data | USA |
| Neon | Database hosting | All application data | Singapore / USA |
| Stripe | Payment processing | Name, email, payment details | USA |
| Resend | Transactional email | Email address, name | USA |
| Anthropic | AI insight generation | Financial figures you ask us to analyse (not your name or contact details) | USA |
| PostHog | Product analytics (only after you consent) | Usage events, anonymised identifiers | USA / EU |
International transfers
Some providers above store data in the United States or the EU. Where personal data leaves Singapore, the EEA or the UK, we ensure a comparable standard of protection as required by the PDPA's transfer limitation obligation, and use Standard Contractual Clauses where the GDPR or UK GDPR applies.
Your rights
Wherever you live, you can:
- Access the personal data we hold about you.
- Correct anything inaccurate.
- Delete your account and data ("right to erasure").
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time — analytics, marketing and newsletter.
To exercise any of these, email [email protected]. We respond within 30 days. EU/EEA and UK users may also complain to their supervisory authority; Singapore users may contact the PDPC.
Cookies
We use strictly necessary cookies (sign-in sessions, security) and — only with your consent — analytics and marketing cookies. Details, including how to change your choice, are in our cookie policy.
Children
Metamorphy is designed for adults planning the second half of life. The minimum age to use the service is 13, and it is not directed at children. If we learn we hold data on a child under 13, we delete the account and its data promptly.
Security
Data is encrypted in transit and at rest, passwords are stored only as strong hashes, and the service is read-only by design — we never hold credentials to your bank accounts and cannot move your money.
Changes to this policy
If we make a material change we will tell you by email or a notice in the service before it takes effect, and update the date at the top of this page.
Governing law
This policy is governed by the laws of England and Wales. This does not reduce the protections you have under the PDPA, GDPR or UK GDPR, which apply regardless.
Draft — pending legal review.