Privacy Policy
Last Updated: February 20, 2026
1. Introduction
Welcome to SnapSavor. This Privacy Policy explains how Moor Service ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and related services (collectively, the "Service").
We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy applies to all users of SnapSavor and complies with the Swiss Federal Act on Data Protection (nFADP), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, username, and profile information when you create an account
- Recipe Content: Photos, links, text, PDF files, and other content you submit to extract recipes
- User-Generated Content: Notes, modifications, tags, and organizational data you add to recipes
- Payment Information: Handled securely through Apple's in-app purchase system; we do not receive or store payment card details
2.2 Information Collected Automatically
- Usage Data: Features used, recipes created, app interactions, and session duration
- Device Information: Device type, operating system version, device language/locale settings, and push notification device tokens (unique device identifiers used to deliver push notifications)
- Log Data: Server access logs including IP addresses, access times, and error information for security and troubleshooting purposes
2.3 Information Processed by Third-Party AI Services
When you use SnapSavor's recipe extraction, translation, or nutritional estimation features, the following data is sent to third-party AI providers for processing:
- Recipe content only: The text, images, or PDF content you submit for recipe extraction
- Device language preferences: Your device's language settings, locale, and keyboard languages (to determine the appropriate output language)
We do NOT send the following to AI providers:
- Your IP address
- Your email address or username
- Your authentication credentials
- Your account or subscription information
- Any personally identifiable information beyond what is contained in the recipe content you submit
AI requests include only the application name ("SnapSavor") as a referrer header—no user-specific identifiers are transmitted.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide the Service, including recipe extraction, translation, and account management
- Legitimate interest (Art. 6(1)(f) GDPR): Service improvement, security monitoring, and fraud prevention
- Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for optional communications
- Legal obligation (Art. 6(1)(c) GDPR): Compliance with applicable laws and regulations
4. How We Use Your Information
We use collected information for the following purposes:
- Service Delivery: Extract recipes from photos, links, text, and PDF documents using AI technology
- Translation Services: Provide recipe translations in multiple languages
- Nutritional Estimation: Analyze ingredients to estimate nutritional information (these are estimates only and should not be relied upon for medical or dietary decisions)
- Account Management: Create and manage your user account
- Service Improvement: Analyze usage patterns to improve AI accuracy and user experience
- Customer Support: Respond to inquiries and provide technical assistance
- Security: Detect, prevent, and address technical issues, fraud, and security incidents
- Legal Compliance: Comply with applicable laws and regulations
- Communication: Send service updates, security alerts, and support messages
5. Data Sharing and Sub-Processors
5.1 Third-Party Service Providers (Sub-Processors)
We share data with the following trusted service providers who assist in operating our Service:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| OpenAI | AI-powered recipe extraction, translation, nutritional estimation | Recipe content (text, images, PDFs), device language settings | Global |
| OpenRouter | AI model routing and processing (alternative AI models) | Recipe content (text, images), device language settings | Global |
| Apple | App distribution, payment processing, subscription management | Purchase and subscription data (managed by Apple) | USA / Ireland |
| Cloudflare | Content delivery, DDoS protection, DNS | Web traffic metadata (IP addresses, request headers) | Global (nearest edge) |
All third-party providers are contractually obligated to protect your data and use it only for the specified purposes. You can review their respective privacy policies:
5.2 AI Processing Details
When recipe content is processed by AI services:
- Requests contain only recipe content and language preferences—no user account data, IP addresses, or personal identifiers
- We use the AI providers' API services, which are subject to their respective data processing terms and do not use your data to train their models
- Images and PDFs are sent inline within the API request (as encoded data) and are subject to the AI provider's standard API data retention policies
- AI processing results are stored in your account on our servers in Switzerland
We cannot control how AI providers handle data after it reaches their systems. We encourage you to review their privacy policies linked above to understand their data retention and processing practices.
5.3 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing or any other purposes.
5.4 Legal Requirements
We may disclose your information if required by law, legal process, or governmental request, or to:
- Enforce our Terms of Service
- Protect our rights, privacy, safety, or property
- Protect against legal liability
- Investigate potential violations
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time.
Retention Periods:
- Account Data: Retained until account deletion is requested
- Recipe Content: Retained until you delete specific recipes or your entire account
- AI Processing Logs: Request and response logs retained for up to 12 months for debugging and service improvement, then automatically deleted
- Server Access Logs: Retained for up to 12 months for security purposes
- Backup Data: Deleted from backups within 90 days of account deletion
7. Your Rights and Choices
7.1 Access and Portability
You have the right to:
- Access your personal data stored in our systems
- Export your recipe data in a portable format
- Request a copy of your data in machine-readable format
7.2 Correction and Deletion
You may:
- Update your account information through app settings
- Delete individual recipes or collections
- Request complete account deletion, which will remove all associated data
7.3 Opt-Out Rights
- Push Notifications: Disable through your device settings
- Account Deletion: Request via app settings or by contacting us
7.4 Exercising Your Rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data is encrypted using TLS/SSL protocols
- Encryption at Rest: Stored data is encrypted using AES-256 encryption
- Access Controls: Strictly limited access on a need-to-know basis
- Infrastructure: Hosted on dedicated servers in Switzerland with Cloudflare protection
- Incident Response: Procedures for detecting and responding to data breaches in compliance with applicable notification requirements
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Moor Service is based in Switzerland. Your recipe content may be transferred to and processed outside Switzerland when using AI-powered features (via OpenAI and OpenRouter), as these providers operate globally.
We ensure appropriate safeguards for international data transfers through:
- Switzerland's adequacy status under EU data protection law
- Standard contractual clauses (SCCs) approved by the European Commission where required
- Data processing agreements with all third-party providers
- Minimizing the data transferred to only what is necessary for processing (no personal identifiers are sent to AI providers)
We comply with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR) for all data transfers.
10. Children's Privacy
SnapSavor is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will promptly delete the data.
11. Cookies and Tracking Technologies
Our website (snapsavor.app) uses only essential cookies required for basic site functionality, such as language preferences. We do not use third-party tracking cookies, analytics cookies, or advertising cookies.
The mobile application does not use cookies. Device language settings stored locally on your device are used to provide content in your preferred language.
12. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected and how it is used
- Right to know whether personal information is sold or disclosed (we do not sell data)
- Right to delete personal information
- Right to non-discrimination for exercising privacy rights
13. GDPR and Swiss Data Protection Rights
If you are located in the European Economic Area or Switzerland, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:
- Posting the updated policy with a new "Last Updated" date
- Displaying an in-app notice for material changes
Your continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Website: https://snapsavor.app
For privacy-related inquiries or to exercise your rights:
Email: [email protected] (Subject: Privacy Request)
16. Supervisory Authority
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- EU/EEA: Your national data protection authority