Privacy Policy

Last updated: October 2, 2026

Morning Meeting is a product of Appmakey LLC ("we", "us", "our"). We collect only what we need to deliver your personalized daily briefing: account details (name, email, password), your agenda and briefing instructions, your location (for weather and local news), and — when you opt in — mail and calendar data from the providers you connect.

Connected accounts

When you connect Google or Outlook, we access only the read-only scopes you approve and use that data only to generate the calendar and email summaries you request. We never send or modify mail or calendar entries on your behalf.

Google OAuth tokens are encrypted at rest in Morning Meeting's database, and Morning Meeting calls the Gmail and Google Calendar APIs directly. Outlook OAuth tokens and provider API calls are handled by Composio, our technical processor. See Connected-account data use for details.

AI processing

We send the briefing context needed for your requested feature to OpenRouter, our AI API processor. The application uses Anthropic Claude, Google Gemini, and OpenAI GPT model families. OpenRouter routes requests to the providers hosting the selected models; these may include Amazon Web Services (Bedrock), Google Cloud (Vertex AI), and Microsoft Azure. OpenRouter publishes its provider data policies.

For Google and Outlook briefing generation, editing, and follow-up answers, we require endpoints designated by OpenRouter as no-training and zero-data-retention, and disable external search and other AI tools. We do not enable OpenRouter prompt/response storage or data-sharing opt-ins for this processing. We do not use raw or derived Google user data to create, train, or improve generalized AI or machine-learning models. We do not sell Google user data or use it for advertising.

Morning Meeting's use and transfer of information received from Google APIs, including raw and derived data, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other processors and data protection

Our application and database are hosted on DigitalOcean and deployed through Hatchbox. If you enable briefing emails, Resend processes the recipient address and briefing content to deliver them. Replies you send to briefing emails are also processed through Resend. Google data is not sent to Composio for the direct Google connection.

We use HTTPS for the production site and Google/AI API calls, encrypt Google access and refresh tokens at rest, hash account passwords, and require authenticated, account-scoped access to private briefings. If you explicitly create and distribute a share link, anyone with that link can view the shared briefing. Disconnecting Google asks Google to revoke the grant and removes the locally stored tokens.

Retention

Briefings that contain third-party mail or calendar data and their related reply conversations are retained in the application for a limited period (default: 30 days) and then automatically purged. You can also delete any individual briefing result from its page. Feedback on these briefings is not automatically saved as long-term profile or briefing guidance. Copies already delivered to your email inbox are not removed when the application copy is deleted.

Your controls

From Settings you can: disconnect any provider, change your preferences, and permanently delete your account. Deleting your account removes your profile, sessions, meetings, and generated briefings.

Contact

For privacy requests, visit Support.