Privacy Policy for the SirPrep Mobile App

Last updated: August 2026

This Privacy Policy explains how SirPrep handles personal data when you use the mobile app.

1. Who Is Responsible

The data controller is:

Viktoriia Hrodetska
Heidenheimer Strasse 24
85748 Garching bei Muenchen
Germany
Email: info.foodb@gmail.com

2. Privacy at a Glance

• SirPrep does not require an account.
• Most of your information stays on your device.
• SirPrep does not sell personal data or use third-party advertising or cross-app tracking.
• Internet access is needed for AI features, subscriptions, security, and support.

3. Information We Process

Information stored on your device

SirPrep stores the information you choose to enter or create, such as planning preferences, diet and nutrition preferences, meal plans, recipes, grocery lists, meal feedback, progress photos, weight entries, check-ins, and app settings.

If you connect Apple Health, SirPrep reads only the data types you approve to show activity and weight information. Raw Apple Health samples are not sent for AI meal generation. Camera and notification access are used only when you choose the related features.

This processing is necessary to provide the app features you request (Art. 6(1)(b) GDPR). Local data remains on your device until you delete it, reset SirPrep, or uninstall the app, subject to your device backup settings.

AI meal and recipe generation

When you request an AI meal plan or recipe, SirPrep sends the information needed to create the result to contracted AI and cloud service providers. This may include your planning choices, dietary preferences, nutrition targets, ingredient exclusions, budget, kitchen equipment, free-text instructions, and the meal or recipe being generated. A pseudonymous app identifier and limited technical information may also be used for subscription checks, security, fraud prevention, and usage limits.

We use this information only to provide the requested AI feature, operate the service, prevent misuse, and resolve technical problems. The legal bases are Art. 6(1)(b) GDPR for the requested service, Art. 6(1)(f) GDPR for security and reliable operation, and consent where described in Section 4. SirPrep does not use AI to make legal or similarly significant decisions about you.

Please do not include names, addresses, contact details, or other unnecessary personal information in free-text fields.

Subscriptions and purchases

App Store purchases are processed by Apple. SirPrep does not receive your full payment-card details. Subscription service providers may process a pseudonymous app identifier, purchase and receipt information, product identifiers, subscription status, and technical information needed to validate purchases and restore access.

This processing is necessary to provide paid features (Art. 6(1)(b) GDPR) and to prevent fraud and maintain reliable service (Art. 6(1)(f) GDPR).

Product analytics

SirPrep collects limited product-interaction data to understand whether onboarding, planning, subscriptions, and meal generation work reliably and to improve the app. This data includes a random installation identifier; random session, request, and event identifiers; app version and build; locale; event names; and a small set of allowlisted technical properties such as the viewed step, outcome, duration, or error category.

Product analytics does not include your name, profile measurements, health information, meal plans, recipes, grocery-list contents, photos, free-text entries, or purchase identity. It is not used for advertising, profiling, or cross-app tracking. The legal basis is our legitimate interest in measuring and improving the reliability and usability of SirPrep (Art. 6(1)(f) GDPR). Analytics records are stored by our contracted cloud infrastructure provider and automatically deleted no later than 90 days after receipt.

Support

If you contact us, we process the contact details and message you provide to answer your request, provide support, comply with legal obligations, and protect legal claims. We retain support messages only as long as reasonably needed for those purposes.

4. Fitness and Dietary Preferences

Some optional choices may reveal health information or religious or philosophical beliefs, for example allergies, medical diet preferences, nutrition targets, halal, or kosher preferences.

SirPrep asks for your explicit consent before using those preferences for AI personalization. The legal bases are Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR. You can withdraw consent at any time in Settings. Withdrawal stops future AI use of those preferences and does not affect processing that occurred before withdrawal. You can still omit or delete optional information.

SirPrep is not a medical device and does not provide medical or professional dietary advice.

5. Service Providers and Sharing

We share personal data only when needed to operate SirPrep, when you ask us to, or when required by law. The categories of recipients are:

• app-store and payment providers;
• subscription-management providers;
• AI processing providers;
• cloud hosting, security, and infrastructure providers;
• professional advisers and public authorities where legally required.

These providers may process data only for the contracted service and subject to appropriate confidentiality, security, and data-protection obligations. We do not permit them to sell your data or use it for advertising on our behalf.

6. International Transfers

Some providers may process data outside the EU or EEA, including in the United States. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework, Standard Contractual Clauses, or other safeguards permitted by Chapter V GDPR. Contact us if you would like more information about applicable safeguards.

7. Retention and Security

SirPrep keeps personal data only as long as needed for the purposes above, legal obligations, security, or the establishment and defence of legal claims. Product-analytics records are automatically deleted no later than 90 days after receipt. Other operational records and technical logs are kept for limited periods. Purchase records may be retained where required for subscription, accounting, fraud-prevention, or legal purposes.

We use measures designed to protect personal data, including encrypted network connections, access controls, pseudonymous identifiers, and limiting providers to what is needed. No electronic system can be guaranteed completely secure.

8. Your Choices and Rights

Depending on the law that applies, you may have rights to access, correct, delete, restrict, or receive your personal data; object to certain processing; withdraw consent; and complain to a supervisory authority.

To exercise your rights, email info.foodb@gmail.com. Because SirPrep does not require an account, we may need information that reasonably helps us identify the relevant record.

For a private controller established in Bavaria, the competent authority is generally:

Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de/

You may also contact another competent authority in your country of residence or work.

9. Children

SirPrep is not directed to children under 16. A person under 16 should use SirPrep only with permission from a parent or legal guardian. Contact us if you believe a child provided personal data without appropriate permission.

10. Changes

We may update this Privacy Policy when SirPrep, our providers, or legal requirements change. The latest version is identified by the date above.