Privacy
Your data stays yours.
Effective November 1, 2026
Data controller and contact
The legal seller and operator of Morsel is Zachary Barrette. Zachary Barrette is the data controller responsible for the personal information described in this Privacy Notice. Contact barrettezach@gmail.com for privacy questions, rights requests or complaints. Where applicable, you may also complain to your local data-protection authority.
What we collect
Your account email and display name, authentication information managed by our sign-in provider, onboarding answers such as height, weight, age and goals, food, water and weigh-in records, saved meals and meal photos. Service providers may process IP addresses, device/browser information and error diagnostics to operate and protect the service. Support messages are processed to respond to your requests. Card numbers and security codes are entered only in our payment provider's checkout, not collected or stored by Morsel.
How we use it
To calculate your targets, show your progress, and analyse meal photos or descriptions with AI when you ask us to. OpenAI receives the submitted meal description, meal category and optional meal photo through our hosted AI service only when you agree and request analysis. Your account email and full log are not included in the meal-analysis request. AI estimates may be inaccurate and are not medical advice; manual logging is available without AI.
Who can see it
Your log, weights and photos are private to your account and protected by per-user access rules. Our hosting and authentication providers process account and logged data to operate Morsel. Google processes information when you choose Google sign-in. OpenAI processes submitted meal descriptions and photos for requested AI analysis. Open Food Facts receives a product barcode through a server-side lookup; we do not include your account identity or food history in that request. Paddle processes sales, subscription management, payments, invoicing and tax compliance. Resend is connected for planned optional recap emails, but scheduled recap delivery is not currently enabled. Information may also be disclosed to advisers or authorities where legally required. We do not intentionally load advertising pixels or session-replay tools in Morsel.
Your choices
You can edit or delete entries, export your logged personal records, change account details and delete your account in Settings. Account deletion removes your active personal records and private photos and stops paid renewals; the payment provider may retain legally required payment records. You may have rights to access, correction, erasure, restriction, portability, objection or consent withdrawal under applicable law.
Purpose and legal basis
Account and logged data are processed to perform the service you request. Security processing supports legitimate interests in preventing fraud and protecting accounts. Optional recap emails rely on your opt-in consent, which you can withdraw. Legally required records are retained to meet legal obligations.
Retention and security
Active account records are retained while your account is in use and removed through account deletion when no longer needed, subject to required legal retention and backup retention by service providers. We use encrypted connections, private photo storage and owner-scoped access controls. No service can guarantee absolute security.
Essential browser storage
Morsel uses essential browser storage for sign-in, onboarding drafts and account preferences. Clearing browser storage signs you out and may remove unsaved onboarding answers. No marketing or advertising cookies are intentionally used by Morsel.
Do Not Track and third-party tracking
Morsel does not change its behavior in response to browser Do Not Track signals. We do not intentionally use cross-site advertising trackers or session recording. Authentication and checkout providers may use their own necessary storage and receive connection metadata when you use their services. Their privacy notices govern their independent processing.
International processing
Our service providers may process information outside your country. Applicable transfer safeguards, provider retention periods and local legal requirements depend on the provider and your location. Contact barrettezach@gmail.com for information or a privacy request; we do not promise that all information stays in your country.
Policy changes
We update this page and its effective date when our data practices change. Material changes will be communicated through the service or account email where appropriate. You can contact barrettezach@gmail.com to ask about changes.