This page sets out exactly what Mornio stores, what it never stores, and what it cannot promise. It is written to be checkable against the app and its App Store privacy declaration rather than to sound reassuring.

The short version

What is stored on your device

Everything Mornio keeps, and where it lives.
DataWhereLeaves the device?
Alarm times, repeat days, labelsApp’s private storageNo
Registered code fingerprintsApp’s private storageNo
The label you type for each codeApp’s private storageNo
Alarm historyApp’s private storageNo
PreferencesApp’s private storageNo
Subscription statusApple, via your Apple AccountHandled by Apple, not us

What happens to a scanned code

When you register a QR code or barcode, Mornio computes a SHA-256 hash of the code’s value, combined with a fixed application salt, and stores that string. It does not store a photograph of the code, and it does not store the readable value.

In the morning, Mornio hashes whatever the camera reads and compares the two strings. Match, and the alarm stops.

An honest limit on that

The salt is a fixed value compiled into the app, not a per-user secret. So the correct claim is that Mornio does not retain the readable value and nothing leaves your device — not that the stored string would be impossible for a determined party with your unlocked device to work back to a common product barcode. We would rather state the actual protection than imply a stronger one. If that matters to you, use a printed QR code rather than a product barcode, since it reveals nothing about your shopping either way.

Why Mornio needs camera access

Solely to read the code that dismisses your alarm. The permission string in the app reads:

Mornio uses the camera only to scan the QR code or barcode you chose to turn off your alarm. Images are never stored or sent anywhere.

Camera frames are processed to detect a code and are discarded. Nothing is written to your photo library, and Mornio does not request photo library access at all. If you decline camera access, the Wake Check cannot work, but the alarm and emergency dismissal still function.

Are barcode images stored?

No. Not at registration and not at scan time. Only the hash and your own label are kept.

How subscriptions work without an account

Purchases run through Apple’s in-app purchase system and attach to your Apple Account. We never see or handle your payment details, and there is no Mornio account involved.

To restore on a new iPhone: sign in to the same Apple Account, install Mornio, open its settings and tap Restore Purchases. Your alarm history does not transfer, because it is only ever stored on the device it was created on.

What Mornio does not collect

Our Privacy Policy is the formal version of this, and the App Store listing carries the declaration Apple requires. You can compare the two.

What this page cannot promise

Three things worth being straight about:

Reporting a security issue

Email support@mornioapp.com with what you found and how to reproduce it. We would rather hear about a problem than have it sit unreported. There is no bug bounty programme.