Privacy Policy
This Privacy Policy describes how PrepPilot ("we", "our", "us") collects, uses, and protects your information when you use the PrepPilot mobile application (the "App"). By using the App you agree to the practices described here.
1. Information we collect
1.1 Account data
When you create an account we collect your email address and a hashed password. These are stored by our authentication provider Supabase.
1.2 Body and fitness data
To generate meal plans tailored to your goal, we collect:
- Gender
- Weight (kg or lbs)
- Height (cm or ft/in)
- Age
- Activity level
- Fitness goal (Bulk, Cut, Maintain)
- Dietary preferences (e.g. vegetarian, halal)
- Selected protein sources
This data is stored in your private profile on Supabase and is used only to calculate your calorie/macro targets and generate plans.
1.3 Plan and usage data
We store the meal plans you generate, your shopping-list state, and your cook-mode progress so the App works across sessions and devices.
1.4 Anonymous analytics
We use PostHog to collect anonymous usage statistics (which screens you visit, taps on buttons, crashes). This data is not linked to your email or body data and is used to improve the App.
1.5 Purchase data
If you subscribe, Apple's StoreKit handles the transaction. We only receive a confirmation that you have an active subscription โ we never see your payment details. Subscription state is verified via RevenueCat.
2. How we use your information
- Calculate personal calorie and macronutrient targets
- Generate and store meal plans, grocery lists, and progress logs
- Sync your data across your devices when you sign in
- Operate the subscription and free-trial mechanism
- Improve the App via anonymous analytics
- Respond to your support requests
We never sell your data, share it with advertisers, or use it for purposes other than running the App.
3. Subprocessors
We rely on these services to operate the App. Each provides protections equivalent to those described in this policy:
- Supabase (authentication & database) โ Privacy
- PostHog (anonymous analytics) โ Privacy
- Apple StoreKit (in-app purchases) โ Privacy
- RevenueCat (subscription verification) โ Privacy
4. Data retention
We retain your account and plan data as long as your account exists. If you delete your account, all personal data is permanently removed from our database within 30 days. Anonymous analytics may be retained for up to 24 months.
5. Your rights
You may at any time:
- Access the data we hold about you
- Correct inaccurate data via the App's profile settings
- Delete your account and all associated data via Settings โ Delete Account
- Export your data by contacting us
- Withdraw consent for analytics by deleting your account
To exercise any right, email us at prep.pilot@outlook.com. We respond within 30 days.
6. GDPR (EU users)
If you are in the European Economic Area, the United Kingdom, or Switzerland:
- Our legal basis for processing your account, body, and plan data is the performance of a contract (Art. 6(1)(b) GDPR) โ without this data the App cannot generate plans.
- Our legal basis for anonymous analytics is our legitimate interest in improving the App (Art. 6(1)(f) GDPR).
- You have the right to lodge a complaint with your local data-protection authority.
- The data controller is the developer of PrepPilot. Contact: prep.pilot@outlook.com.
7. Children
PrepPilot is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
8. Security
All data is transmitted over TLS and stored encrypted at rest. Passwords are hashed by Supabase. We restrict access to production data to authorized personnel only.
9. International transfers
Our subprocessors may process data in the United States. They participate in the EU-US Data Privacy Framework or equivalent safeguards.
10. Changes to this policy
If we change this policy materially, we will notify you in the App. Continued use after such notice constitutes acceptance.
11. Contact
Questions or requests: prep.pilot@outlook.com