Privacy Policy

Last updated: 24 June 2025

Introduction

Preppery is a meal planning and recipe management application. Preppery is owned and operated by Vandra Labs Pty Ltd (ACN 699 300 804, ABN 17 699 300 804) (Vandra Labs Pty Ltd, Company, we, us, or our).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Preppery — including the Preppery website at preppery.app, mobile application, and related services (collectively, the Service).

By registering for or using the Service, or by providing personal information to us, you agree to this Privacy Policy. If you do not agree, please do not use Preppery.

Definitions

In this Privacy Policy:

• "Preppery" means the Preppery brand, mobile application, and website.
• "Service" means the Preppery website at preppery.app, mobile application, and related services.
• "Vandra Labs Pty Ltd", "Company", "we", "us", or "our" means Vandra Labs Pty Ltd (ACN 699 300 804, ABN 17 699 300 804), the legal entity that owns and operates Preppery.
• "You" means any individual who accesses or uses the Service.
• "Personal information" means information about an identifiable individual, as defined under applicable privacy laws.

Our commitment to privacy

We are an Australian company and comply with applicable privacy laws, including the Australian Privacy Act 1988 (Privacy Act) and the Australian Privacy Principles, as well as privacy laws in other countries where Preppery is available.

When you agree to this Privacy Policy, you consent to the collection, use, storage, and disclosure of your personal information as described below.

The personal information we collect

We collect personal information to provide and improve the Service. The types of information we collect depend on how you use the Service and may include:

• Account information: your name, email address, and password (stored in hashed form). You may optionally provide a profile image.
• Authentication and session data: session tokens, IP address, and browser or device user agent information when you sign in.
• User content: recipes you create or import (including names, descriptions, ingredients, instructions, images, source URLs, tags, and notes), meal schedules, and shopping lists.
• Device and usage information: information about how you use the Service, such as pages visited on our website, features used, and general usage patterns collected through analytics tools.
• Local device preferences: theme and display preferences stored on your device.
• Communications: information you provide when you contact us for support or feedback.

Onboarding questions shown during sign-up are used only during your session and are not stored on our servers.

We do not knowingly collect personal information from anyone under 18 years of age. If you are under 18, please do not use the Service or provide personal information to us.

You are not obliged to provide personal information to us, but if you do not provide certain information, you may not be able to use some or all of the Service.

How we collect information

We collect information:

• Directly from you when you create an account, add recipes, build schedules and shopping lists, or contact us.
• Automatically when you use the Service, including through cookies, analytics tools, and server logs.
• From third-party sources when you import recipes from external websites (we fetch publicly available recipe content from the URL you provide).

Analytics and tracking technologies

We use analytics tools to understand how the Service is used and to improve it. These may include:

• Vercel Analytics on our website, which collects aggregated usage data such as page views.
• PostHog (or similar product analytics services) on our website and mobile app, which may collect usage events, device information, and approximate location derived from IP address.

We may use cookies and similar technologies on our website. You can instruct your browser to refuse cookies, though some parts of the Service may not function correctly if you do so. For more information about cookies, visit www.allaboutcookies.org.

We do not alter our data collection practices when we receive a Do Not Track signal from your browser.

To opt out of Google Analytics (if used by a third-party service provider), visit https://tools.google.com/dlpage/gaoptout.

Artificial intelligence processing

To help organise shopping list items, we may send ingredient names to OpenAI for automated category classification. Only the ingredient text needed for classification is sent; we do not send your full account profile or unrelated personal information for this purpose. OpenAI processes data in accordance with its own privacy policy.

How we use personal information

We may use your personal information to:

• provide, operate, and maintain the Service;
• create and manage your account and authenticate you;
• store, display, and process your recipes, schedules, and shopping lists;
• respond to your enquiries and provide customer support;
• send service-related communications, such as security or account updates;
• monitor, detect, and prevent fraud, abuse, or security incidents;
• analyse usage trends and improve the Service, including through analytics;
• comply with legal obligations and enforce our terms; and
• carry out other purposes you authorise or that are permitted by law.

