Privacy Policy
Last updated: 11 November 2026
- We keep what you put into Prepper (recipes, meal plans, shopping lists, reminders) so the app can work, plus your username, email and a scrambled form of your password.
- No ads, no tracking, no analytics, and we never sell your data.
- You can delete your account and everything in it at any time in Settings → Account.
- Questions or requests: [email protected].
Who we are
Prepper (chefprepper.app and the app at app.chefprepper.app) is run by Oisín Farrell, an individual based in Ireland. Oisín is the "data controller" for your personal data, meaning the person responsible for it under the EU General Data Protection Regulation (GDPR).
Contact: [email protected]
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Account details: username, email address, your password (stored only as a one-way hash, never in readable form), whether your email is verified, and when you signed up and last signed in. | To create your account, sign you in, verify your email and let you reset your password. | Contract: we need it to provide the service you signed up for. |
| What you put into the app: recipes, ingredients, units and tags; meal plans; shopping lists; reminders; settings such as household size and the day your week starts. | That's the app. | Contract. |
| Your plan and AI usage: your plan (trial, free or Pro), when a trial ends, and a record of each AI action you use (which feature, when, and how much processing it took). | To apply your plan's limits and keep AI costs under control. | Contract, and our legitimate interest in preventing abuse. |
| Text you send to AI features: for example a recipe you paste, a description of what you'd like to eat, what's in your fridge, or a recipe link (we fetch that page and send its text). | To generate the result you asked for. We don't store this text ourselves; only what you choose to save (for example a recipe) is kept. | Contract. |
| Security and technical data: sign-in sessions, one-time links for email verification and password resets (stored only as hashes where possible), your IP address while a request is being handled, and server logs. | To keep you signed in, protect accounts (for example limiting repeated failed sign-ins), stop abuse and fix problems. | Legitimate interests: keeping the service secure and working. |
| Waitlist: if you leave your email on chefprepper.app. | To tell you when Prepper opens and about new features. | Consent. You can withdraw it at any time by emailing us. |
| Emails you send us, for example to [email protected]. | To answer you. | Legitimate interests. |
We don't use your data for advertising, we don't build profiles of you, we don't make automated decisions with legal or similarly significant effects, and we don't sell or rent your data to anyone.
Cookies and local storage
The app uses one cookie, which keeps you signed in. It's strictly necessary, so the law doesn't require us to ask for consent first. The app also keeps a small amount of information in your browser's local storage (for example the email address you're verifying) to make sign-up work. There are no analytics, advertising or tracking cookies, on the app or on chefprepper.app.
Who helps us run Prepper
We use a few service providers ("processors") who handle data only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Fly.io | Runs the Prepper server (API) | London, UK |
| Neon | Hosts the database, including backups | London, UK (AWS eu-west-2) |
| Cloudflare | Hosts the website and app, manages the domain, and forwards emails sent to @chefprepper.app | Global network |
| Mailgun (Sinch) | Sends account emails (verification, password reset, account deleted) | United States |
| Anthropic | Provides the AI model behind the AI features (receives the text you send to them) | United States |
| EmailJS | Delivers waitlist sign-ups from chefprepper.app to us | See EmailJS's privacy policy |
| Google (Gmail) | Our inbox, where forwarded emails and waitlist sign-ups arrive | See Google's privacy policy |
| jsDelivr | Delivers some standard code libraries to your browser; like any website, it sees your IP address when it does | Global network |
The UK has an EU "adequacy decision", so data held there is protected to an equivalent standard. Where a provider handles data outside the EU or UK (for example in the United States), the transfer relies on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission's Standard Contractual Clauses.
We may also disclose data if the law requires it.
How long we keep it
- Your account and everything in it: until you delete your account. Deleting it removes your data from our database immediately.
- Backups: deleted data can remain in our database provider's backups for a limited period, currently up to 7 days, after which it's gone.
- Server logs: kept for a short period by our hosting provider, then deleted. Logs mostly identify you by account number. A username, IP address or partly masked email address can appear when a security limit is hit (for example too many failed sign-ins). Passwords and one-time links are never logged.
- One-time links: password reset links expire after 30 minutes, and email verification links after 24 hours.
- Accounts whose email was never verified are kept, so you can verify later, until you delete them or ask us to.
- Emails we've sent you stay in Mailgun's logs for its retention period.
- Waitlist: until you ask to be removed, or until we stop sending launch updates.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and get a copy.
- Correct anything that's wrong.
- Delete your data. You can do this yourself in Settings → Account → Delete account, or ask us.
- Take your data with you (data portability). Until there's a download button in the app, email us and we'll send you a copy.
- Object to processing based on legitimate interests, and restrict processing in some circumstances.
- Withdraw consent at any time where we rely on it (the waitlist).
Email [email protected] to use any of these. We'll reply within one month and may need to confirm it's really you first.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie) or to the data protection authority where you live.
Security
Passwords are stored only as salted hashes. All connections use HTTPS. One-time links are single-use and short-lived, and repeated failed sign-ins are limited. Resetting your password signs you out on every device. No system is perfectly secure; if a breach affected your data, we would tell you and the regulator as the law requires.
Children
Prepper isn't intended for anyone under 16, and we don't knowingly collect data from children under 16. If you think a child has signed up, contact us and we'll delete the account.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you by email or in the app before it takes effect.