Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Account Information: Email address and display name when you register.
• Profile & Preferences: Daily nutrition goals, unit preferences, theme, shopping schedule, and notification settings.
• Content You Create: Recipes, meal plans, calendar events, and pantry items you add to the App.
• Photos & Camera: Images you choose to attach to recipes. We access your camera or photo library only when you explicitly initiate an upload. Images are stored in our secure cloud storage.
• Usage Data: App interactions, feature usage, and diagnostic information to improve performance.
• Device Information: Device type, operating system version, and anonymous device identifiers.
• Analytics & Crash Data: Crash logs and error reports, device type, operating system version, app version, IP address, in-app usage and interaction events, and a pseudonymous (randomly generated) user identifier. This data is collected through our sub-processors described in Section 4.

2. How We Use Your Information

• Provide, maintain, and improve the App's features and functionality.
• Personalize your meal planning experience and AI-generated recommendations.
• Send transactional messages (e.g., password reset, account notifications).
• Monitor and analyze usage patterns to improve performance and reliability.
• Comply with legal obligations and enforce our Terms of Use.

3. AI Features

The App uses OpenAIto power its AI assistant, recipe generation, pantry and receipt photo scanning, and nutrition estimates (including “Generate Macros” and “Generate Meal Info”). When you use one of these features, OpenAI processes the text and photos you send, along with your pantry items, saved recipe titles, planned meals, shopping list, display name, and food preferences, so it can generate a response. We do not use this data to train OpenAI's or any other third party's AI models. OpenAI is contractually required to protect your data under the same confidentiality and data-protection obligations as the other sub-processors described in Section 5.

4. Analytics & Crash Monitoring

We use the following third-party sub-processors to keep the App stable and to understand how it is used. Each processes data on our behalf under contractual confidentiality and data-protection obligations:

• Sentry (crash & error monitoring): Collects crash logs, error reports and stack traces, device type, operating system version, app version, IP address, and a pseudonymous user identifier. We use this data for app stability and diagnostics: detecting, diagnosing, and fixing crashes and errors. See the Sentry Privacy Policy.
• PostHog (product analytics): Collects in-app usage and interaction events, device type, operating system version, app version, IP address, and a pseudonymous user identifier. We use this data for product improvement: understanding feature usage and how the App performs. See the PostHog Privacy Policy.

This data is tied to a pseudonymous identifier rather than your name. We do not use it to build advertising profiles, and we do not sell it for money.

5. Sharing of Information

We do not sell your personal information for money. We may share information with the following service providers and sub-processors, each of which processes data on our behalf under contractual confidentiality and data-protection obligations:

• Supabase (cloud hosting, authentication & storage): Stores your account, the content you create, and uploaded images, and handles sign-in.
• Superwall (subscription management): We share your subscription status and a user identifier with Superwall to manage and display subscription offers and entitlements.
• PostHog (product analytics) and Sentry (crash & error monitoring): See Section 4 for the data collected, purposes, and links to their policies.
• AI processing (OpenAI): As described in Section 3, we share the text and photos you submit to AI-powered features, along with pantry, recipe, calendar, and shopping-list context, your display name, and your preferences, with OpenAI so it can generate a response. OpenAI does not use this data to train its models and is held to the same confidentiality and data-protection obligations as our other sub-processors.
• In-App Purchases: Apple processes all subscription payments. We receive limited transaction metadata (e.g., subscription status) but never your full payment details.
• Legal Requirements: Where required by law or to protect the rights and safety of our users.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the App. You may delete your account at any time from Profile & Settings → Account → Delete Account. Upon deletion, we permanently remove your account and all associated data within 30 days.

Crash and error logs collected by Sentry are retained for up to 90 days. Product-analytics events collected by PostHog are retained for up to 12 months. Aggregated or de-identified data that can no longer be linked to you may be retained for longer to help us understand long-term trends.

7. Security

We use industry-standard security measures including encrypted data transmission (TLS) and secure cloud storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

We are based in the United States, and our service providers — including PostHog and Sentry — process and store data on servers located in the United States. If you access the App from the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal information will be transferred to and processed in the United States, which may not offer the same level of data protection as your home country. Because PostHog processes analytics data on US-based cloud infrastructure, EU/EEA user data leaves the EEA. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. You may request a copy of the safeguards we use by contacting us at the address in Section 14.

9. Your Privacy Rights (EEA, UK & Switzerland)

If you are located in the EEA, the UK, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you certain rights over your personal data.

Legal bases for processing. We rely on the following legal bases:

• Performance of a contract — to provide the App's core features, such as your account, meal planning, and the content you create.
• Legitimate interests — to keep the App stable and secure and to improve our product (for example, crash monitoring and product analytics), balanced against your rights and freedoms.
• Consent — where required by law for optional product analytics and crash reporting; you may withdraw your consent at any time in the App via Settings → Preferences → Privacy → “Share Usage & Diagnostics.”
• Legal obligation — to comply with applicable law.

Your rights. Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection supervisory authority.

To withdraw consent for analytics and crash reporting, turn off Settings → Preferences → Privacy → “Share Usage & Diagnostics” in the App. To exercise your other rights, contact us at support@prepwise-app.com. You can also delete your account and all associated data at any time from Profile & Settings → Account → Delete Account.

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect, to access and delete it, to correct inaccurate information, and to opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information for money.

However, our use of third-party product analytics (such as PostHog) may be considered “sharing” of personal information under California law. You have the right to opt out.

Do Not Sell or Share My Personal Information. You can opt out at any time through any of the following:

• In the App (recommended): go to Settings → Preferences → Privacy and turn off “Share Usage & Diagnostics.” This single toggle immediately stops both product analytics (PostHog) and crash/diagnostics reporting (Sentry).
• By email: contact us at support@prepwise-app.com with the subject line “Do Not Sell or Share.”
• Global Privacy Control (GPC): on our website, we honor GPC browser signals where technically feasible. GPC is a browser-based signal and does not apply within the native App; please use the in-app toggle above to opt out inside the App.

We will not discriminate against you for exercising any of these rights.

11. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@prepwise-app.com and we will delete it promptly.

12. Third-Party Links & Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date above. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: support@prepwise-app.com