Morning Scan, formerly Pebbl, is made by Seth Moffat. This policy describes the iOS app’s face data, local account and privacy controls. Face scans can identify you. Morning Scan processes scans on your device and does not upload them to us.
1. Face data the app accesses and creates
With your camera permission, Morning Scan accesses front-camera frames while the scan camera is active. Live frames are processed in memory; the app does not record a continuous video. Selected frames are saved as face photographs, along with a thumbnail.
On the device, the app computes 478 facial landmarks, head position and orientation, facial transformation matrices, expression coefficients (blendshapes) and image-quality measurements. Saved scan records include the selected frames’ landmarks, pose, transformation and quality values, capture times, scan date and camera dimensions and field of view. Live expression coefficients are not saved in scan history.
The app creates a textured 3D face model, texture image and reconstruction statistics. It also compares brightness, redness, highlights and image texture within facial regions and measures relative eye opening, brow height and mouth position. These analysis measurements are used during suggestion generation; the saved suggestion includes its text, image observation and an internal score. The score is not a medical confidence estimate.
2. How face data is used
Face data is used only on your device to guide capture, select usable images, reconstruct and display your 3D face, choose a general care tip, maintain your scan calendar and provide an export when you request one. It is not used to identify or authenticate you, advertise to you, track you across apps, train models, or create a public profile. These are the purposes of the current app; a future change in data practices would require an updated policy and any applicable consent.
Suggestions describe image appearance and general habits. They do not diagnose a condition, measure hydration or establish a medical need. Sources and limitations are available beside each suggestion and in Settings.
4. Storage and retention
Saved face data stays in the app’s private Application Support/scans folder on your device. The folder is excluded from iCloud/device backups. Live camera buffers are cleared when the camera stops. Completed scans remain until you delete them, delete your local account, delete the app, or a later successful scan replaces an earlier scan for the same calendar day.
The app attempts to remove unused captured frames when saving a scan and removes failed or unclear scans. On launch it retries cleanup of interrupted scans and scans without a saved usable suggestion. Temporary export ZIPs are stored in the app’s cache; the app removes them after the share sheet closes, before another export, at the next launch, or when you delete scans or your account. A storage error or interruption can delay automatic cleanup; the deletion controls report failures so you can retry.
Your preferences and local sign-in record are stored in the app’s private settings database. They may be included in device backups. App deletion cannot remove older device backups, copies you exported or data another service holds independently; manage those with the relevant device or service. There is no server-side copy or server retention period for face data.
5. Optional sign-in and the local account
You can use all scanning features as a guest. If you choose Sign in with Apple, the app saves Apple’s app-specific user identifier, the name you share if supplied, and the local account creation time. It does not request your email address. Apple sign-in tokens and authorization codes are not retained or exchanged with a Morning Scan server. A guest record contains only the account type and creation time. There is no account sync between devices.
The app checks Apple’s credential state and listens for revocation. When Apple reports access revoked or the credential missing, the app begins deletion of the local account and its associated saved data. A connectivity error alone does not trigger deletion.
6. Export and deletion controls
To export, open Settings → Privacy & saved scans → Export my scan history. Keep the exported file private: it contains identifying face data.
To erase scan history while keeping your local account, open Settings → Privacy & saved scans → Delete my scan history. This removes every saved scan and its associated photos, landmarks, models, textures, statistics and suggestions, as well as temporary exports in the app.
To delete your account, open Settings → Delete account → Delete account and all data. This removes the local Apple or guest account record, preferences, scheduled and delivered reminders, all saved face data and app-controlled temporary exports. Completion is confirmed in the app only after cleanup succeeds. If deletion is interrupted, the app resumes it on launch; if it fails, use Retry deletion. No email, phone call or waiting period is required.
Deleting the local account does not delete your Apple Account. Because Morning Scan has no stored Apple tokens, it cannot automatically revoke Apple’s separate sign-in authorization. After local deletion, the confirmation screen provides Apple’s instructions: in iOS Settings, open your name → Sign in with Apple → Morning Scan (or Pebbl) → Delete. You can complete local deletion without taking that separate step.
7. Permissions and reminders
The camera explanation leads to the native iOS permission prompt. You can deny camera permission; scanning then remains unavailable until you enable it in iOS Settings. Notifications are optional local daily reminders. The app does not register for a remote push token or send notification data to a Morning Scan server. You can turn reminders off in the app or manage permissions in iOS Settings.
8. Children, changes and contact
Morning Scan is not directed at children under 13. If our data practices change, we will update this policy and its effective date. Contact Seth Moffat at seththedeveloper@gmail.com with privacy questions. If you choose to contact us, your message and anything you attach are handled through email; do not attach face scans unless you intend to share them.