Privacy Notice

PrepFlow ("PrepFlow", "we", "us") provides the PrepFlow meal-planning service. PrepFlow is the data controller for personal information collected through the Service, other than payment information collected by our reseller Paddle (see section 5).

• Account data: name, email address, hashed password (or the identifier from your Google account if you sign in with Google).
• Profile & preferences: display name, household size, prep day, weekly budget, dietary preferences, dislikes, allergies, cooking style, and health-oriented goals you choose to share.
• Service data: the meal plans, grocery lists, favourites, and prep sessions you create or interact with.
• Support messages: information you send us when you contact support.
• Technical data: device and browser type, IP address, log data, and basic usage/telemetry needed to run the Service securely.

We do not receive full payment card details — those go directly to Paddle.

• To create and manage your account and provide the Service (contract).
• To generate personalised meal plans, grocery lists, and recipe recommendations (contract).
• To provide customer support (contract, legitimate interests).
• To secure the Service, prevent fraud and abuse, and maintain reliability (legitimate interests, legal obligation).
• To improve PrepFlow, understand how the product is used, and diagnose issues (legitimate interests).
• To send transactional messages (e.g. account, security, billing). Marketing emails only where you have opted in and you can withdraw consent at any time.
• To comply with legal obligations, including tax and accounting records (legal obligation).

We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects.

You may choose to share dietary preferences, allergies, or health-oriented goals to personalise your plans. This information is used solely to power the Service and is stored under the same protections as your other account data. PrepFlow does not provide medical or nutritional advice.

• Paddle.com, our reseller and Merchant of Record, for checkout, subscription management, payments, tax compliance, invoicing, and refund handling. Paddle collects your payment information directly. See Paddle's Privacy Notice.
• Infrastructure and service providers that host the Service, run our database, deliver email, and provide error/usage telemetry, under written data-processing terms.
• Google if you sign in with Google, limited to the profile information you authorise.
• Professional advisers (legal, accounting) when needed.
• Authorities where required by law, valid legal process, or to protect rights and safety.

Our infrastructure providers may process personal information outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

We retain account and profile data for as long as your account is active. When you close your account or request deletion, we delete or anonymise your personal information within a reasonable window, subject to limited retention required by law (for example, tax and payment records held by Paddle).

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to receive a copy of it in a portable format, and to withdraw consent. You may also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact privacy@prepflow.app. We respond within one month.

We apply appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, and row-level authorization on our database. No system is perfectly secure — please use a strong, unique password and keep your credentials safe.

We use a small number of cookies and similar technologies that are strictly necessary to run the Service (for example, to keep you signed in) and, where used, basic analytics to understand aggregate usage. We do not run advertising cookies. You can control cookies in your browser settings.

We may update this Notice from time to time. Material changes will be communicated in-app or by email.

Questions or requests about your privacy: privacy@prepflow.app.