How Prep handles your data

1. Scope

This policy explains how HealthPoints Technologies LLC collects, uses, stores, and shares information when you use the Prep mobile app, website, and related services. By using Prep, you agree to the practices described here.

2. Information we collect

Account details

When you create or use an account, we may collect:

• Name and email address
• Authentication details from providers like Apple or Google
• Profile information such as goals, preferences, and dietary restrictions
• Messages you send to support

We use third-party authentication providers for sign-in. We do not store or manage your passwords directly.

Nutrition and product usage data

To deliver the service, we may collect:

• Meals, foods, recipes, and other nutrition data you log
• Preferences, allergies, and dietary filters
• Optional health-related information you provide
• Feature usage, device details, and performance information

Billing data

Subscription payments are processed by third-party payment providers, including app stores and payment processors. We do not store full card details on our servers. We receive only the transaction data needed for billing and account management.

3. How we use information

We use collected information to operate and improve Prep. That includes:

• Creating and managing accounts
• Generating nutrition recommendations, meal plans, and related product features
• Running subscriptions, billing, and customer support
• Improving reliability, security, and performance
• Meeting legal obligations and enforcing our terms

We do not use personal information for third-party advertising sales, and we do not sell or rent personal information.

4. How information is shared

We share information only in limited cases:

• With service providers that help us run payments, hosting, analytics, and email
• When required by law or necessary to protect users, the public, or our rights
• As part of a merger, acquisition, or similar business transfer
• In aggregated or de-identified form for analysis or product improvement

Service providers are expected to use data only for the services they perform on our behalf and to protect it appropriately.

5. Third-party services

Prep may link to third-party services or rely on providers such as Apple, Google, cloud infrastructure vendors, or payment processors. Those services have their own privacy practices, and you should review their policies directly.

6. Security

We use reasonable technical and organizational safeguards, including encrypted transport, access controls, and secure infrastructure practices. No system is perfectly secure, so we cannot guarantee absolute security.

7. Retention and deletion

We keep personal information only as long as necessary to provide the service, resolve disputes, maintain required records, and comply with legal obligations.

If you delete your account, we will delete or de-identify the associated personal information unless retention is required for legal, regulatory, fraud prevention, or accounting reasons.

8. Your choices and rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Opt out of promotional communications

To make a request, email support@healthpoints.io. We may need to verify your identity before completing some requests.

9. Children's privacy

Prep is not directed to children under 13, or under 16 where a higher minimum age applies. If we learn that we collected personal information from a child without proper authorization, we will delete it.

10. International use

Prep is operated from the United States. If you use the service from another country, you understand that your information may be transferred to and processed in the United States.

11. Regional disclosures

Users in places such as California, the EEA, the United Kingdom, and Switzerland may have additional rights under local privacy laws. We honor those rights where applicable, including rights to access, correction, deletion, portability, and non-discrimination.

12. Policy updates

We may update this policy from time to time. When we do, we will update the effective date above and may provide additional notice if the changes are material.

Last updated: November 17, 2025