Privacy Policy

Last updated: April 2, 2026

1. Introduction

This Privacy Policy explains how personal data is processed when you use the PrepYourWeek website and mobile applications (together, the “Service”).

Personal data means information relating to an identified or identifiable natural person.

2. Data Controller

The controller responsible for the processing of personal data is:

Jakob Schmid
Lungitz 127
4223 Katsdorf
Austria

Email: contact@prepyourweek.app

3. Data We Process

Depending on how you use the Service, the following categories of personal data may be processed.

3.1 Account and Authentication Data

email address
user ID
sign-in status and authentication information
technical identifiers required for secure authentication
information provided by authentication services such as Google or Apple

When you sign in through Google or Apple, PrepYourWeek receives only the information made available by the relevant provider according to your selections and account settings.

3.2 User-Provided Content and Settings

saved recipes and recipe collections
personal recipe notes
weekly meal plans
grocery lists
selected nutrition or planning goals
serving and Bulk Mode settings
other content you create, save, or share through the Service

3.3 Usage and Device Data

features used
interactions within the Service
app version
operating system and device type
approximate location information where derived from technical data
dates, times, and duration of certain interactions
technical log and diagnostic data

3.4 Crash and Diagnostic Data

When technical errors occur, information required to diagnose problems and improve stability may be processed, including:

crash reports
device and operating-system information
app version
technical events preceding an error
diagnostic identifiers

3.5 Communication Data

When you contact PrepYourWeek by email, the information you provide is processed, including:

email address
content of your message
your name and any other information you voluntarily provide

4. Purposes and Legal Bases

Personal data is processed for the following purposes.

4.1 Providing the Service

Data is processed to:

create and manage user accounts
authenticate users
store weekly plans, grocery lists, recipes, and settings
synchronize content between devices
provide sharing features
respond to support requests

The legal basis is Article 6(1)(b) GDPR where processing is necessary to perform a contract or take steps before entering into a contract.

4.2 Security, Troubleshooting, and Abuse Prevention

Technical data may be processed to:

maintain the security of the Service
identify and resolve errors and crashes
prevent unauthorized access and misuse
improve stability and reliability

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable, and abuse-free operation of the Service.

4.3 Analytics and Product Improvement

Where necessary and legally permitted, usage data may be processed to understand how the Service is used and to improve functionality and usability.

Where consent is required, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

4.4 Communication

Information submitted through inquiries is processed to answer your message and provide support.

The legal basis is Article 6(1)(b) GDPR where the inquiry relates to a contractual relationship, and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to inquiries and communicating with users.

4.5 Legal Obligations

Where required by law, data is processed to comply with legal obligations. The legal basis is Article 6(1)(c) GDPR.

5. Service Providers

PrepYourWeek uses technical service providers that may process data on behalf of PrepYourWeek or under their own data-protection responsibility.

5.1 Supabase

Supabase is used in particular for authentication, database functionality, and storing application data.

This may involve the processing of account, user, content, and technical data.

5.2 Google

Google services may be used for:

Google Sign-In
Firebase Analytics
Firebase Crashlytics

Google Sign-In processes authentication information according to your selections and Google account settings.

Firebase Analytics may process usage and interaction data. Firebase Crashlytics may process crash, diagnostic, and device data.

5.3 Apple

Sign in with Apple may be used for authentication. Apple processes the data required for sign-in under its own privacy terms. Depending on your selection, Apple may provide PrepYourWeek with a private relay email address.

5.4 Amazon Web Services

Amazon Web Services, in particular AWS Simple Email Service (AWS SES), may be used to send transactional emails. This may involve processing email addresses, delivery information, and technical delivery data.

These providers may apply their own privacy policies and terms.

6. International Data Transfers

Some service providers may process data outside the European Economic Area or permit access from outside it.

Where personal data is transferred to a third country, the transfer takes place only in accordance with applicable legal requirements, such as:

an adequacy decision by the European Commission
appropriate safeguards such as Standard Contractual Clauses
or another legal basis permitted under the GDPR

Further information may be requested from the relevant provider or through the contact details above.

7. Retention

Personal data is retained only for as long as necessary for the relevant purpose.

In particular:

Account data and stored application content are generally retained until the account is deleted or the processing purpose no longer applies.
Communication data is retained for as long as necessary to respond to the inquiry and comply with legal retention requirements.
Analytics, log, crash, and diagnostic data are retained according to technical necessity and the settings of the relevant services.
Statutory retention obligations remain unaffected.

When the purpose no longer applies, data is deleted or anonymized unless a legal obligation or other lawful reason requires continued storage.

8. Account Deletion

You may delete your account:

directly within the application
or by requesting deletion at contact@prepyourweek.app

When an account is deleted, personal account data and associated content are deleted or anonymized unless legal retention obligations or another lawful basis require continued storage.

Shared content or copies previously stored by other users may not always be removable from their control.

When you share recipes or other content through a sharing link, anyone with access to that link may be able to view the shared information.

Do not include personal or confidential information in publicly accessible or forwardable sharing links.

PrepYourWeek is not responsible for how recipients further use content that you choose to share.

10. Cookies and Similar Technologies

The website and integrated services may use cookies or similar storage technologies that are technically necessary.

Non-essential analytics or tracking technologies are used only where a valid legal basis exists and, where required, consent has been provided.

You may withdraw or adjust consent through the available settings where such settings are provided.

11. Requirement to Provide Data

Certain information is required to create an account and provide core Service functionality.

Without this information, the relevant functions may not be available.

Other information is provided voluntarily.

12. Automated Processing

PrepYourWeek may use nutrition-related calculations, algorithms, or AI-assisted processes to provide estimates, serving calculations, or suggestions.

These features are intended for assistance and information. They generally do not constitute solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.

13. Your Rights

Subject to applicable legal requirements, you may have the following rights:

right of access under Article 15 GDPR
right to rectification under Article 16 GDPR
right to erasure under Article 17 GDPR
right to restriction of processing under Article 18 GDPR
right to data portability under Article 20 GDPR
right to object under Article 21 GDPR
right to withdraw consent with effect for the future
right to lodge a complaint with a data-protection supervisory authority

To exercise your rights, contact contact@prepyourweek.app.

In Austria, you may lodge a complaint with the Austrian Data Protection Authority.

14. Security

PrepYourWeek implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, and disclosure.

However, completely risk-free transmission or storage cannot be guaranteed.

15. Children’s Privacy

The Service is not specifically directed at children who cannot validly consent to data processing under applicable law.

If PrepYourWeek becomes aware that a child’s personal data has been processed without required authorization, reasonable steps will be taken to delete it.

16. External Links

The Service may contain links to external websites or services. PrepYourWeek is not responsible for their privacy practices.

Please review the privacy information provided by the relevant operators.

17. Changes to This Privacy Policy

This Privacy Policy may be updated when the Service, legal requirements, or service providers change.

The current version will be published on this page. Material changes may also be communicated within the Service.

18. Contact

Questions about privacy may be sent to: