Who is responsible?
Roel Bos operates Morningprints as a private individual on a home server and determines how the service processes personal data. Use the contact form for privacy questions and requests. Contact
What data?
We store username, email and verification status, language, time zone, a password hash where applicable, sessions and your routines, tasks, calendar and print settings. Google supplies a unique ID and verified email, never your Google password. Medication and notes may contain sensitive health information; entering it is optional. Article images are resized and stored without original camera or location metadata.
Why process data?
Account and planning data deliver the service you request. Security, abuse prevention and technical continuity serve legitimate interests with data minimisation. We handle contact/privacy requests and legal obligations where applicable. You may withdraw separately requested consent. We do not make automated decisions with legal effects.
Sharing and external services
Google processes sign-in if selected. Calendar providers receive requests needed for configured connections. Email uses the configured mail service; Epson cloud printing also sends your PDF through Epson. Providers may process outside the EEA depending on their services and settings, under their own terms. The app has no advertising or analytics scripts and does not sell your data.
Retention
Account and planning data remain as needed for your account and service or until an applicable deletion request is completed. Contact messages remain as needed to handle the enquiry. Sessions last at most seven days with an idle limit. Reset tokens last 30 minutes, email verification links 24 hours. Print PDFs are cleared after submission or expiry; terminal queue metadata is removed during cleanup after seven days. The intended server log and backup retention is 30 days. Automatic backup management is not yet configured; this does not claim daily backups already exist.
Security and cookies
The app uses password hashing, session and CSRF controls, restricted administration and encrypted storage for printer addresses, calendar data and temporary mail/print content. This is not full encryption against the server operator. Essential cookies support login and language; the theme preference uses local browser storage. Printed pages can be read by anyone who can access them. Absolute security cannot be guaranteed.
Your rights
Use the contact form to request access, correction, deletion, portability, restriction or objection where applicable. We may verify identity and apply legal exceptions. Separately granted consent can be withdrawn. You can complain to the Dutch Autoriteit Persoonsgegevens or your competent authority. This notice may change with the service.