โ† Back

Privacy Policy

Effective date: 17 May 2026

This Privacy Policy describes how PrepPilot ("we", "our", "us") collects, uses, and protects your information when you use the PrepPilot mobile application (the "App"). By using the App you agree to the practices described here.

1. Information we collect

1.1 Account data

When you create an account we collect your email address and a hashed password. These are stored by our authentication provider Supabase.

1.2 Body and fitness data

To generate meal plans tailored to your goal, we collect:

This data is stored in your private profile on Supabase and is used only to calculate your calorie/macro targets and generate plans.

1.3 Plan and usage data

We store the meal plans you generate, your shopping-list state, and your cook-mode progress so the App works across sessions and devices.

1.4 Anonymous analytics

We use PostHog to collect anonymous usage statistics (which screens you visit, taps on buttons, crashes). This data is not linked to your email or body data and is used to improve the App.

1.5 Purchase data

If you subscribe, Apple's StoreKit handles the transaction. We only receive a confirmation that you have an active subscription โ€” we never see your payment details. Subscription state is verified via RevenueCat.

2. How we use your information

We never sell your data, share it with advertisers, or use it for purposes other than running the App.

3. Subprocessors

We rely on these services to operate the App. Each provides protections equivalent to those described in this policy:

4. Data retention

We retain your account and plan data as long as your account exists. If you delete your account, all personal data is permanently removed from our database within 30 days. Anonymous analytics may be retained for up to 24 months.

5. Your rights

You may at any time:

To exercise any right, email us at prep.pilot@outlook.com. We respond within 30 days.

6. GDPR (EU users)

If you are in the European Economic Area, the United Kingdom, or Switzerland:

7. Children

PrepPilot is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

8. Security

All data is transmitted over TLS and stored encrypted at rest. Passwords are hashed by Supabase. We restrict access to production data to authorized personnel only.

9. International transfers

Our subprocessors may process data in the United States. They participate in the EU-US Data Privacy Framework or equivalent safeguards.

10. Changes to this policy

If we change this policy materially, we will notify you in the App. Continued use after such notice constitutes acceptance.

11. Contact

Questions or requests: prep.pilot@outlook.com