Privacy Policy

Last Updated: October 5, 2026

1. Introduction

Welcome to SnapSavor. This Privacy Policy explains how Moor Service ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and related services (collectively, the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy applies to all users of SnapSavor and complies with the Swiss Federal Act on Data Protection (nFADP), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and profile information when you create an account
• Recipe Content: Photos, links, text, PDF files, and other content you submit to extract recipes
• User-Generated Content: Notes, modifications, tags, and organizational data you add to recipes
• Payment Information: Handled securely through Apple's in-app purchase system; we do not receive or store payment card details

2.2 Information Collected Automatically

• Usage Data: Features used, recipes created, app interactions, and session duration
• Device Information: Device type, operating system version, device language/locale settings, and push notification device tokens (unique device identifiers used to deliver push notifications)
• Log Data: Server access logs including IP addresses, access times, and error information for security and troubleshooting purposes

2.3 Information Processed by Third-Party AI Services

When you use SnapSavor's recipe extraction, translation, or nutritional estimation features, the following data is sent to third-party AI providers for processing:

• Recipe content only: The text, images, or PDF content you submit for recipe extraction
• Device language preferences: Your device's language settings, locale, and keyboard languages (to determine the appropriate output language)

We do NOT send the following to AI providers:

• Your IP address
• Your email address or username
• Your authentication credentials
• Your account or subscription information
• Any personally identifiable information beyond what is contained in the recipe content you submit

AI requests include only the application name ("SnapSavor") as a referrer header—no user-specific identifiers are transmitted.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide the Service, including recipe extraction, translation, and account management
• Legitimate interest (Art. 6(1)(f) GDPR): Service improvement, security monitoring, and fraud prevention
• Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for optional communications
• Legal obligation (Art. 6(1)(c) GDPR): Compliance with applicable laws and regulations

4. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Extract recipes from photos, links, text, and PDF documents using AI technology
• Translation Services: Provide recipe translations in multiple languages
• Nutritional Estimation: Analyze ingredients to estimate nutritional information (these are estimates only and should not be relied upon for medical or dietary decisions)
• Account Management: Create and manage your user account
• Service Improvement: Analyze usage patterns to improve AI accuracy and user experience
• Customer Support: Respond to inquiries and provide technical assistance
• Security: Detect, prevent, and address technical issues, fraud, and security incidents
• Legal Compliance: Comply with applicable laws and regulations
• Communication: Send service updates, security alerts, and support messages

5. Data Sharing and Sub-Processors

5.1 Third-Party Service Providers (Sub-Processors)

We share data with the following trusted service providers who assist in operating our Service:

Provider	Purpose	Data Shared	Location
OpenAI	AI-powered recipe extraction, translation, nutritional estimation	Recipe content (text, images, PDFs), device language settings	Global
OpenRouter	AI model routing and processing (alternative AI models)	Recipe content (text, images), device language settings	Global
Apple	App distribution, payment processing, subscription management	Purchase and subscription data (managed by Apple)	USA / Ireland
Cloudflare	Content delivery, DDoS protection, DNS	Web traffic metadata (IP addresses, request headers)	Global (nearest edge)

All third-party providers are contractually obligated to protect your data and use it only for the specified purposes. You can review their respective privacy policies:

• OpenAI Privacy Policy
• OpenRouter Privacy Policy
• Apple Privacy Policy
• Cloudflare Privacy Policy

5.2 AI Processing Details

When recipe content is processed by AI services:

• Requests contain only recipe content and language preferences—no user account data, IP addresses, or personal identifiers
• We use the AI providers' API services, which are subject to their respective data processing terms and do not use your data to train their models
• Images and PDFs are sent inline within the API request (as encoded data) and are subject to the AI provider's standard API data retention policies
• AI processing results are stored in your account on our servers in Switzerland

We cannot control how AI providers handle data after it reaches their systems. We encourage you to review their privacy policies linked above to understand their data retention and processing practices.

5.3 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing or any other purposes.

5.4 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or to:

• Enforce our Terms of Service
• Protect our rights, privacy, safety, or property
• Protect against legal liability
• Investigate potential violations

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may delete your account at any time. What happens to your data after that is described in sections 6.1 to 6.4 below.

Retention Periods:

• Account Data: Retained while your account is active. After you delete your account, personal data is permanently anonymised after 30 days
• Recipe Content: Retained until you delete specific recipes, or until 45 days after you delete your entire account
• AI Processing Logs: Request and response logs retained for up to 12 months for debugging and service improvement, then automatically deleted
• Server Access Logs: Retained for up to 12 months for security purposes
• Backup Data: Deleted data can remain in backups for up to 30 days after it was deleted, then it is gone for good

6.1 What Happens When You Delete Your Account

1. Immediately: Your account is deactivated.
2. Within 30 days: You can cancel the deletion by signing in again. Your account and all your content are then fully restored.
3. After 30 days: Your personal data is permanently anonymised. This covers your name, email addresses, profile picture, social links, and the author name and picture shown on your feed cards.
4. After 45 days: All your content is permanently deleted from our database and from our media storage. This covers your recipes with their photos and images, your shared links (including links that other people created to your recipes), your feed cards, your feedback with screenshots, your exports, and reports you filed about other content, unless they concern an account or content under legal hold (see 6.4).

6.2 What We Keep

Some records remain after deletion:

• Anonymised account record: This keeps usernames and email addresses unique. It no longer identifies you.
• Subscription and billing records: We keep these to meet our legal retention duties.
• Do-not-email records: We keep these so that we respect your opt-out.
• Reports about you or your content: Reports that other users filed about you or your content are kept as moderation records.
• Notifications you triggered in other users' feeds: We keep these with your name removed.
• Copies of your shared recipes saved by other users: These copies belong to those users and stay in their accounts. They may still show your original display name as the author.

6.3 Backups

Our database keeps point-in-time recovery for 30 days. Our media backup keeps deleted files in a dated trash for 30 days. Deleted data can therefore remain in backups for up to 30 days after it was deleted. After that it is gone for good.

6.4 Legal Hold

If your account or content is the subject of a report of illegal content, or of a request by a law enforcement authority, we may suspend the anonymisation and deletion described above for as long as necessary to handle it. In that case we retain the affected data under restricted access and hand it over to the competent authorities where the law requires it. Our legal basis is our overriding interest (Art. 31 nFADP) and the establishment, exercise or defence of legal claims and compliance with legal obligations (Art. 17(3) GDPR). Reports that other users filed about such an account or content are also kept until the matter is closed, even if the reporting user deletes their own account. Once the matter is closed, the normal deletion resumes.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal data stored in our systems
• Export your recipe data in a portable format
• Request a copy of your data in machine-readable format

7.2 Correction and Deletion

You may:

• Update your account information through app settings
• Delete individual recipes or collections
• Delete your account. Your personal data and content are then anonymised and deleted as described in section 6.1, and you can cancel within the first 30 days by signing in

7.3 Opt-Out Rights

• Push Notifications: Disable through your device settings
• Account Deletion: Request via app settings or by contacting us

7.4 Exercising Your Rights

To exercise any of these rights, contact us at info@moor-service.ch. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data is encrypted using TLS/SSL protocols
• Encryption at Rest: Stored data is encrypted using AES-256 encryption
• Access Controls: Strictly limited access on a need-to-know basis
• Infrastructure: Hosted on dedicated servers in Switzerland with Cloudflare protection
• Incident Response: Procedures for detecting and responding to data breaches in compliance with applicable notification requirements

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Moor Service is based in Switzerland. Your recipe content may be transferred to and processed outside Switzerland when using AI-powered features (via OpenAI and OpenRouter), as these providers operate globally.

We ensure appropriate safeguards for international data transfers through:

• Switzerland's adequacy status under EU data protection law
• Standard contractual clauses (SCCs) approved by the European Commission where required
• Data processing agreements with all third-party providers
• Minimizing the data transferred to only what is necessary for processing (no personal identifiers are sent to AI providers)

We comply with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR) for all data transfers.

10. Children's Privacy

SnapSavor is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will promptly delete the data.

11. Cookies and Tracking Technologies

Our website (snapsavor.app) uses only essential cookies required for basic site functionality, such as language preferences. We do not use third-party tracking cookies, analytics cookies, or advertising cookies.

The mobile application does not use cookies. Device language settings stored locally on your device are used to provide content in your preferred language.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used
• Right to know whether personal information is sold or disclosed (we do not sell data)
• Right to delete personal information
• Right to non-discrimination for exercising privacy rights

13. GDPR and Swiss Data Protection Rights

If you are located in the European Economic Area or Switzerland, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

The right to erasure is subject to statutory retention duties, for example for subscription and billing records. See sections 6.2 and 6.4.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Displaying an in-app notice for material changes

Your continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• EU/EEA: Your national data protection authority