Privacy Policy

Last updated: June 25, 2026

Prepwell ("we", "us") is a meal-prep planning app operated by Joshua Ribeiro in the United Kingdom. Joshua Ribeiro is the controller of the personal information described in this policy. This policy explains what information we process when you use Prepwell, why we process it, who receives it, how long we keep it, and the rights you have over it.

Information we collect

• Account information: your name, email address, profile image, account identifier, sign-in records, and authentication information managed through Clerk.
• Profile and planning information: the reasons you use Prepwell, date of birth, sex, height, weight, activity level, dietary requirements, nutrition targets, budget preferences, meal preferences, and preparation settings that you choose to provide.
• Content you create: recipes, ingredient suggestions, meal and prep plans, favourites, grocery items, and shopping lists.
• Housemate Mode information: your display name, household membership, meal preferences, dietary requirements, nutrition goals, meal choices, budgets, and plans shared with members of a household you join.
• Import information: recipe photos, recipe text, social-media captions, and links you choose to submit. Submitted photos and supported social-media captions are analysed using Google Gemini to produce an editable recipe draft.
• Technical information: device platform and version, app version, IP address and basic request/security logs generated by our hosting providers, and error details such as an error message, stack trace, and the part of the app where an error occurred.
• Access and communications information: waitlist email addresses, waitlist position, access codes, redemption and delivery status, and email bounce or complaint information.

How and why we use your information

• Providing the service (contract): to create and secure your account, calculate optional nutrition targets, personalise meal planning, save and sync your data, import recipes, operate Housemate Mode, and provide the features you request.
• Operating and protecting Prepwell (legitimate interests): to diagnose errors, maintain reliability, prevent fraud and abuse, enforce access limits, understand whether core features work, and protect users and our systems. Our interests are running a secure and dependable service without using your information in ways you would not reasonably expect.
• Communications (contract and legitimate interests): to send service messages such as verification emails, access invitations, security notices, and responses to support or rights requests. We do not currently send third-party advertising or sell mailing lists.
• Legal obligations: to respond to valid legal requests, establish or defend legal claims, and meet applicable accounting, regulatory, security, or data-protection obligations.

Some profile choices, such as body measurements, nutrition goals, allergies, or dietary requirements, may reveal information about your health. You do not have to provide optional profile information to keep an account, although features that depend on it may not work or may be less personalised. We ask for your explicit consent before using this information to provide personalised nutrition and planning features. You can withdraw that consent in Settings, which deletes the saved health-related profile fields and disables those personalised features. We do not use this information for advertising or to make decisions that have legal or similarly significant effects on you.

Prepwell may calculate targets and recommend recipes or plans from the information you provide. These are automated suggestions only: you remain in control of your settings and choices, and the suggestions do not produce legal or similarly significant effects.

Who we share information with

We work with a small number of service providers to operate Prepwell:

• Clerk — account authentication, account management, and sign-in.
• Cloudflare — website and application hosting, security, databases, server logs, and recipe-image storage.
• Google Gemini — analysis of recipe photos and supported social-media captions that you choose to import. Google receives the submitted image or caption and the recipe information needed to return a structured draft.
• Resend — delivery and status tracking for transactional emails such as access invitations.
• Other household members — information you share through Housemate Mode is visible to members of that household so the shared planning features can work.

We may also disclose information where required by law, to protect the rights and safety of users or the service, or in connection with a sale or transfer of Prepwell, in which case we would require the recipient to continue protecting it.

Some providers may process information outside the United Kingdom, including in the United States. Where a destination is not covered by UK adequacy regulations, we rely on an approved transfer safeguard made available by the provider, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with relevant security measures. Contact us if you would like more information about the safeguard used for a particular provider.

Data retention and deletion

We keep account and app data while your account remains open because it is needed to provide Prepwell. When you delete your account, we delete your synced profile, recipes, plans, grocery and shopping data, AI-import usage records, cookbook access grants, and household membership. Waitlist and app-access records are handled separately as described below. If shared household records must remain usable for other members, your identifying details are removed and replaced with a generic deleted-user label.

Error reports are limited to the 500 most recent reports and are disconnected from your email address when your account is deleted. Expired household invitation links cease to work after seven days. Access-invite delivery, redemption, and bounce records, together with the waitlist email and position, are retained while the early-access programme operates and for as long as reasonably needed to prevent duplicate positions, restore same-email access, handle delivery problems, and resolve disputes. These records remain personal information even though they are separate from your meal-planning profile. Provider security logs and backup copies may remain for a limited period under the provider's normal retention cycle before being overwritten.

You can delete your account at any time from Settings within the app, or — even without the app installed — by emailing us at josh@prepwellapp.uk from the address on your account and asking us to delete it. We may retain information for longer where necessary to comply with law, resolve a dispute, prevent fraud, or establish or defend legal claims. We regularly review retained information and delete or anonymise it when it is no longer needed.

Your rights

Under UK data-protection law, you may have the right to ask for access to your personal information; correction or deletion of it; restriction of its use; or a portable copy of information you provided. You may also object to processing based on legitimate interests and withdraw consent at any time where consent is the basis for processing. Withdrawal does not affect processing that was lawful before it was withdrawn. These rights can be limited in some circumstances.

To exercise a right, contact us at josh@prepwellapp.uk. UK users can also complain to the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

Security

We use reasonable technical and organizational safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

Prepwell is not directed at children under 13, and we do not knowingly allow them to create accounts. If you believe a child under 13 has provided us with personal information, contact us so we can investigate and delete it. Users aged 13 to 17 should review this policy with a parent or guardian. We do not use children's information for advertising.

Nutrition information

Calorie and macro information shown in Prepwell is estimated and provided for informational purposes only. It is not medical advice, and you should consult a qualified professional for dietary or medical guidance.

Changes to this policy

We may update this policy as Prepwell evolves. We will update the date at the top of this page and, where a change materially affects how we use your information, provide an appropriate notice before the new use begins.

Contact us

The data controller is Joshua Ribeiro, United Kingdom. Questions about this policy or your data can be sent to josh@prepwellapp.uk.