Privacy Policy

Last updated: April 20, 2026

Prep2Eat ("we", "us", "our") provides an AI-assisted meal planning service. This policy explains what data we collect, how we use it, and the controls you have.

1. Information we collect

• Account data: name, email address, hashed password.
• Content you create: saved recipes, meal plans, grocery lists, and any questions or ingredients you submit to the AI assistant.
• Device data: push-notification tokens (if you opt in), basic device/OS type, and app version, used for delivering notifications and diagnosing crashes.
• Usage logs: server-side logs of requests (timestamp, IP, URL, user agent) retained for security and debugging for up to 30 days.

We do not collect precise location, contacts, SMS, microphone, or health data. We do not use advertising identifiers or third-party trackers.

2. How we use your data

• To provide the service (authenticate you, store your recipes, generate AI responses).
• To send transactional email (verification, password reset, critical service notices).
• To secure the service (rate limiting, abuse detection).
• We do not sell your data. We do not use it for behavioral advertising.

3. Third-party processors

Prep2Eat uses a small number of sub-processors to operate:

• OpenAI, L.L.C. — generates recipe suggestions and answers cooking questions. When you use AI features, the ingredients and questions you submit are sent to OpenAI's API for processing. OpenAI's policy: openai.com/policies/privacy-policy. We do not share your name, email, or account identifier with OpenAI.
• Laravel Cloud — hosts our application and database.
• Postmark — delivers transactional email.
• Apple Push Notification service / Firebase Cloud Messaging — delivers push notifications to your device when you opt in.

4. Data retention and deletion

We keep your account data until you delete your account. You can delete your account at any time from the app: open Profile → Delete Account. Deletion is permanent and removes your recipes, meal plans, grocery lists, and shared links within 30 days. Deletion applies regardless of where you live.

5. Children

Prep2Eat is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

6. Security

Data in transit is encrypted with TLS. Passwords are stored using bcrypt. Access to production systems is restricted to authorized personnel.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete your data, or to object to certain processing. You can exercise most of these directly in the app (edit profile, delete account). For anything else, email support@prep2eat.com.

8. Changes to this policy

We will update this policy as the service evolves. Material changes will be announced in-app or by email before they take effect.

9. Contact

Questions or requests: support@prep2eat.com.