Privacy Policy

1. What we collect

Account: your email address and password. Passwords are stored only in hashed form by our authentication provider.

Profile and goals: your main goal (e.g. fat loss, muscle gain, energy, digestion), dietary pattern, foods you want to avoid, cooking time, cooking skill, budget, activity level, default servings, and optionally your ZIP code.

Body metrics (optional): height, weight, age, and sex, if you choose to provide them.

Allergies: selections from our allergy list (gluten, dairy, nuts, shellfish, soy, eggs), plus the date you acknowledged our allergy notice.

Meal activity: your weekly meal plans, selected and favorite meals, thumbs up/down meal feedback, and onboarding progress.

Grocery lists: generated from your meal plan. Items you mark as "already at home" are kept only on your device.

AI coach chats: messages you exchange with our AI meal-planning guide, Kiara, are saved to your account so conversations keep their context.

Payment data: if you purchase a subscription, payment is handled by Stripe. We receive a customer ID, subscription status, plan, and billing dates. We never see or store your full card number.

Analytics: only if you accept our cookie banner, DataFast records page views and app usage events (such as sign-up and onboarding steps).

Device storage: your sign-in session, cookie choice, a cached copy of your profile and plan, and your pantry items are stored in your browser.

We do not ask for or collect medical diagnoses or health conditions.

2. Why we use it

• To create your account and keep you signed in
• To build personalized meal plans, recipes, and grocery lists around your goals, diet, and allergies
• To power AI coaching responses about your current plan
• To manage your free trial and subscription
• To understand, with your consent, how the app is used so we can improve it
• To respond to support requests and send essential service notices

3. Health and nutrition data is sensitive

We treat your goals, body metrics, allergies, dietary pattern, meal history, and AI chats as sensitive consumer health data. We use it only to provide the service to you.

We never sell this data, never share it for advertising, and never use it to target ads.

4. What we send to the AI provider

When you message Kiara, we send your chat messages and a summary of your current weekly meal plan (meal names, ingredients, prep times, and plan preferences) to the Lovable AI Gateway, which runs Google Gemini models.

We do not send your email, body metrics, allergies, goals, or ZIP code to the AI provider. Please avoid typing sensitive personal details into chat.

5. Service providers (processors)

• Lovable (hosting, database, authentication, and AI gateway)
• Google (Gemini AI models, via the Lovable AI Gateway)
• Stripe (payments, when you subscribe)
• DataFast (analytics, only after you consent)

These providers process data on our behalf and only as needed to run the service.

6. Retention

We keep your data while your account is active. When you delete your account, your profile, meal plans, meal feedback, chats, and subscription records are deleted immediately. Backups and Stripe billing records may persist for limited periods as required by law or our providers.

If you have an active subscription, deleting your account also cancels it with Stripe.

7. Your choices: export and delete

• Delete: you can delete your account and all associated data yourself in Settings → Delete Account.
• Export or correct: edit your profile in Settings, or email admin@prepmyplate.io to request a copy of your data.
• Analytics: decline the cookie banner, or clear your browser storage to reset your choice.

8. Children

PrepMyPlate is not directed to children under 13, and accounts are limited to users 18 and older. We do not knowingly collect data from children. If you believe a child has given us data, contact admin@prepmyplate.io and we will delete it.

9. California and other U.S. state rights

Residents of California and other states with privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, and Oregon) may have the right to know what we collect, access, correct, delete, and port their data, and to opt out of the sale or sharing of personal data and targeted advertising. We do not sell or share personal data for targeted advertising. We will not discriminate against you for using these rights.

To make a request, email admin@prepmyplate.io. We may need to verify your identity. You can use an authorized agent.

10. Washington My Health My Data Act

Some of the data described above (goals, body metrics, allergies, dietary pattern, meal history, and AI chats) may be "consumer health data" under Washington's My Health My Data Act and similar laws (e.g. Nevada, Connecticut).

We collect it to provide meal plans and AI guidance you request, share it only with the processors listed above to deliver that service, and never sell it. You may access, delete, or withdraw consent for this data at any time by deleting your account or emailing us.

11. Security

Data is encrypted in transit (HTTPS) and protected by per-user access rules, so only you can read your records. No system is perfectly secure, but we work to protect your information.

12. Changes and contact

If we materially change this policy, we will update the date below and notify you in the app or by email.

Questions: admin@prepmyplate.io. PrepMyPlate is operated by Dan Duda Ventures LLC.