Privacy notice

Who handles your data?

The data controller of the morzsi app is Prelec Máté e.v. (registered office: 8800 Nagykanizsa, Dózsa György utca 115/b, Hungary). Contact: prelimate001@gmail.com.

One of our data processors is Supabase, which stores accounts and synced plans on servers inside the European Union.

The other is Google (Gemini), which produces the answers of the leftovers feature. It receives only what the answer needs: what you type into the leftovers feature, the earlier lines of the conversation, the recognised ingredients, the names and ingredients of our matching recipes, the number of servings and your lifestyle diet (vegetarian, for example). We do not send it your name or your email address. Your allergies and a diet you follow for health reasons (gluten-free, dairy-free) go to it only if you expressly said yes when the leftovers feature asked. Google may process the data outside the European Union, in the United States as well; the basis for that is the EU–US Data Privacy Framework.

The third is RevenueCat (RevenueCat, Inc., United States), which verifies the subscriptions bought in the App Store and on Google Play, and keeps track of whether your subscription is live. For that it receives your account identifier (a random identifier — not your name and not your email address), the details of your purchases — which plan, when, at what price and in what currency, valid until when, whether it is a trial —, and the basic details of your phone and of the app (model, system version, app version, country, IP address). Without this we could not tell whether you are entitled to access, and we could not restore your purchase on another phone; the legal basis is therefore the performance of a contract. RevenueCat processes the data outside the European Union, in the United States; the basis for that is the standard data protection clauses adopted by the European Commission.

Apart from them we hand your data to no one.

What data do we handle?

Everything you set in the app — the store, the cooking styles, your diet, your allergies, the number of servings, your cooking and shopping days, the ingredients you skip, your weekly budget, your pantry, your kitchen appliances — together with your weekly plan, your ticked-off shopping list, your saved recipes and your ratings, is always stored on your phone.

These settings and your weekly plan are uploaded to our server as well, tied to your account, so that you can reach them on another phone. We also hold your name and your email address. One thing is the exception: your allergies, and only if you said yes to that separately.

The state of your subscription — which plan, valid until when, whether you are in a trial — is kept by your phone, and RevenueCat keeps a record of it as well (see above). The payment is handled by the App Store or by Google Play: we do not receive, do not see and do not store card details.

When you ask for a new weekly plan, the old week — its days, its dishes, and what it cost at the time — stays on the "Your weeks" page in your profile, so that you can look back at it. It goes where the rest of your data goes: onto your phone and onto our server.

The app needs an account: your plan is tied to it, so it is not lost when you change phones, and you can carry on on another device. You can delete your account yourself from the app at any time.

Your allergies

This is health data, a special category of data under the law, so we treat it differently from the rest. We store it on your phone for the filtering — without them we could not keep out of your plan what you must not eat.

They are only uploaded to the server if you expressly said yes on the Profile → Manage account page. That is our legal basis: your consent, nothing else. Until you answer, we do not upload them.

We send your allergies and a diet you follow for health reasons to the artificial intelligence of the leftovers feature (Google, Gemini) only if you said yes to that separately. The leftovers feature asks before your first question; this consent is independent of whether we upload them to your account. With a yes, its own recipes follow them too. With a no, it only suggests recipes from our collection, and those are filtered on your phone by your allergies. You can withdraw it at any time with a switch on the Profile → Manage account page; the withdrawal applies to the future. Whatever you type into the leftovers feature yourself does reach it, though — so do not write health data there.

You can withdraw that consent in the same place, in one move — without a live subscription, through the "Account and data" link at the bottom of the paywall. When you do, we immediately overwrite the copy on the server with an empty one, while the list on your phone stays untouched: the filtering works exactly as before.

The withdrawal applies to the future: it does not make unlawful what we stored while your consent was in force.

About the account and the sync

The point of the account is that you do not lose your plans when you change phones or reinstall the app. Our legal basis is the performance of a contract: this is the service you asked for when you registered.

We never store and never see your password in readable form — the server keeps only an irreversible fingerprint of it. If you forget it, you can set a new one with a code sent by email.

The sync works so that the state on the device you used last is the one that counts. If you make changes on two phones, the version saved later is the one that stays.

You can permanently delete the account at any time on the Profile → Manage account page. Deleting it takes your name, your email address and the plans uploaded to the server with it.

What do we NOT use your data for?

There is no analytics in the app, no advertising or tracking code, and we do not build a profile of you. We do not sell and do not rent your data, and we do not use it for advertising.

The recipes and the prices arrive together with the app, built in — they need no internet. That is why the app works without a network; only the sync stops in that case.

Notifications

If you ask for reminders, the app asks permission to send notifications. These are local notifications: your phone schedules them and your phone sends them, based on your own settings. We use no push tokens, and no data goes to a server for a notification.

You can turn the reminders off at any time in the app's settings or in your phone's notification settings.

How long do we keep it?

For as long as you want. Your account and the data belonging to it stay with us as long as the account exists.

The "Start over" button in your profile deletes your settings and your plan from the phone, and "Delete account for good" takes everything from the server as well. Deletion is immediate and irreversible.

One thing expires by itself, and it does so in your favour: the "Your weeks" page in your profile. You can look back at a finished week for 12 months, after which it drops out without you asking — from your phone and from our server alike.

If you only delete the app, the data stored on the phone goes with it; your account stays until you delete it separately.

RevenueCat keeps the details of your purchases for as long as your account exists. If you would like those deleted too after deleting your account, write to us and we will see to it. The App Store and Google Play keep their own purchase records regardless.

Your rights over your data

You can ask for a copy of your data, for it to be corrected or deleted, you can object to it being handled, and you can ask for the handling to be restricted.

You do not have to wait for the copy from us: the Profile → "Export my data" button hands you everything we store about you straight away, in machine-readable JSON — both what is on the phone and what is on our server. Deletion is likewise something you can do yourself, on the Profile → Manage account page.

None of this needs a live subscription. If your subscription has expired or you never had one, the "Account and data" link at the bottom of the paywall takes you to the same place: export, account, deletion, subscription.

Write to prelimate001@gmail.com with any of these requests — we answer within 30 days.

If you feel that we handle your data unlawfully, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., naih.hu).

Children

morzsi was not made for children, and we deliberately collect no data from anyone under 16. As the app needs an account, no one under 16 should use it. If we learn that an account belongs to someone under 16, we delete the account and its data.

About the prices

The prices shown in the app are indicative, and they are not the official, same-day prices of the shops. If your chosen shop does not stock a product, we take its price from another shop of a similar price level — so the price of such an item does not refer to the shop you picked. We never show an estimated price as a real one.

The prices are our own estimate: we calculate them from the public average consumer prices of the Hungarian Central Statistical Office (KSH), converted to the pack sizes and the shops. Source: KSH, STADAT 1.2.1.8 (https://www.ksh.hu/stadat_files/ara/hu/ara0044.html), licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). The conversion is ours; KSH has not reviewed or endorsed it.

morzsi has no connection with the retail chains listed, and does not act on their behalf.

Diet and allergies

The diet and allergy filters help with the selection, but they do not replace medical or dietary advice. In case of a serious allergy, always check the packaging of the products.

Changes

If this notice changes, the updated text appears with a new version of the app and on this page, carrying the date shown at the top of the page.

Contact

Do you have a question about how we handle data? Write: prelimate001@gmail.com

The language of this document

This text was written in Hungarian, and the Hungarian version is the authoritative one. You can read it in the app by switching the language, and on the web at https://morzsi.app/adatvedelem. The English is a courtesy translation: if anything in it differs from the Hungarian, the Hungarian wording is the one that applies.