Privacy Policy

Last updated: 27 July 2026

Prep+Eat is a meal-planning app for families: you collect recipes, plan the week's meals, and share a shopping list that updates on everyone's phone at once. This policy explains what the app stores, why, and what you can do about it.

It is written to match what the app actually does. If you find something here that does not match your experience, that is a bug in one of the two – please tell us.

Who is responsible

Thomas Sebell, Denmark, is the data controller for Prep+Eat.

Contact: hello@prepeat.app

What we collect, and why

To sign you in

• Your email address. Sign-in works by sending a one-time code to your email; there is no password to store or lose.

To make the app work as a shared family tool

• Your first name, so the rest of your household can tell who added a recipe or ticked something off the list.
• Your household: its name, who belongs to it, and the invite codes used to join.
• Your recipes: titles, descriptions, ingredients, steps, serving counts, the web address you imported from (if any), and any photos you add. Each recipe records which member added it.
• Your meal plans: which meals are planned for which day, and for how many servings. Over time this builds a history of what your household eats.
• Your shopping lists: items, quantities, categories, and which member ticked an item off.
• Learned categories: when you move "Milk" to Dairy, the app remembers that for your household so it guesses better next time.

To stop abuse

• A record of invite-code attempts (which account tried, and when), so a code cannot be guessed by brute force.

Automatically

• Standard technical logs kept by our hosting provider, such as IP address and timestamps of requests. These are a by-product of running a server, not something the app reads or uses.

What we do not collect

The only device permission the app asks for is access to your photo library, and only when you choose to add a picture to a recipe.

Our legal basis (GDPR)

• Providing the service you signed up for – planning meals and sharing lists with your household – is performance of a contract (Art. 6(1)(b)).
• Preventing abuse of invite codes is our legitimate interest in keeping households secure (Art. 6(1)(f)).

What your household can see

This is the most important thing to understand about Prep+Eat: a household shares everything inside it. Every member of your household can see the household's recipes, meal plans and shopping lists, including your first name against the recipes you added and your initial against the items you ticked off.

Only invite the people you want to share a kitchen with.

Who else handles your data

We use three companies to run the service. All of them act on our instructions.

• Supabase – the database, sign-in, file storage and live sync behind the app. Your account, recipes, plans, lists and photos are stored there.
• Resend – delivers the sign-in emails. It handles your email address and the one-time code, and nothing else.
• Apple – distributes the app through the App Store and TestFlight.

We do not use any other processors, and we do not transfer your data to anyone else except where the law requires it.

Where your data is stored

Your data is stored in the European Union – on servers in Stockholm, Sweden (AWS region eu-north-1), operated on our behalf by Supabase. Your recipes, plans, lists, photos and account details do not leave the EU in normal operation.

Two of our providers are US-headquartered companies. If Supabase staff need access from outside the European Economic Area – for example to investigate a fault – that access is covered by the European Commission's Standard Contractual Clauses. Sending you a sign-in code means your email address is processed by Resend, which is also covered by those clauses.

How long we keep it

• Your account data is kept for as long as your account exists.
• Items you delete inside the app – a recipe, a shopping item, a planned meal – are hidden immediately but kept in the database for a short period so that undo works and so a household member's deletion can be reversed. They are not visible to you or anyone else once deleted.
• If you delete your profile, your account and personal data are erased immediately and permanently. There is no grace period and no hidden copy. Recipes you added to a shared household stay with that household, but your name is removed from them.
• If you leave a household, you keep a copy of its recipes in a new personal kitchen, and the household keeps its own copy. The two are separate from that point on.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have your data erased – the app does this for you under Delete profile,
• restrict or object to how we use your data,
• receive your data in a portable form.

Write to hello@prepeat.app and we will answer within one month.

If you are unhappy with how we have handled your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark – datatilsynet.dk.

Children

Prep+Eat is a family app, but accounts are meant for adults. We do not knowingly create accounts for children under 13, and we do not target the app at them. If a child has an account, a parent can delete it from inside the app or by writing to us.

Changes to this policy

If we change how the app handles your data, we will update this page and move the "Last updated" date. Significant changes will also be announced in the app.

Contact