Privacy

Last updated November 1, 2026

You can use PreppyMeal without an account. If you create one, we ask for your email address and a password, and use the email only to sign you in. We don’t send you messages, and we never ask for your name or payment details.

What we save

To build and keep your plan, our server stores:

• your ZIP code and the stores you choose
• household size, cooking nights and grocery budget
• eating style, diet filters, allergies, foods you avoid and the appliances you have
• your pantry amounts, meal plans and grocery checklists
• if you create an account, your email address and a one-way hash of your password, when the account was created, and a one-way hash of each device’s sign-in with when it was last used. We never store the password itself.

Without an account, these records are linked only to a random ID in your browser cookie, not to your identity. With an account, they are linked to your email address. Allergy and diet choices can be sensitive, so on a shared device, sign out or erase your household when you finish.

Cookies and browser storage

We use one essential cookie to keep your household separate from everyone else’s and, if you have an account, to keep you signed in. It is HTTP-only and expires after 30 days without use. Your browser also keeps unfinished choices in local storage, which signing out clears. We use no advertising or analytics cookies.

Your location

Location is optional and used only when you press “Use my location”. It is sent to our server once to find the nearest ZIP code, then discarded. We never send it to an outside mapping service.

Who else sees your data

We don’t sell your data or share it for advertising, and the app has no analytics or advertising tools. Our hosting and network providers, including Cloudflare, process requests on our behalf. Authorized site administrators can manage accounts and help with support requests. Links to store directories open those sites, which have their own privacy practices.

Your IP address is held briefly in server memory to limit abusive traffic, including for about 15 minutes after a wrong password. We don’t keep web server access logs. If a request fails, an error log can record its IP address and the page requested. Those logs are used only to fix problems and are overwritten automatically.

How long we keep it

Without an account, a household is removed after 30 days without use. With an account, your records stay until you delete the account, and a sign-in on a device ends after 30 days without use. Removed or erased data can remain in access-restricted server backups for up to a week, until those backups rotate out.

Your choices

Open Privacy & saved data in the app footer and choose Erase my household, or Delete my account if you’re signed in, to delete your saved records at any time. Without an account, clearing your cookies also means we can no longer connect you to that household, and we can’t recover it for you. Automated password recovery is not available yet. If you can’t sign in, contact [email protected] from your account’s email address for help recovering or deleting the account. We may need to verify the request before changing it.

Children

PreppyMeal is meant for adults planning household meals.

Changes

If this policy changes, we’ll update this page and the date at the top.

Contact

PreppyMeal is run by PreppyMeal. Questions or requests: [email protected].