Privacy Policy

Last Updated: September 6, 2026

This Privacy Policy ("Policy") describes how Wald Ventures LLC, doing business as "Prepful" ("Prepful," "we," "us," or "our"), collects, uses, discloses, and safeguards information in connection with your access to and use of our website and mobile application (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, do not access or use the Services.

Questions regarding this Policy may be directed to [email protected].

1. Summary

The following summary is provided for convenience only. It does not modify, limit, or supersede the terms set forth in the sections below, which govern in the event of any inconsistency.

• We collect your name and email address to create and administer your account. You may optionally provide dietary preferences and nutrition goals.
• Recipes you create or import are treated as community content and made available to other users without attribution to you.
• Ratings and comments you submit are public and displayed with attribution to the first name associated with your account. Aggregate rating signals are displayed anonymously. You may edit or delete your own rating at any time.
• The Services include AI-assisted features. Certain information you provide may be transmitted to third-party AI providers to generate requested output. See Section 4.
• We do not sell personal information and do not use personal information for targeted advertising.
• Upon account deletion, personal information is deleted; certain records are retained or anonymized as described in Section 8.

2. Information We Collect

A. Information You Provide

Account information

• Name
• Email address
• Authentication information (e.g., social login tokens/identifiers; if you use email/password, credentials are handled by our authentication provider)

Optional profile information

• Dietary preferences (e.g., vegetarian, gluten-free, allergies)
• Nutrition goals (e.g., macro targets)

Content you create or submit

• Recipes you create or import (title, ingredients, instructions, notes, and similar fields)
• Photos you upload to import a recipe from an image

Voice input (optional)

• If you enable hands-free voice commands in Cook Mode, your device's microphone captures audio to recognize a small set of commands (e.g., "next step"). This feature is off by default and must be enabled each time you use it. See Section 4 for how this audio is processed.

Optional feedback

• Ratings and optional free-text feedback

B. Information Collected Automatically

Application and infrastructure logs

• Our hosting providers may collect IP address and request metadata in infrastructure logs in connection with hosting, content delivery, and security services. These logs are maintained under the applicable provider's retention policies.

Diagnostic information

• We may retain limited, non-identifying diagnostic information (e.g., browser user-agent strings) for troubleshooting purposes.

We do not collect advertising identifiers (IDFA/GAID), device serial numbers, or precise geolocation.

3. How We Use Information

We use information for the following purposes:

• To provide and operate the Services, including account creation, authentication, and core application functionality;
• To personalize meal and recipe suggestions based on preferences and goals you provide;
• To enable recipe import and recipe discovery features;
• To maintain, secure, and improve the reliability of the Services, including debugging and abuse prevention;
• To communicate with you regarding service-related matters, including security notices and support inquiries. Transactional and support email is delivered using Resend, our email service provider.

We do not use personal information for targeted advertising.

4. AI-Powered Features

The Services use artificial intelligence and related automated processing for several purposes: generating recipe and meal suggestions, generating recipe images, extracting recipe content from a photo or a third-party link you provide, powering recipe search, and (optionally) recognizing a small set of spoken commands in Cook Mode. To perform these functions we transmit the information described below to third-party processors and, for voice commands, to your device's own operating system. This section describes those categories of processing; the named companies below are the vendors we currently use for each category and may change as our technology partners change. Prepful does not use content you submit to any of these processors to train Prepful's own models.

A. Groq (AI Inference)

When you use AI-assisted features, we transmit to Groq the information necessary to generate the requested output, which may include your dietary preferences and nutrition goals (if provided), recipe details you submit, and free-text you enter into AI input fields. Groq returns generated output (e.g., suggested meals, recipe text), which we store as part of your account unless you delete it.

Groq's data handling and retention practices are governed by Groq's own policies, currently available at console.groq.com/docs/your-data and groq.com/privacy-policy. Those practices are subject to change by Groq and are not controlled by Prepful.

B. Replicate (Image Generation)

If you generate a recipe image, we transmit to Replicate an image-generation prompt derived from the recipe (e.g., title, description, or instructions) and associated model configuration parameters. We do not transmit your account identifier to Replicate. Replicate's data handling practices are described at replicate.com/privacy.

C. Apify (Recipe Import)

If you import a recipe from a supported third-party link, we transmit to Apify the URL you provide and applicable scraping configuration. We do not transmit your account identifier to Apify. Apify's data handling practices are described at docs.apify.com/legal/privacy-policy.

D. Internet Archive / Wayback Machine (Recipe Import Fallback)

If we are unable to retrieve a recipe directly from the link you provide, we may check whether an archived copy of that page exists using the Internet Archive's Wayback Machine, and retrieve the archived copy if so. Only the URL you provided is transmitted for this purpose. The Internet Archive's data handling practices are described in its own terms and privacy policy at archive.org/about/terms.

E. OpenAI (Photo-Based Recipe Extraction and Search)

If you import a recipe from a photo, we transmit the image you provide to OpenAI to extract the recipe's text. We also transmit recipe titles and descriptions to OpenAI to generate search embeddings that power recipe search. We do not transmit your account identifier to OpenAI.

