Last updated: October 2026
This is a translation for your convenience. The German version is legally binding.
1. Who is responsible
Paul Jonathan Hajek
Barerstraße 45
80799 München
Germany
Email: kontakt@silverstone-consulting.com
2. The short version
- Munich Prices needs no account and no email address. You can choose a display name if you like.
- The app uses no tracking, no ads and no analytics tools. On the website we only count visits, without cookies (see 3.10).
- Text recognition for menus runs only on your device.
- Your location is used only on your device. All we store is how far you were from the place, never your exact location. The one exception is searching for places via Apple Maps (see 3.7).
- Your contributions (prices, confirmations, ratings, reports, menu photos) are linked to an anonymous ID and you can delete them at any time.
3. What data is processed
3.1 Location
If you allow it, the app uses your location to show places near you and to check whether you are actually there when you add or rate a price. Your location itself is never sent to us or stored. When you search for a place or add a new one, the app asks Apple Maps for places nearby (see 3.7). The only thing we store is how far you were from the place when you added the price (rounded to metres). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your iPhone settings.
3.2 Display name (optional)
You can set a display name in your profile (for example “Markus B.”). Everyone can see it next to your contributions. You don’t need to use your real name. You can change it whenever you like, and “Delete all my contributions” deletes it too. Unsuitable names can be reported and removed by us. Legal basis: your consent (Art. 6(1)(a) GDPR).
3.3 Contributions
When you add, confirm or rate a price, add a place or report something, we store the content of your contribution, the time, the distance to the place and an anonymous user ID. Legal basis: performance of the terms of use (Art. 6(1)(b) GDPR) and our legitimate interest in a reliable price database free of abuse (Art. 6(1)(f) GDPR). Prices we have approved also appear on the website munichprices.de, including in summarised and downloadable price overviews. There they are shown without a display name and without a user ID.
3.4 Menu photos (optional)
You can take a photo of a menu or price board right in the app, or pick one from your photo library, and upload it. Before uploading, the app makes the photo smaller and removes all embedded metadata (for example where and when it was taken and on which device). We store the photo, the place it belongs to, the time and your anonymous user ID. At first only you can see the photo. Once we have checked it, everyone can see it on the place’s page. Please only photograph the menu and no people. We don’t approve photos showing recognisable people and we delete them. The app only accesses the photos you pick yourself, not your whole library. It only uses the camera when you tap “Take photo” and have allowed access. A photo you take in the app is not saved to your library and is only uploaded if you send it yourself.
If you let the app read the prices from the photo, this text recognition runs entirely on your iPhone using Apple’s Vision framework. The photo is not sent anywhere for this, and prices that were read are only saved once you accept them yourself. Legal basis: performance of the terms of use (Art. 6(1)(b) GDPR) and our legitimate interest in prices that can be checked (Art. 6(1)(f) GDPR).
3.5 Storage with Apple iCloud (CloudKit)
Contributions are stored in Apple’s public CloudKit database. For this the app uses your iCloud account, but Apple only gives us an anonymous identifier, so no name, no email and no Apple ID. Provider: Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. Apple may also process data on servers in the USA. Apple Inc. is certified under the EU-US Data Privacy Framework, so transfers are covered by the European Commission’s adequacy decision (Art. 45 GDPR), and Apple additionally uses standard contractual clauses (Art. 46 GDPR). More information: https://www.apple.com/legal/privacy/
3.6 Stored only on your device
Favourites, settings (for example light or dark mode), people you have hidden, a cache of the most recently loaded prices and the price list for the Home Screen widget stay on your device only. Like the app, the widget uses your location only on the device to show places nearby.
3.7 Maps
The map comes from Apple Maps (MapKit). When it is shown, map tiles are loaded from Apple. Apple processes technically necessary data such as your IP address for this, including in the USA (see 3.5). Place data comes from OpenStreetMap and is built into the app. Nothing is sent to OpenStreetMap when it is shown. When you search for a place or add a new one, the app suggests matching places from Apple Maps. For this, your search term and the map area being searched (around your location or the centre of the map) are sent to Apple. Apple also works out the address of a new place from the point you set on the map. The legal basis is our legitimate interest in suggesting the right places and avoiding duplicate entries (Art. 6(1)(f) GDPR).
3.8 Other apps
If you open directions (Apple Maps, Google Maps, Citymapper), you switch to that app, and its own privacy policy applies there.
3.9 Contact by email
If you write to us, we only use your message and email address to reply. Our mailbox is hosted by Google (Google Workspace), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete messages once the matter is dealt with and there is no obligation to keep them. More information: https://policies.google.com/privacy
3.10 Website
The app’s website (munichprices.de) is hosted by Vercel, provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit it, Vercel processes technically necessary data such as your IP address, date and time, the page you open and browser details to deliver the site and protect it from attacks, including in the USA. Vercel Inc. is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Vercel under Art. 28 GDPR (Vercel Data Processing Addendum). The request logs we can see in our Vercel account are deleted automatically by Vercel after one hour to one day, depending on the plan. Legal basis: our legitimate interest in a secure website that is available (Art. 6(1)(f) GDPR). More information: https://vercel.com/legal/privacy-policy
To see how many people visit the website and which pages they open, we use Vercel Web Analytics. It sets no cookies and stores nothing on your device. It counts page views together with the page, the referring page, country, browser, operating system and device type. So that a visit is not counted twice, Vercel derives a hash from your request that is discarded after 24 hours at the latest. Nobody can recognise you across several days or other websites, and we only ever see totals. Legal basis: our legitimate interest in improving the website (Art. 6(1)(f) GDPR). More information: https://vercel.com/docs/analytics/privacy-policy
Whether you prefer the website in blue or red is remembered locally by your browser (localStorage), so the colour stays the same on your next visit. This setting never leaves your device and you can delete it at any time in your browser settings. Apart from that we use no cookies, no tracking and no advertising on the website.
4. How long data is kept and how to delete it
Contributions and photos stay stored until you delete them (single photos right on the photo, everything via “Profile → Delete all my contributions”) or until they are removed because they break the rules. Data on your device disappears when you delete the app.
5. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15 to 21 GDPR), and you can withdraw your consent at any time. Just write to us at kontakt@silverstone-consulting.com. You can also complain to a supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
6. Children
The app is not meant for children under 16.
7. Changes
We update this policy when the app or the law changes. The current version in the app and at munichprices.de/en/privacy always applies.