Prepora360 Privacy Policy

Effective date: [DATE] Last updated: [DATE]

⚠️ DRAFT — placeholders in [BRACKETS] must be filled in, and this document should be reviewed by an attorney before publication. It is written for a sole-proprietor-operated service based in Illinois, USA.

Prepora360 ("the Service," "we," "us") is operated by [YOUR LEGAL NAME], doing business as Prepora360, [CITY], Illinois, USA. This policy explains what we collect, why, and what your rights are. It covers the Prepora360 cloud service (the website at [prepora360.com] and the API at [api.prepora360.com]) and the Prepora360 mobile app.

The short version: Prepora360 is an account-based service — you sign in, and the food, workouts, hydration and body measurements you record are stored on our servers so the app and the website show you the same thing. That's the product. We don't sell your data, we don't show ads, we don't run analytics or crash reporting, and we don't use your data for advertising or to train AI models. You can export or delete everything at any time.

1. An account is required, and there is no offline mode

The Prepora360 mobile app requires an account and an internet connection. It reads and writes your data on our servers as you use it; it is not an offline app that later syncs, and it keeps no local database of your records. If you are offline it can show you the last day you looked at, labelled as such, and otherwise asks you to reconnect.

There is therefore no anonymous or device-only way to use the app: if you are using it, you have an account and this policy applies in full. Section 2.1 describes the small amount the app does keep on your phone.

2. What we collect

Account information. Your email address and a password. Passwords are stored only as one-way cryptographic hashes; we cannot see them. Session tokens issued to your devices are also stored hashed.

The content you record. Whatever you enter in the app or on the website is stored on our servers. Depending on which features you use, this can include:

• Food and diet — food and pantry records, recipes, meal plans, and meal logs with their calorie and macronutrient values. A meal log can be a free-text description of what you ate, in your own words.
• Hydration — each drink you log, its volume and when you logged it, and any daily target you set.
• Training — workout sessions with their type, duration, start and end times and free-text notes; every exercise and every set within them, including reps, weight, the unit you used, whether it was a warm-up, reps-in-reserve and rest taken; your own exercise names; and separately logged activities such as walks, runs, cycles and swims with their duration, calories and a distance you type in.
• Body measurements — body weight, body-fat percentage, resting heart rate, sleep hours, waist measurement, step counts, and any custom measurement you choose to track, each with the unit you recorded it in.
• Targets — nutrition targets and shopping lists.

Much of this — meal logs, hydration, workouts, activities, body measurements, nutrition goals — is health- and fitness-related information, and the free-text fields (what you ate, notes on a session) are health information too by virtue of where you wrote them. We treat all of it as private and confidential. It is used solely to provide the account features you signed up for. We do not analyze it for advertising, sell it, share it with data brokers, or use it to train machine-learning models. We are not a healthcare provider and this data is not medical-record data covered by HIPAA.

2.1 What the mobile app keeps on your phone

The app stores three things locally, all encrypted with a key held in your phone's hardware-backed keystore, in a single file that is excluded from Android cloud backup and from device-to-device transfer:

• the sign-in token issued to that device;
• your account identity — the account id, email address, display name, household role and subscription status — so the app can show you something on a cold start before it has reached the network;
• one day of your dashboard, so opening the app without a connection shows the last day you looked at rather than a blank screen. Exactly one day is kept: recording a new one replaces it, and no history accumulates on the device.

Signing out erases all three immediately, as does the token being revoked. The app keeps no other local copy of your records.

The app requests no device permissions other than internet access. It does not use the camera, microphone, location, contacts, photos, or files, and it contains no analytics, crash-reporting or advertising software of any kind.

Payment information. Payments are processed by Stripe, Inc. Your card number never touches our servers; we receive and store only what we need to manage your subscription: subscription status, plan, renewal dates, the last four digits and brand of your card, and your billing country. Stripe's handling of your payment details is governed by Stripe's own privacy policy (https://stripe.com/privacy).

Technical and usage logs. Like nearly every online service, our servers log basic technical information when your device or browser connects: IP address, timestamps, the endpoint requested, response status, and device/browser user-agent. These logs record that a request happened, not the contents of your records. We use them for security, abuse prevention, and debugging, and retain them for no more than [90] days. The mobile app itself writes no logs at all.

Emails we send. Transactional email (receipts, trial and billing notices, password resets, data-deletion warnings) is sent through [EMAIL PROVIDER], which processes your email address for delivery. We do not send marketing email unless you separately opt in, and every non-essential email includes an unsubscribe link.

Cookies. The website uses only essential cookies: a session cookie to keep you signed in and a CSRF token for security. We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics scripts.

3. What we do NOT collect

We do not collect your precise or approximate location, contacts, calendar, photos or videos, audio, files, SMS or call logs, advertising identifiers, device identifiers, or biometric identifiers (fingerprints, face geometry, or similar — body weight and measurements you type in are not biometric identifiers). We do not collect any data from your device outside what you enter in the app itself.

Two clarifications, because they are the ones people reasonably assume the other way:

• Distance is typed, not tracked. An activity can carry a distance in metres, but you enter that number yourself. The app never reads your location.
• Recipe photos are references, not uploads. Where a recipe carries a photo it is stored as a file path or URI, not as an image we receive.

4. How we use your information

We use the information above to: store your records and show them to you on every device you sign in from; keep them backed up; authenticate you and secure your account; process subscription payments and send required billing communications; respond to support requests; detect and prevent abuse, fraud, and security incidents; and comply with legal obligations. That is the complete list. We do not use your information for targeted advertising, and we do not sell or rent personal information to anyone. We have not sold personal information, and we have no plans to.