OpenAI's data handling and retention practices are governed by OpenAI's own policies, currently available at openai.com/enterprise-privacy. As of this writing, OpenAI states that it does not use API data to train its models and retains API inputs/outputs for up to 30 days for abuse monitoring. Those practices are subject to change by OpenAI and are not controlled by Prepful.

F. Voice Commands (Cook Mode)

If you enable hands-free voice commands in Cook Mode, your device listens for a small set of spoken phrases (e.g., "next step," "start timer"). This feature is off by default, is never persisted between sessions, and requires microphone permission each time you turn it on.

Recognition is performed on your device whenever your device supports on-device recognition for your language. If on-device recognition is not available, your device's operating system (Apple or Google) processes the audio using its own networked speech-recognition service, subject to Apple's or Google's respective privacy policy. Prepful does not receive, store, or transmit the audio itself. Only the matched command (e.g., "next step") is used locally within the app to control Cook Mode.

Important: Do not include sensitive personal information (for example, health conditions beyond dietary preferences, financial information, or government identification numbers) in recipes, free-text fields, or AI prompts. Prepful is not responsible for information you elect to submit to AI or import features that you would not want processed by a third-party provider or displayed as community content.

5. Social Login

You may sign in using Google or Sign in with Apple. Depending on the provider and your account settings, we receive your email address (or an Apple relay address if you use "Hide My Email") and your name, if made available by the provider. This information is used solely to create and manage your account.

6. Disclosure of Information

We disclose information to third-party service providers as necessary to operate the Services. The categories of service providers with which we share information, and the general purpose of that sharing, are described below. This section will be updated as our use of service providers changes.

We may also disclose information where required by law or legal process, or to protect the rights, property, or safety of Prepful, our users, or others.

We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising. Where required by applicable law, we honor recognized opt-out preference signals, including the Global Privacy Control (GPC).

7. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., localStorage) for the following purposes:

• Security and fraud prevention;
• Core site functionality;
• Product analytics, via Mixpanel, to evaluate feature usage and improve the Services.

We do not use advertising cookies or third-party advertising trackers.

8. Data Retention and Deletion

A. Active Accounts

We retain account information and content for as long as necessary to provide the Services.

B. Account Deletion

You may delete your account at any time using in-app account settings, or by contacting [email protected]. Upon deletion, we:

• Delete your account profile data (name, email address, preferences, and goals);
• Delete your private application data (e.g., meal plans, saved items);
• Delete free-text feedback you submitted.

Community recipes you created or imported are retained, with any direct identifier linking the recipe to your account removed or set to null.

C. Operational Logs

Application operational logs may retain entries for up to 90 days for security and maintenance purposes. Upon account deletion, user identifiers in retained logs are anonymized (e.g., replaced with a null identifier) so that entries cannot be linked back to you.

D. Provider Infrastructure Logs

Supabase and Cloudflare may retain infrastructure logs, which can include IP addresses, in accordance with their own retention policies. Prepful does not control those retention periods.

9. Security

We implement administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a security incident affecting your personal information, we will provide notice as required by applicable law.

10. International Transfers

Our service providers may process information in the United States and other countries. Where required by applicable law, we rely on appropriate safeguards for such transfers.

11. Children's Privacy

The Services are intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact [email protected], and we will take appropriate steps to delete such information.

12. Your Privacy Rights

Depending on your jurisdiction of residence, you may have the right to:

• Know / Access the personal information we hold about you;
• Correct inaccurate personal information;
• Delete your personal information (see Section 8);
• Obtain a copy of your personal information in a portable format;
• Withdraw consent where processing is based on consent; and
• Non-discrimination for exercising any of the foregoing rights.

To exercise these rights, use in-app account settings, where available, or contact [email protected]. We will respond within the time required by applicable law (generally 45 days for California residents, extendable once by an additional 45 days where permitted).

California: Sensitive Personal Information

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, dietary preferences and nutrition goals you provide may constitute sensitive personal information. Such information is used solely to provide the personalization features of the Services. You may request that we limit the use of sensitive personal information to that which is necessary to provide the Services by contacting [email protected]. In the preceding twelve months, we have not sold or shared sensitive personal information.

Washington My Health My Data Act

Dietary preferences and nutrition goals may also constitute consumer health data under Washington law. You may have the right to confirm whether we collect, share, or sell consumer health data; access or delete such data; and withdraw consent for its collection or sharing beyond what is necessary to provide a requested product or service. These rights may be exercised by contacting [email protected] or by deleting your account or removing your dietary information within the application.

13. Changes to This Policy

We may revise this Policy from time to time. Material changes will be reflected by an updated "Last Updated" date and, where required by applicable law, additional notice will be provided.

14. Contact

Email: [email protected]

Mailing address:

• Wald Ventures LLC (DBA "Prepful")
• 2226 Eastlake Ave E #990, Seattle, WA 98102, United States