Your data stays on your device

PrepAI stores your health records, meals, workouts, and AI interactions locally in a SQLite database on your device. No account, authentication, or demo credential exists. Opaque local identifiers organize data inside this installation; they are not sign-in identities. PrepAI does not upload connected health values, meal photos, prompts, or generated guidance.

What data PrepAI collects

Network access is limited to consent-gated non-personalized advertising for eligible free iOS users, store and RevenueCat purchase verification, optional iPhone model downloads, software updates, and iPhone diagnostics you explicitly enable. These services use HTTPS. None of them receive your personal health data through PrepAI. The current Android release does not offer diagnostics uploads and does not initialize or show advertising.

Advertising on the free iOS experience

After PrepAI confirms that you do not have active Pro access or a legacy local trial, Google User Messaging Platform may request or refresh your advertising privacy choices. If it permits ad requests, Google AdMob may show one non-personalized banner above the tab bar. Google may process IP-derived coarse location, device and SDK identifiers, ad views and interactions, performance information, and diagnostics for ad serving, frequency capping, security, and aggregate reporting. PrepAI never supplies HealthKit data, local records, meal photos, prompts, generated content, screen content, routes, or RevenueCat identifiers for advertising. Pro and any legacy local trial are ad-free. When Google requires a privacy-options entry point, Settings shows Manage ad privacy; a failed or revoked update removes the banner.

Apple Health (HealthKit)

On iPhone, Apple Health integration is optional and permission-gated. You must explicitly enable it from Settings → Apple Health within the app. PrepAI reads the health data types you authorize and may write nutrition, workouts, and body weight back to Apple Health at your direction. Health data read through HealthKit never leaves your device and is never used for advertising or shared with advertising providers. The current Android release uses manual entries and does not request access to connected health records.

Optional diagnostics

Optional diagnostics uploads are available only in the current iPhone release and are off by default. If you opt in, PrepAI sends reviewed health-free events over HTTPS containing app/build version, OS major, coarse device tier, public channel, feature surface, result/error enum, and duration bucket. Stacks, routes, identity, health values, readiness, goals, choices, free text, photos, prompts, and generated output are excluded. The telemetry service is configured to delete server events after their 90-day expiry. A daily salted hash of the network address may exist for no more than 120 seconds solely to rate-limit abuse; the raw address is not stored. Revoking consent stops future uploads and clears the unsent queue. Because events contain no account or user identifier, PrepAI cannot identify an individual event for early deletion; contact [email protected] with privacy questions.

In-app purchases

PrepAI Pro is a single capability entitlement managed by RevenueCat. On iPhone and Android it may be offered as a monthly auto-renewing subscription or a one-time lifetime purchase. In the accountless native flow, RevenueCat processes an anonymous App User ID, purchase and transaction history, and limited service technical metadata such as app version, device type and operating system, and last-seen time. PrepAI uses those records only for entitlement and receipt validation, purchase and restore functionality, fraud prevention, and purchase analytics. The identifier is not a PrepAI login, and RevenueCat receives no wellness data through PrepAI. RevenueCat retains those processor records while PrepAI uses its service and as needed for legal, security, and backup obligations. Use Settings → Purchase Privacy Request or email [email protected] to request deletion. The Settings action automatically includes the anonymous support ID; support may ask for an optional store order reference when needed to locate a transaction. Deleting that verification record does not cancel or refund a store purchase; later access may require another store restore. Payment is processed by Apple or Google, and neither the store nor RevenueCat receives your health records through PrepAI. Any subscription can be managed or canceled in the applicable store account settings. Any legacy local seven-day trial does not request payment, renew, or charge automatically.

On-device AI

On iPhone, optional meal-plan and wellness-summary text generation runs on device using Meta's ExecuTorch runtime. Model downloads require separate consent with an exact size estimate and a Wi-Fi or cellular choice. Downloaded generation is not offered in the current Android release; deterministic guidance remains available without a model.

Data export & deletion

On iPhone, you can create a passphrase-protected encrypted backup from Settings and import it on another iPhone. PrepAI cannot recover the passphrase. Encrypted backup import and export are not currently offered on Android. Delete Data on This Device removes PrepAI records and app-owned workspaces from this installation, creates a fresh empty local installation, and returns to setup. It does not delete records held by a connected health service, copies exported outside PrepAI, RevenueCat purchase-verification records, cancel or refund a store purchase, or remove that purchase from your store account. Purchase-verification deletion is a separate request described above. There is no PrepAI cloud backup or automatic sync.

Children's privacy

PrepAI is not directed to children under the age of 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page. This policy was last updated on August 24, 2026.

Contact

If you have questions about this privacy policy, contact us at [email protected].