On-device scan · No server · EU and UK GDPR

Every company you ever emailed
still has your personal files.
Make them delete you in one tap.

Old gyms, former employers, and online shops still keep your private files. Morn runs locally on your iPhone, scans your inbox for forgotten accounts, and sends each company a formal erasure request under GDPR Article 17 — with no cloud servers and no middlemen.

Soon on App Store Free inbox scan and your first five cases · Morn Guard €14.99 for the first year · or €69 once, for good
Morn's board: Who has your data — 14 companies still open, counted into Needs a letter, Needs action, Done, Awaiting reply, Parked and Kept.
The list only you have

You can name four. There were probably two hundred.

Not the companies you think of. The ones you forgot, because you stopped needing them years ago and they never stopped keeping you.

Moved away in 2017

The hospital in the city you left.

You changed address, doctor and country. The file did not move with you. It has your diagnosis, your insurance number and the name of your next of kin.

DiagnosisInsurance numberNext of kin
Outcome: permanent erasureHealth file erasureRequests erasure of the health record, the insurance file and the next-of-kin data, under GDPR Articles 9 and 17.
Cancelled in 2019

The gym you stopped going to.

The membership ended. The record did not. Your bank details for the direct debit, your date of birth, and the photo from the sign-up desk are still on a server that also does marketing.

Bank detailsDate of birthPhoto
Outcome: permanent erasurePayment and photo erasureRequests erasure of the payment history, the date of birth and the sign-up photo, under GDPR Article 17.
Two jobs ago

The employer you left.

Onboarding needed a copy of your passport, a bank form and your home address at the time. Payroll systems keep it. Some of it they must keep. Most of it they must not.

Passport scanSalary historyOld address
Outcome: full disclosurePassport and onboarding disclosureAsks what is still held — the passport scan, the salary history, the old address — under GDPR Article 15.
One order, years ago

The online shop you used once.

A single purchase, and a customer file with your card, your phone number, your address, and a commercial reason to keep mailing you. This is the file that feeds the marketing trade.

CardPhone numberAddressWhat you bought
Outcome: permanent erasureBroker supply chain cutRequests erasure of the card, phone number and address, and the list of everyone the file was shared with, under GDPR Articles 17 and 19.
You sign-ups, orders, memberships MornArticle 17 letters hospital2017 gym2019 employertwo jobs ago shopone order customer files, weekly data brokersmarketing · audience ads that know too much · lists · the next breach
How the trade is fed · 1 of 4

How your data reaches the brokers — and where Morn cuts it off.

A company you signed up to has your name, your address, what you bought and how often. That ordinary customer file is the raw material of the commercial data trade.

250+ brandscontribute transactional data to one shared marketing database every week, by Epsilon's own description of its Abacus Alliance.
How the trade is fed · 2 of 4

Not from public records.

When France's CNIL fined a data broker €900,000 in May 2025, it found the prospect data had come mainly from other brokers, competition sites and product-testing sites. In Europe, the pathway runs through ordinary customer files.

68% in four monthsWhat the best paid removal service cleared in Consumer Reports' August 2024 test. Several cleared under 10%. Doing it by hand beat all of them.
How the trade is fed · 3 of 4

Cut it where it starts.

Asking a broker to delete your record removes a copy while the companies that supplied it still hold the original. Morn goes to those companies and asks each to erase you under Article 17. Under Article 19, a company that erases you must pass that erasure on to everyone it shared your data with. Only when the sources themselves stop holding you does the supply into the trade thin out. Erasing the original account record is what stops the same file being sold on again.

How the trade is fed · 4 of 4

What this does not do.

The limit, said plainly.Morn finds companies that have emailed the mailbox you connect. It does not reach public registers, credit bureaus, tracking inside apps, or copies a company has already sold. It closes the pathway at its origin. It does not remove you from a broker's database. The flow thins. It does not stop.
The manual alternative
200
hours of it, by hand.
identify the companyfind the privacy contactcite the right articleword the lettername your regulatorsend it from your addresswatch the monthchase the silencejudge the reply

By hand, every company means finding the privacy contact, citing the right article, wording the letter and watching the month. Morn does that part on your phone, and leaves you the one decision that matters.

How it works

Not something you hand over. A set of instruments you hold.

The whole journey inside the app, from the first scan to the last reply. Every step is on the screen, and nothing goes out until you press send.

1

Every sender, listed

Before any of them is judged. Watch it happen, stop it, and pick it up later.

The scan listing every message
2

You decide who stays

Mark a company Kept and Morn will never write to it — not by hand, not in a batch, not by accident.

Review: the companies found, with a Protected tab for the ones you still use
3

You see the letter and the address

The article it cites, the regulator it names, and where Morn found the privacy contact. Nothing is sent until you press send.

A case: the verified privacy contact, where it was found, and the letter ready to review
4

The letter, in full

Real wording from the app, not a template someone will bin. The article, the grounds, the deadline and your own regulator are all in it.

Subject: Erasure Request under Article 17 GDPR — marta.kowalska@example.comTo the Data Protection Officer / Privacy Team,

I am a data subject within the meaning of Regulation (EU) 2016/679 (GDPR). I am exercising my right to erasure under Article 17 GDPR.

Please erase without undue delay all personal data concerning me, including:
— my account and profile data,
— all content, activity history, logs and message data associated with the account,
— any behavioural, advertising or inferred-interest profile built about me,
— and any copies held in backups, analytics systems, CRM systems, or by processors acting on your behalf.

Under Article 19 GDPR you must communicate this erasure to each recipient to whom the data have been disclosed. Please confirm that you have done so, and inform me of those recipients.

Under Article 12(3) GDPR you must respond without undue delay and in any event within one month of receipt — that is, by 3 October 2026. If I do not receive a substantive response by the deadline above, I will lodge a complaint with my supervisory authority, the Personal Data Protection Office (UODO), under Article 77 GDPR.
5

Every rule, on the screen

The whole decision graph — rule, decision, guard, outcome — is one screen. Pinch to zoom.

How Morn works: the whole decision graph
6

Every reply, with its evidence

A case is closed only when the reply actually says so. Ambiguous replies stay open, and the clarification goes to the company, not to you.

A case that is overdue by 11 days, with Follow up and Escalate to the authority as the next steps
← scroll the steps · tap a screen to enlarge →
After you send

A month, and what happens in it.

A company has one month to answer. Morn starts the clock on the day the letter goes, analyses the replies as they arrive, and records what each one said. If nobody answers, it composes the formal reminder that quotes the original.

Not every company will erase you, and Morn does not pretend otherwise. A bank is often required by law to keep records for years. Those are marked Parked, with the reason. When a company confirms it, that is the end of it — and Morn says so only when the reply actually says so.

day 22 of 30
Awaiting reply: each company with its one-month deadline.
Finished: five companies handled — three confirmed erased, one held nothing, one kept.
It also

More than the places in your mail.

The Brokers tab

Brokers, with a dossier each

Every broker Morn can verify for your country, and one action per route — email, form, portal or post.

The identity vault

Identity vault

What brokers demand for an identity check, behind Face ID, with redaction burnt in.

Guard: the settled board

Guard

It scans again on a schedule and shows who appeared since last time.

Unsubscribe in the app

Unsubscribe

One tap, in the app, for senders that support one-click unsubscribe. No browser.

3,540

Verified privacy contacts

Read from companies' own policy pages. Morn never guesses an address.

31

Supervisory authorities

Your letter names yours, in its own language, as the place you would complain.

Security and privacy

Your inbox data never leaves your iPhone.

Nothing here asks you to take our word. Every line below is a fact you can check yourself.

✓
No server.Your mail stays on your phone. Nothing is uploaded, so there is nothing to breach, subpoena or leak.
✓
No account.No sign-up, no password, no email address collected. You use Morn anonymously.
✓
No analytics.No tracking SDK, no crash reporter, no analytics endpoint. Morn has no server of its own. Every destination it does reach, from your mail provider to the companies it looks up, is listed in the privacy policy.
✓
On the device.Working out what each sender is, and what each reply means, happens on the phone. The results live in one file, on the phone.
✓
Read and send, nothing else.Morn analyses the mailbox on the device to identify senders and understand replies, and sends only the letter you press send on. With Gmail it never asks for permission to delete, move, label or archive a message, so it cannot.
✓
No ad model.One developer, paid for by the app itself. No trackers, no ad network, no data business behind any of it.
Pricing

See who has your data for free. Pay only when the list is long.