5. Who we share data with (service providers only)

We share data only with the service providers necessary to run Prepora360, each bound by their own contractual and legal obligations:

• Hostinger ([Hostinger International Ltd.]) — cloud hosting; your records and account data live in a database on infrastructure they operate.
• Stripe, Inc. — payment processing.
• [EMAIL PROVIDER] — transactional email delivery (processes your email address and message contents of the emails we send you).

We may also disclose information if required by law — for example, in response to a valid subpoena, court order, or other lawful process — or where necessary to protect the rights, safety, or property of users, the public, or the Service. Where legally permitted, we will attempt to notify you before disclosing your data in response to legal process. If Prepora360 is ever acquired or its assets transferred, your data may transfer with it; this policy (or one at least as protective) will continue to apply, and you will be notified.

6. Data retention and deletion

• Active accounts: we retain your content and account information for as long as your account is active. When you delete an individual item, we keep a deletion marker ("tombstone") for it rather than erasing the row outright, so that every client you use agrees the item is gone and a repeated delete is harmless. A tombstone records that something was deleted, not what it was.

• After your subscription lapses: your data is retained for 90 days after the end of any grace period so you can resubscribe or export it. We will email you at least twice before deletion. After 90 days, your content is permanently deleted.

• Account deletion: you can delete your account at any time from the account portal, at [api.prepora360.com]/account/data. We ask you to type DELETE and re-enter your password, then we revoke every signed-in device immediately and erase the rest. Erasure is a hard delete — not a tombstone: every record you own is removed, along with your account record, your data exports, your subscription linkage (cancelled and detached at Stripe), your household, and any child login accounts you created, which are erased with you because they have no email of their own and could not recover a standalone account. This ordinarily completes within [30] days. Records we are legally required to keep (for example, invoices and tax records held by or with Stripe) are retained for the legally required period.

  Deletion is not behind the paywall. You can delete your account, and export your data, whether or not you have an active subscription.

  Account deletion is done on the website. The mobile app does not delete accounts; signing out of the app erases the app's local copy (section 2.1) and revokes that device, and does not delete anything from our servers.

• Backups: encrypted database backups are kept for disaster recovery and are overwritten on a rolling basis within [30] days; deleted data ages out of backups on that schedule.

7. Your rights

Regardless of where you live, we extend the same rights to everyone:

• Access and portability: request a complete machine-readable (JSON) copy of your data at any time from the account portal at [api.prepora360.com]/account/data. We build it and email you a private download link.
• Correction: your data is yours to edit in the app or on the website at any time.
• Deletion: delete your account and data at any time, as described in section 6.
• No sale, no targeted ads: there is nothing to opt out of; we don't do it.

Both export and deletion live on the website rather than in the mobile app, and neither requires an active subscription.

If you are in a jurisdiction with specific privacy laws (for example, the EU/UK GDPR, the California Consumer Privacy Act, or similar state laws), these mechanisms are how we honor access, portability, correction, and deletion requests. You may also contact us directly at [CONTACT EMAIL] and we will respond within the timeframe your law requires (and in any case within 30 days). If you are in the EU/UK, our legal bases for processing are performance of a contract (providing the service you signed up for), legitimate interests (security and abuse prevention), and legal obligation (billing records). You also have the right to lodge a complaint with your supervisory authority.

8. Security

We take reasonable technical and organizational measures appropriate to the size of this service: all traffic is encrypted in transit (TLS/HTTPS enforced, and the mobile app refuses unencrypted connections outright); passwords and session tokens are stored hashed; the mobile app encrypts what little it keeps on your phone (section 2.1) with a key held in the device's hardware-backed keystore, and excludes it from phone backups; access to production systems is restricted; payment card data is handled exclusively by Stripe. No online service can guarantee perfect security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law, including the Illinois Personal Information Protection Act.

9. Children

Prepora360 is not directed to children under 13 for independent use, and we do not knowingly collect personal information from children under 13 who sign up on their own. Creating an account for yourself requires confirming you are at least 13 (and at least 18, or have a parent or guardian's involvement, to purchase a subscription).

Family plans. A Family subscription lets a parent or guardian (the account owner) manage children within their household. A child profile holds only what the parent enters to track that child's meals, workouts, and habits; it has no independent login. Children's accounts with their own logins are being introduced, and where offered they are created and controlled by the parent or guardian, who consents on the child's behalf. The account owner can view, correct, export, or delete a child's information at any time from the account portal, and deleting the household or the owner's account removes the children's data with it. If you believe a child under 13 has created an independent account without a parent's involvement, contact us at [CONTACT EMAIL] and we will delete it.

The mobile app is for adults. A child's login works on the website only; children cannot sign in to the Prepora360 mobile app at all. Children also have no access to the account portal, so they cannot change the account email, see billing, export data, or delete anything — those are the account owner's.

10. International users

Prepora360 is operated from the United States and data is stored on servers located in [SERVER REGION — confirm with Hostinger, e.g., "the United States"]. If you use the Service from outside the US, you understand that your data will be transferred to and processed in the US, where privacy laws may differ from your jurisdiction's.

11. Changes to this policy

We may update this policy as the Service evolves. For material changes, we will notify you by email or an in-portal notice at least [14] days before the change takes effect. The "Last updated" date at the top always reflects the current version. Continued use of the Service after a change takes effect constitutes acceptance; if you don't agree, you can export your data and delete your account.

12. Contact

[YOUR LEGAL NAME], d/b/a Prepora360 [MAILING ADDRESS — a PO box is fine] [CONTACT EMAIL]