Morsino Privacy Policy

Data Controller

Lorenzo Perrone

Data Accessed and Processed

• Food logs, meal timestamps, measured or estimated quantities, units, nutritional facts (energy, macros, fiber, vitamins, minerals), meal templates, favorites, and optional personal targets are stored locally in an on-device SQLite database. They are never uploaded to any Morsino server or developer cloud.
• Voice dictation streams audio directly to the operating system’s on-device speech recognizer and is never recorded, saved, or uploaded by Morsino. Camera input for barcode scanning, nutrition-label OCR, or supported on-device meal photos is initiated solely by your explicit action. Captured draft images are processed locally and deleted immediately upon completion or cancellation. User-selected gallery photos remain in your photo library and are not retained or copied by Morsino.
• When you explicitly initiate a packaged-food search, Morsino sends Open Food Facts either the numeric barcode you scanned or entered, or the product-name query you chose, to retrieve available product facts. Your meal logs, food history, dietary habits, and personal targets are never sent.
• The local SQLite database and user preferences may be included in the encrypted device backup provided by your Apple or Google operating system account, according to your platform backup settings. The backup is managed entirely by Apple or Google; Morsino has no proprietary cloud sync, no central account system, and cannot access, index, or inspect the contents of platform backups.
• Transactions for optional support contributions (tip jar) are handled directly and securely by Apple App Store. Morsino does not receive, store, or process your credit card, bank, or billing information.

Purposes of Processing

• For data-protection purposes, core local processing is performed to provide the functions you request. Camera and microphone access, Open Food Facts lookups, and optional support purchases happen only after your explicit action through the relevant operating-system or store flow.
• To parse natural-language food descriptions, resolve items against the offline generic catalog or your personal product library, calculate nutritional estimates, and store meals you choose to confirm.
• To provide camera-based barcode scanning, on-device nutrition label OCR, voice dictation, and optional native on-device AI analysis upon explicit user request and permission.
• To fetch packaged food information from Open Food Facts when you explicitly search by barcode or product name, allowing you to review the product before saving it to your local library.
• To generate versioned CSV, JSON, and full local backup files when you request an export, transferred exclusively via your device’s native sharing sheet.

Third-party services and transfers

• Open Food Facts is queried exclusively when you trigger a packaged-food lookup by barcode or product name. The request contains only the barcode or search text you chose and is governed by Open Food Facts’ privacy policy. Morsino does not link searches to an identity or send food diary records.
• Apple and Google operating system services handle on-device system capabilities (speech recognition, vision/OCR, native on-device models), optional support purchases via their app stores, and user-controlled encrypted device backups under their respective privacy policies.
• The current release contains zero third-party advertising SDKs, analytics frameworks, behavioral trackers, or crash-reporting telemetry. Cloud and BYOK AI provider integrations remain hidden, dormant, and inactive in this release.
• When you export data or create a full backup, the resulting file is passed to your operating system’s native share sheet. The chosen destination (e.g., local storage, email, external drive) processes the file under its own terms.

Security measures

• Your dietary data is kept in a sandboxed Drift / SQLite database (schema version 6) on your device. Sensitive configuration values reside in hardware-backed secure storage.
• Microphone audio and camera draft images are ephemeral, processed in volatile memory or temporary cache, and never stored as persistent records in your food database.
• Import and backup routines rigorously validate data schemas, checksums, and nutrition values before applying changes, rejecting corrupt or malicious inputs.

Retention and deletion

• All meal entries, products, nutritional values, templates, and preferences persist on your device until you edit or delete them within the app, clear application storage, or uninstall Morsino.
• Because Morsino does not maintain cloud servers or user accounts, there is no remote data copy to delete on developer servers. Platform device backups can be managed or deleted at any time through Apple iCloud or Google Drive/One backup settings.
• Open Food Facts handles product-lookup requests according to its own retention and privacy practices; Morsino does not control that external service.

Privacy choices and user rights

• Use Morsino completely offline without an internet connection, relying on the built-in generic food catalog and on-device parser.
• Grant, deny, or revoke camera and microphone permissions at any time via device settings. Manual text entry and structured logging remain fully functional.
• Bypass Open Food Facts barcode or product-name lookup and enter or edit product data manually in your local product library.
• Export your complete diary in CSV, JSON, or validated full backup format at any time, and control whether Morsino is included in your platform device backups.
• Delete individual meals, products, and templates directly from the app interface with immediate local effect.

Under the GDPR and other applicable data-protection laws, you have rights of access, rectification, portability, and erasure. Since Morsino does not identify you, create personal accounts, or retain records on developer servers, you exercise these rights directly on your device by editing, exporting, or clearing your data. For any clarification, contact the developer at the support address listed below.

Contact and last updated

app [at] lorenzoperrone.it

2026-09-19

This privacy policy reflects Morsino version 1.0.0+1 for iOS, reviewed on 2026-09-19 against the current release configuration, permissions, backup settings, and network behavior. Any future update that introduces new capabilities or third-party integrations will be reflected here before deployment.

Store disclosure note

This page is intended to remain publicly accessible and reusable as the Privacy Policy URL for the App Store. Apple App Privacy answers must stay aligned with the actual released build.