Privacy policy
PrepStack is a tracker for meal-prep containers. It's available as a website at prepstackapp.netlify.app and as an Android app. This policy explains what data PrepStack stores, why, and what you can do about it. Questions: twoflowerapps@gmail.com.
The short version
- PrepStack stores your account details and the containers you add, so they sync between your devices and the people you share a fridge with.
- It has no ads, no analytics and no tracking, and your data is never sold.
- You can delete your account and all its data at any time, from Settings.
What is stored
If you use PrepStack without signing in
On the website, your containers and settings are saved only in your browser's local storage, on your device. Nothing is sent to us.
If you sign in
- Account details. Your name, email address and, if you sign in with Google, your profile photo. If you sign up with an email and password, the password is handled by Firebase Authentication and is never visible to us.
- What you add. The containers in your fridge: food name, count, colour, notes, cook date, where and when each one was stored or thawed, and a short history of changes, including the name of the person who made each one.
- Your fridge. Its name, layout, food-safety settings, and whether you've finished the setup guide.
- Sharing. If you share a fridge or join one, the people in it are listed with their names, emails and photos. Invite links store the fridge's name, the owner's name and an expiry date.
The Android app uses the camera only to scan invite QR codes. The camera images are processed on your phone and are never saved or sent anywhere.
Why it's stored
Only to run PrepStack: signing you in, syncing your fridge between devices, and showing a shared fridge to the people you invited. It is not used for advertising or profiling.
Who can see it
- You, on any device where you sign in.
- People in a fridge you share. They see its containers, history and settings, and the name, email and photo of everyone in it.
- Service providers. Accounts and data are stored with Google Firebase (Firebase Authentication and Cloud Firestore), which Google operates on our behalf. The website is hosted by Netlify, and its fonts are loaded from Google Fonts. Like any web server, these services receive your IP address when you connect.
Nobody else sees your data, and it is never sold.
How long it's kept
Your data is kept until you delete it or delete your account. Deleting your account removes your fridge, all its containers and your invite links, removes you from fridges others share with you, and deletes your sign-in account. Your name may remain in the history of containers in other people's fridges until they delete those containers. Invite links expire after 7 days.
Your choices and rights
- Edit or delete any container at any time.
- Export your data from Settings on the website.
- Delete your account from Settings → Delete account, in the app or on the website. See how to delete your account.
- Depending on where you live (for example, under the GDPR in the EU and UK), you have the right to access, correct, delete or export your data, and to object to its processing. Email twoflowerapps@gmail.com and we'll reply within 30 days.
Security
Data is sent over encrypted connections (HTTPS). Access rules on the database only let you read your own fridge and fridges you've been invited to.
Children
PrepStack is not directed at children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, the new version will be posted here with a new date.