No ads, no data business, no free trial that turns into a bill. The scan and your first five cases cost nothing. Morn Guard is for the aftermath at scale. Lifetime is the same, paid once.

Free
€0for good
  • Full local inbox scan — every sender listed, every company found
  • Verified privacy contacts, never guessed
  • Your first five cases, complete: letter, replies read, deadline chased, follow-up, done
  • One letter per press, from your own address
  • Brokers tab with your first two brokers, identity vault, one-tap unsubscribe
  • Scheduled re-scans of one mailbox, monthly digest and the home-screen widget

No account and no card. Nothing here turns into a bill later.

Soon on App Store
Recommended
Morn Guard
€29.99per year · €14.99 the first year
  • Everything in Free
  • Unlimited cases — Morn reads every reply, chases every deadline, and re-checks monthly, on every company it finds
  • Send to all companies in one press
  • As many mailboxes as you have
  • Every broker in the catalogue, not just the first two

Paid up front for the first year, then €29.99 a year until cancelled. Cancel any time in your App Store account settings. No free trial, so nothing converts by surprise.

Soon on App Store
Lifetime
€69one payment
  • Everything in Morn Guard
  • Never renews, nothing to cancel
  • Shareable with your family through Apple Family Sharing
  • Every future version included

A single payment. The Lifetime unlock never renews and there is nothing to cancel.

Soon on App Store
200 hoursof manual legal drafting, if you did it by hand
€14.99Morn Guard for the first year — every company, every reply, every deadline
€0to see the whole list and settle your first five

Paying for Morn pays one developer for the time it takes to build it. That is the whole business — there is no server to sell your inbox from, and nothing about you is ever the product.

The awkward questions

Asked before you have to.

Does Morn read my emails?

It analyses them, on your device. That is how it works out who a sender is and what a reply means. It does not send them anywhere. There is no server and no account.

What can it not find?

Companies that never emailed you. Morn builds its list from the mailbox you connect. It also does not reach public registers, credit bureaus, tracking inside apps, or data a company has already sold on.

What if a company refuses?

Some refusals are lawful. Morn marks those Parked, with the reason. If a company ignores you, Morn composes the reminder, and the letter already named the regulator you can go to.

Which mailboxes work?

Gmail through Google sign-in, and iCloud, Outlook, Yahoo, Fastmail or any IMAP mailbox with a password you create just for Morn. Or an exported mail archive: no mailbox connection and no password, with the same end-of-scan lookup of each company's published privacy contact.

Why does it need my mailbox password?

It does not need your real one. Gmail connects through Google sign-in, with no password given to Morn, and asks only to read mail and send from your address, never to delete or manage it. Every other provider issues a separate app password you can revoke at any time. Both are kept in the keychain on your device.

Can it make a mistake?

Yes. It runs on a phone, with limited computation. When it is unsure it says so and shows you what it saw, rather than guessing.

How does Morn make money if my data stays on my device?

Morn does not sell your data or serve ads — there is no server that could. The scan and your first five cases are free. Past that you pay for Morn Guard, €14.99 for the first year and €29.99 a year after, or €69 once for Lifetime, and that is the whole business.

What does it need?

An iPhone on iOS 18 or later, and a mailbox you can create an app password for. Morn is built on a single third-party library, a SQLite wrapper. Every extra dependency is another place a supply chain can fail, so there is only one.

How long does this take?

Setup is about two minutes. Then a company has a month to reply, and some use all of it.

Your list is already written. Nobody has read it.

Morn goes through it on your iPhone and asks every company on the list to delete you.

Soon on App Store Free inbox scan and your first five cases · Morn Guard €14.99 for the first year · or €69 once, for good
The board, settled: 100% verified, 23 done, 5 kept.