Privacy Policy

Last updated: February 07, 2026

This Privacy Policy explains how Prepful ("Prepful," "we," "us," "our") collects, uses, and shares information when you use our website and mobile app (collectively, the "Services").

If you have questions, contact privacy@prepfulapp.com.

Summary (key points)

• We collect your name and email (for your account). You may optionally provide dietary preferences and nutrition goals to personalize your experience.
• Recipes are community content. Recipes you create or import are shared with other users, without attribution to you.
• We use AI (via Groq) to generate personalized meal/recipe suggestions. Your inputs (including dietary preferences and free-text) are sent to Groq to produce the output.
• We do not sell your personal information and we do not use your data for targeted advertising.
• Account deletion is immediate. We delete your personal information and anonymize remaining operational records; community recipes remain as anonymized content.

1) Information we collect

A. Information you provide

Account information

• Name
• Email address
• Authentication information (e.g., social login tokens/identifiers; if you use email/password, credentials are handled by our authentication provider)

Optional profile information (for personalization)

• Dietary preferences (e.g., vegetarian, gluten-free, allergies)
• Nutrition goals (e.g., macro targets)

Content you create or submit

• Recipes you create or import (title, ingredients, instructions, notes, and similar fields)

Optional feedback

• Optional ratings (e.g., 1–3) and optional free-text feedback

B. Information collected automatically

We aim to minimize automatic collection.

Application / infrastructure logs (providers)

• Our hosting providers may collect IP address and request metadata in infrastructure logs as part of providing hosting, CDN, and security services. These logs are maintained under the providers' retention policies.

Basic diagnostics

• We may retain limited, non-identifying diagnostics (e.g., generic browser user-agent strings) for troubleshooting.

We do not collect advertising IDs (IDFA/GAID), device serial numbers, or precise geolocation.

2) How we use information

We use information to:

• Provide and operate the Services (account creation, authentication, core app features)
• Personalize meals/recipes based on your optional preferences and goals
• Enable recipe import and recipe discovery
• Improve reliability and security (debugging, abuse prevention)
• Communicate with you about service-related issues (e.g., security or support)

We do not use your information for targeted advertising.

3) AI-powered features

Prepful includes AI features such as "AI chef" or personalized meal planning.

A. Groq (AI inference)

When you use AI features, we send to Groq the information you provide that is necessary to generate your requested output, which may include:

• Your dietary preferences and nutrition goals (if provided)
• Recipe details you submit (e.g., ingredients and instructions)
• Any free-text you type into the AI chat / input fields

Groq returns AI-generated output (e.g., suggested meals, recipe text). We store the output as part of your app experience (e.g., generated recipes or meal plans) unless you delete it.

B. Replicate (image generation)

If you generate recipe images, we send to Replicate:

• An image-generation prompt derived from the recipe (e.g., title/description/instructions) and model configuration parameters

We do not send your account identifier to Replicate.

C. Apify (importing recipes from a link)

If you import a recipe from a supported social/blog link, we send to Apify:

• The URL you provided and scraping configuration (e.g., results limits)

We do not send your account identifier to Apify.

Important: Do not include sensitive or personal information in recipes or free-text fields that you would not want processed by AI providers or displayed as part of community content.

4) Social login (Google and Apple)

You may sign in using Google or Sign in with Apple. Depending on the provider and your settings, we receive:

• Your email address (or an Apple relay address if you use "Hide My Email")
• Your name (if provided by the provider)

We use this information only to create and manage your account.

5) Sharing of information

We share information only as needed to operate the Services, including with:

Infrastructure & hosting

• Cloudflare (web hosting/CDN/security for the website)
• Supabase (authentication, database, server functions, operational email)

Payments

• Stripe (payment processing, if/when paid features are offered)

AI and automation

• Groq (AI inference)
• Replicate (image generation)
• Apify (importing recipes from links)

We may also share information if required by law (e.g., legal process) or to protect the security of users and the Services.

We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising.

6) Cookies and tracking

We use only essential cookies and similar technologies needed for:

• Security and fraud prevention
• Basic site functionality

We do not use advertising cookies or third-party ad trackers.

7) Data retention and deletion

A. While your account is active

We retain your account information and content to provide the Services.

B. When you delete your account

When you delete your account (in-app or by contacting us), we:

• Immediately and permanently delete your account profile data (name, email, preferences/goals)
• Delete your private app data (e.g., meal plans, saved items)
• Delete free-text feedback you submitted

Community recipes you created/imported remain, but we remove attribution to you:

• We delete or set to NULL any direct identifier linking the recipe to your account.

Operational logs

• Application operational logs may retain entries for up to 90 days for security and maintenance.
• When an account is deleted, we immediately anonymize user identifiers in retained logs (e.g., replacing with a null UUID such as 00000000-0000-0000-0000-000000000000) so entries cannot be linked back to you.

Provider infrastructure logs

• Supabase and Cloudflare may retain infrastructure logs (which can include IP addresses) according to their retention policies. We do not control those retention periods.

8) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure.

9) International transfers

Our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards.

10) Children

Prepful is intended for users 13+. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact privacy@prepfulapp.com and we will take appropriate steps to delete it.

11) Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent where processing is based on consent.

How to exercise rights

• Use in-app settings (where available), or email privacy@prepfulapp.com.

Washington "My Health My Data" (consumer health data)

Dietary preferences and nutrition goals may be considered consumer health data under Washington law. You may have additional rights, including:

• Confirm whether we collect, share, or sell consumer health data
• Access or delete consumer health data
• Withdraw consent for collection/sharing beyond what is necessary to provide a requested product or service

You can exercise these rights by emailing privacy@prepfulapp.com or by deleting your account / removing your dietary information in-app.

12) Changes to this policy

We may update this policy from time to time. We will post the updated policy with a new "Last updated" date.

13) Contact

Email: privacy@prepfulapp.com

Mailing address (recommended to include before publishing):

• Prepful
• [MAILING ADDRESS / VIRTUAL MAILBOX — TBD]