Privacy Policy for the SirPrep Mobile App

Last updated: September 14, 2026

This Privacy Policy explains how SirPrep handles personal data when you use the mobile app. The catalogue-based planning described below applies from version 1.4.2. The section on earlier versions explains the different processing in older releases.

1. Who Is Responsible

The data controller is:

Viktoriia Hrodetska
Heidenheimer Strasse 24
85748 Garching bei Muenchen
Germany
Email: info.foodb@gmail.com

2. Privacy at a Glance

• SirPrep does not require an account.
• Most of your information stays on your device.
• SirPrep does not sell personal data or use third-party advertising or cross-app tracking.
• From version 1.4.2, meal selection and portion calculations run on your device using a downloaded recipe catalogue. Your planning inputs are not sent to an AI service.
• Internet access is used for catalogue and image downloads, subscriptions, limited product analytics, security, and support.

3. Information We Process

Information stored on your device

SirPrep stores the information you choose to enter or create, such as planning preferences, diet and nutrition preferences, meal plans, recipes, grocery lists, meal feedback, progress photos, weight entries, check-ins, and app settings.

If you connect Apple Health, SirPrep reads only the data types you approve to show activity and weight information. Raw Apple Health samples are not sent for AI meal generation. In version 1.4.2, optional Health data supports local activity views and nutrition-target reviews. Camera and notification access are used only when you choose the related features.

This processing is necessary to provide the app features you request (Art. 6(1)(b) GDPR). Local data remains on your device until you delete it, reset SirPrep, or uninstall the app, subject to your device backup settings.

Recipe catalogue and local planning, from version 1.4.2

The app downloads recipe content, nutrition reference data and food images from our cloud infrastructure provider, Supabase. It selects meals, calculates portions, applies your preferences and assembles your plan on your device. Planning choices, body measurements, nutrition targets and dietary preferences are not sent to an AI provider for this process.

Catalogue and image requests include a pseudonymous subscription identifier, catalogue version, requested content or image identifiers, and technical connection information such as an IP address. Grocery catalogue requests identify the selected country. These requests provide content, check paid access and protect the service; they do not upload your profile or complete meal plan. The legal bases are Art. 6(1)(b) GDPR for content delivery and paid access and Art. 6(1)(f) GDPR for security and reliable operation.

Downloaded content is cached on your device. Saved plans retain recipe details for offline use; catalogue updates, uncached images and subscription checks may require a connection. Creating catalogue content before publication does not involve sending your personal planning inputs to an AI service.

Earlier versions: AI meal and recipe generation

In versions before 1.4.2, when you request an AI meal plan or recipe, SirPrep sends the information needed to create the result to contracted AI and cloud service providers. This may include your planning choices, dietary preferences, nutrition targets, ingredient exclusions, budget, kitchen equipment, free-text instructions, and the meal or recipe being generated. A pseudonymous app identifier and limited technical information may also be used for subscription checks, security, fraud prevention, and usage limits.

We use this information only to provide the requested AI feature, operate the service, prevent misuse, and resolve technical problems. The legal bases are Art. 6(1)(b) GDPR for the requested service, Art. 6(1)(f) GDPR for security and reliable operation, and, where applicable, the AI-personalization consent requested by those versions. SirPrep does not use AI to make legal or similarly significant decisions about you.

Please do not include names, addresses, contact details, or other unnecessary personal information in free-text fields.

Subscriptions and purchases

App Store purchases are processed by Apple. SirPrep does not receive your full payment-card details. Subscription service providers may process a pseudonymous app identifier, purchase and receipt information, product identifiers, subscription status, and technical information needed to validate purchases and restore access.

This processing is necessary to provide paid features (Art. 6(1)(b) GDPR) and to prevent fraud and maintain reliable service (Art. 6(1)(f) GDPR).

Product analytics

SirPrep collects limited product-interaction data to understand whether onboarding, planning, subscriptions, and meal generation work reliably and to improve the app. This data includes a random installation identifier; random session, request, and event identifiers; app version and build; locale; event names; and a small set of allowlisted technical properties such as the viewed step, outcome, duration, or error category.

Product analytics does not include your name, profile measurements, health information, meal plans, recipes, grocery-list contents, photos, free-text entries, or purchase identity. It is not used for advertising, profiling, or cross-app tracking. The legal basis is our legitimate interest in measuring and improving the reliability and usability of SirPrep (Art. 6(1)(f) GDPR). Analytics records are stored by our contracted cloud infrastructure provider and automatically deleted no later than 90 days after receipt.

Support

If you contact us, we process the contact details and message you provide to answer your request, provide support, comply with legal obligations, and protect legal claims. We retain support messages only as long as reasonably needed for those purposes.

4. Fitness and Dietary Preferences

Body measurements, nutrition targets and some dietary choices can be sensitive. In version 1.4.2, these inputs are used for personalization on your device, not sent to a third-party AI service. The former AI-personalization consent checkbox has therefore been removed from the new planning flow. This does not enable any new sharing or replace Apple's separate permission controls.

You can edit your preferences, omit optional information, disconnect Apple Health through your device settings, or reset locally stored app data. If consent from an earlier version is still recorded, Settings lets you clear that historical record. Earlier AI-enabled versions may still request explicit consent before AI personalization; withdrawing it stops subsequent AI use in those versions and does not undo prior processing. Where that consent applies, the legal bases are Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR.

SirPrep is not a medical device and does not provide medical or professional dietary advice.

5. Service Providers and Sharing

We share personal data only when needed to operate SirPrep, when you ask us to, or when required by law. The categories of recipients are:

• app-store and payment providers;
• subscription-management providers, including RevenueCat;
• AI processing providers only for requests from earlier AI-enabled versions;
• cloud hosting, security, and infrastructure providers, including Supabase;
• professional advisers and public authorities where legally required.

These providers may process data only for the contracted service and subject to appropriate confidentiality, security, and data-protection obligations. We do not permit them to sell your data or use it for advertising on our behalf.

6. International Transfers

Some providers may process data outside the EU or EEA, including in the United States. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework, Standard Contractual Clauses, or other safeguards permitted by Chapter V GDPR. Contact us if you would like more information about applicable safeguards.

7. Retention and Security

SirPrep keeps personal data only as long as needed for the purposes above, legal obligations, security, or the establishment and defence of legal claims. Product-analytics records are automatically deleted no later than 90 days after receipt. Other operational records and technical logs are kept for limited periods. Purchase records may be retained where required for subscription, accounting, fraud-prevention, or legal purposes.

We use measures designed to protect personal data, including encrypted network connections, access controls, pseudonymous identifiers, and limiting providers to what is needed. No electronic system can be guaranteed completely secure.

8. Your Choices and Rights

Depending on the law that applies, you may have rights to access, correct, delete, restrict, or receive your personal data; object to certain processing; withdraw consent; and complain to a supervisory authority.

To exercise your rights, email info.foodb@gmail.com. Because SirPrep does not require an account, we may need information that reasonably helps us identify the relevant record.

For a private controller established in Bavaria, the competent authority is generally:

Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de/

You may also contact another competent authority in your country of residence or work.

9. Children

SirPrep is not directed to children under 16. A person under 16 should use SirPrep only with permission from a parent or legal guardian. Contact us if you believe a child provided personal data without appropriate permission.

10. Changes

We may update this Privacy Policy when SirPrep, our providers, or legal requirements change. The latest version is identified by the date above.