Privacy

Effective from: Oct 28 2026

morrow is run by Aarthi Videep, a sole proprietor. For privacy questions, contact contact@dearmorrow.co or call +91 98848 00648.

Your plan

You write your plan in your browser. Its contents are not uploaded to morrow when you write, save or export it.

Your browser keeps a working draft on your device. You can save an encrypted Plan File yourself or choose to save it to your Google Drive.

We do not receive your Plan File, Emergency Sheet, Sealed File or Sealed File passphrase through normal use of the app. Purchase details and optional opening alerts are handled separately, as explained below.

What stays on your device

The browser stores your draft and settings so you can return to your plan. This browser draft is separate from your encrypted Plan File. Someone with access to your device and browser may be able to open it.

You can remove the draft from the app under "This Device". Removing it does not delete files you downloaded, copies in Google Drive, or copies you gave to other people.

Browser storage can be cleared or become unavailable. Keep a separate backup of your Plan File and Key.

The Sealed File also remembers checklist ticks in the recipient's browser where browser storage is available. Those ticks are not sent to us.

Google Drive, if you connect it

Connecting Google Drive is optional.

If you connect it, morrow saves your encrypted Plan File and its Key in a private app folder in your Google Drive. The app communicates directly with Google for this storage; the files do not pass through morrow's servers.

Because the file and Key are stored together, someone with access to your Google account may be able to access both.

Disconnecting Google in the app stops saving from that device. It does not delete the existing Drive copy. To delete it, open Google Drive, go to Settings, then Manage Apps, find morrow, and choose Delete hidden app data.

While you are signed in, your browser also keeps Google's sign-in for up to an hour, so a reload does not ask again. Disconnecting removes it.

Google processes information under its own privacy policy.

Buying a plan

When you buy, we receive the name and the email addresses entered at checkout (for a gift, yours and theirs). We use them to create your Key and send it to you.

If you ask to hear when morrow launches, we keep that email address with our email provider, Resend, only to email you about the launch. Reply to any of those emails, or write to contact@dearmorrow.co, and we'll delete it.

Razorpay processes the payment and collects the information needed for your chosen payment method. We receive purchase information such as the payment reference, amount, payment status and associated contact details. Razorpay handles payment credentials under its own privacy policy.

We use purchase records to deliver your Key, resolve payment problems, verify requests for a replacement Key, and meet accounting and legal obligations.

Your Key contains information linked to your purchase, including the name and email address. Treat it as private.

Emails and support

We use an email delivery provider to send Keys and opening alerts. That provider processes the recipient's address, message contents and delivery information.

If you contact us, we receive the information you include in your message. Please do not send your plan, passphrase, account passwords or other unnecessary personal details.

If you separately agree to receive occasional news about morrow, we use your email address for that purpose. You can unsubscribe or contact us to stop those messages. This does not stop essential messages about a purchase or support request.

Optional opening alerts

When you create a Sealed File, choose whether to receive an email when it is opened. You can change this choice when you create a new file.

To set up an alert, the app sends your Key and your plan email address to morrow's server to verify the purchase and authorise the alert. It does not send the contents of your plan or your passphrase.

An alert-enabled file contains your plan email and an authorisation token. When someone opens it while connected to the internet, it sends:

• A file identifier.
• The name shown in the file's title.
• The name entered by the person opening it.
• Your plan email and the authorisation token.

We use this information to send the alert, including the time the request reaches us. The private contents of the unlocked file and its passphrase are not sent.

Hosting, email delivery and abuse-prevention services also process the technical information needed to handle the request.

An offline opening cannot send an alert. Delivery may fail or be limited, and the opener's name is self-reported. An alert is not a reliable access history.

Changing this setting affects newly created files. It does not change copies already shared.

Website visits and security

Our hosting provider processes technical information, such as IP addresses and request times, to deliver the website and help keep it reliable and secure.

The public website uses the host's cookie-free page analytics to understand visits. The plan editor does not include page analytics.

The service also uses short-lived request records to limit abuse. Depending on the request, these can include an IP address, email address or file identifier.

The browser storage used for your draft, settings and recipient checklist is separate from website analytics.

Services we use

The product currently uses:

• Razorpay to process payments.
• Resend to deliver emails and manage email preferences.
• Vercel to host the website and provide website analytics.
• Google Drive, only if you connect it, to store your Plan File and Key.

These services receive the information needed for their role. Depending on the provider and configuration, information may be processed outside India.

How long information is kept

Your draft stays in your browser until you remove it or the browser clears it. Saved files remain wherever you or your recipients keep them.

We keep purchase records for 5 years to provide purchase support and meet accounting and legal requirements.

Support correspondence is kept for 5 years. Email delivery records are kept under Resend's privacy policy. Hosting logs and analytics are kept under Vercel's privacy notice.

Abuse-prevention records are temporary. Their retention depends on the request limit and the service configuration.

Marketing contact details are kept until you unsubscribe or request removal. A limited record may be retained to honour your choice not to receive further marketing.

Your choices and requests

You can:

• Remove your draft from the app.
• Disconnect Google Drive and separately delete its stored app data.
• Choose whether to receive opening alerts when you create a Sealed File.
• Unsubscribe from optional marketing emails.
• Contact us about the personal information we hold about you.

To request access, correction or deletion, or to raise a privacy concern, email contact@dearmorrow.co. We may ask for enough information to verify that the request is yours.

Some purchase records may need to be retained for legal reasons. If that applies, we will explain it. We cannot delete files held on your devices, in your Google Drive or by people you have shared them with.

For a formal privacy complaint, contact us at contact@dearmorrow.co.

Changes to this notice

If our practices change, we will update this page and its effective date. Where required, we will provide additional notice or ask for consent before using information in a new way.