Your kitchen. Your choices.
Data information updated 8 October 2026. Morsilo is provided under the Sancire Labs brand. For privacy questions or requests, contact support@morsilo.com.
You can browse recipes and use the cooking tools without a community account. Your home address is not needed. A nickname is enough for your public profile.
What stays on this device
Plans, favourites, cooking progress, notes, preferences, pantry items, estimates and learning progress are saved in your browser. An optional offline copy stores app files and selected narration. Shared-device users may be able to read this information. Clearing browser storage can remove it.
Use “Your data” in the app footer to download a backup, import one or delete local data. Account backup is optional and uploads the kitchen data you choose to save. Downloaded files remain wherever you put them.
Accounts and sharing
Community accounts store a username, a salted password hash and sign-in sessions. We do not need your real name or email to create an account. Your username, display name, bio, profile photo and published posts are public. Other people can copy public information.
Saved posts, blocks, reports and account backups are kept by the service. Shared shopping lists are visible to the household you join. An event’s private meeting details are shown to its host and approved attendees. Moderators can review reported content.
Uploaded photos are resized and converted to JPEG, removing embedded metadata. This does not hide addresses, faces or other personal information visible in the picture.
Location, prices and voice
- Price lookup uses your chosen country and city, or the first part of a UK postcode. A postcode entered in the lookup form reaches Morsilo’s service; only its outward area, such as SW1A, is sent to postcodes.io. Town searches use the bundled place directory.
- Regional price requests use Open Prices data. Estimates and the approximate area are saved with your local kitchen and included if you choose an account backup. Do not enter a street address.
- Voice commands start only when you choose Listen and allow the microphone. Your browser may send audio to its speech provider. Morsilo does not store recordings of you or transcripts. Use the on-screen controls if you prefer.
- Recipe photos, linked videos and external resources may contact their host when loaded or opened. Those providers have their own privacy information.
Hosting and operational information
Cloudflare serves the website and Render hosts the community service. These providers process network information such as IP addresses to deliver and protect the service. Provider processing can involve countries outside the UK. Public price providers process the lookup requests described above.
The app uses a necessary sign-in cookie that expires after seven days. Local storage remembers your kitchen; it is not advertising tracking. No advertising or customer analytics integration is currently configured in the app.
Community rate limits use a hash of the visitor address or an account identifier. Expired rate records are eligible for removal after one day. Diagnostic events added to this version contain a random request reference, request method, status and duration, without request bodies, passwords or account names. Hosting providers may keep separate access logs.
Keeping, exporting and deleting data
Local information remains until you delete it or the browser clears it. Account content and backups remain while needed for your account, unless you remove them. The service retains up to four versions of your account backup. Expired sessions and unattached uploads are cleaned by service maintenance; unused uploads become eligible after one day.
In Community → My profile → Account settings, you can export your account, change your password or delete your account. Deletion removes its active-service records and photos, and comments on your posts. If you own a household, ownership passes to the earliest remaining member. Local data and copies others downloaded are separate.
Service backups may temporarily retain deleted records. Backup retention, provider logs and international transfer arrangements must be confirmed by the operator before this notice is used for a wider launch. Contact support for the current operational details.
Your choices and rights
You can ask for access, correction, deletion or a portable copy of your information, and ask about restricting or objecting to its use. We may need to verify account ownership. Never send your password or recovery code by email. You can also raise a concern with the UK Information Commissioner’s Office.