We will not sell your personal information to advertisers or other third parties.

We may de-identify or aggregate information so it can no longer reasonably identify you, and use or disclose that information for business purposes such as analytics and product improvement.

How we disclose personal information

We may disclose personal information:

• to service providers who help us operate the Service (such as cloud hosting, database providers, analytics providers, and AI service providers), subject to confidentiality obligations;
• to comply with law, regulation, legal process, or government request;
• to protect the rights, property, or safety of us, our users, or others;
• in connection with a merger, acquisition, or sale of assets; and
• with your consent or as otherwise permitted by law.

Third-party service providers

Our service providers may process personal information on our behalf. These may include cloud infrastructure and database hosting providers, Vercel (website hosting and analytics), PostHog (product analytics), and OpenAI (ingredient classification). Their use of your information is governed by their respective privacy policies. This list may change as our Service evolves; contact us if you wish to confirm current providers.

Overseas disclosure

We conduct business in Australia and may use service providers located outside Australia, including in the United States and other countries where our infrastructure or third-party providers operate.

Where the Privacy Act applies, by using the Service and providing personal information, you consent to the disclosure of your information to overseas recipients. We take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with applicable privacy laws.

Security and storage

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Authentication credentials on mobile devices may be stored using secure device storage.

No method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted over the internet.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Access, correction, and deletion

You may request access to or correction of personal information we hold about you by emailing support@preppery.app. We will respond within a reasonable period, usually within 30 days. We may need to verify your identity before processing your request.

Account deletion

You may delete your Preppery Account at any time, for any reason, at no charge.

In the app: open Settings and follow the account deletion instructions. Deletion takes effect when you confirm the request and may require you to sign in again to verify your identity.

By email: if you are unable to delete your Account in the app, contact us at support@preppery.app from the email address associated with your Account. We may ask you to verify your identity before processing the request.

When your Account is deleted, we will delete or de-identify personal information associated with your Account, including your profile, recipes, meal schedules, and shopping lists, except where we are required or permitted by law to retain certain information. For example, we may retain limited records to comply with legal obligations, resolve disputes, enforce our agreements, or maintain security and fraud-prevention logs.

Account deletion is permanent. Once deleted, your Account and associated User Content cannot be recovered. If you have shared content with other users, we cannot delete information stored in another user's Account.

Removing the Preppery app from your device does not delete your Account or the data stored on our servers.

European and UK residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to certain processing.

We process personal data on the following legal bases, as applicable:

• Consent — where you have given consent for specific processing;
• Contract — where processing is necessary to provide the Service you requested;
• Legal obligation — where we must comply with applicable law; and
• Legitimate interests — where processing is necessary for our legitimate interests, such as improving and securing the Service, provided those interests are not overridden by your rights.

The data controller for Preppery is Vandra Labs Pty Ltd. To exercise your GDPR rights, contact support@preppery.app. You also have the right to lodge a complaint with your local supervisory authority.

California residents (CCPA)

If you are a California resident, you have the right to request access to categories and specific pieces of personal information we collect, request deletion of personal information (subject to legal exceptions), and opt out of the sale of personal information.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA). To make a request, contact support@preppery.app. We may need to verify your identity before completing your request.

Virginia residents

If you are a Virginia resident, you may have the right to confirm whether we process your personal data, access your personal data, correct inaccuracies, delete personal data you provided, obtain a portable copy of your data, and opt out of targeted advertising.

We do not sell personal data as defined under Virginia law. To exercise your rights, contact support@preppery.app.

Links to other websites

The Service may contain links to third-party websites, including recipe sources you import from. We are not responsible for the privacy practices of those websites. Please review their privacy policies before using them.

Complaints

If you have a complaint about how we handle your personal information, please contact us at support@preppery.app. We will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• GPO Box 5218, Sydney NSW 2001, Australia
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Online: www.oaic.gov.au

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. If changes are significant, we will aim to notify you by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact us

Preppery is owned and operated by Vandra Labs Pty Ltd (ACN 699 300 804, ABN 17 699 300 804).
Website: https://preppery.app
Email: support@preppery.app