Privacy Notice

Effective September 19, 2026

This notice explains how information is handled when you use Prep. Food preferences, allergies, and dietary targets may reveal sensitive information, so share only what you are comfortable providing.

1. Who is responsible

Tova Dating Inc., doing business as Tova Platforms, registered in Delaware, United States, operates Prep and is responsible for the personal information described here. Contact support@tovaplatforms.com about privacy or your data.

2. Information we collect

• Account information: your email, account identifier, password hash, session information, and optional profile name.
• Meal-planning information: country, optional city or region, household size, grocery store, budget, equipment, preferred cuisines, foods you avoid, allergies, dietary preferences, and optional nutrition targets.
• Your activity and content: pantry entries, grocery items, saved and generated recipes, meal plans, favorites, recipe feedback, assistant messages and requests, and generation status.
• Technical and support information: connection details such as IP addresses, request timestamps, errors, security and operational logs, and information you send when contacting support.
• Subscription information: when billing is enabled, subscription identifiers, product, entitlement, status, and relevant transaction information supplied by RevenueCat or the payment provider. Payment providers collect payment details through their checkout; Prep does not need your full card number.

3. Why we use information

We use information to create and secure accounts, personalize meals, generate recipes and images, answer assistant requests, store your plans, synchronize access, support you, prevent abuse, and meet legal obligations. Where applicable, legal bases include performing our agreement with you, legitimate interests in providing a secure and reliable service, legal obligations, and consent where required.

Allergy and nutrition information is optional and is used for the features you request, not to diagnose medical conditions. You can remove or change it in Profile. Where applicable law requires explicit consent to process sensitive information, that consent is required separately; this notice alone does not replace it.

4. AI processing

Prep uses OpenAI to process recipe-generation, assistant, and dish-image requests. Relevant preferences, food restrictions, pantry or recipe details, and conversation context may be sent to OpenAI. The recipe-generation flow omits profile name and city or region, but text you type can still contain personal information. Do not include secrets or unnecessary identifying or medical details in prompts. Provider processing and retention are also subject to its applicable terms and privacy practices.

AI output can be wrong. Review it before relying on it, especially for allergies and food safety. We do not use recipe recommendations to make legal or similarly significant decisions about you.

5. Service providers and disclosures

We use service providers to operate Prep, including Heroku for application hosting, DigitalOcean for database hosting, Cloudflare for domain delivery and security, and OpenAI for AI features. RevenueCat manages subscription information when configured. Paddle, or Apple or Google for store purchases, processes payments when those purchase methods are enabled. Providers receive information needed for their role and may also process it under their own policies.

We may disclose information to comply with law, protect users or the service, or in a business transfer subject to appropriate safeguards. We do not sell your personal information or use it for cross-context behavioral advertising.

6. Device storage and notifications

Prep uses browser or device storage for sign-in, preferences, offline copies of saved content, and cooking timers. Its web service worker caches application files so the app can open offline; account data may also be retained in a device-side offline copy. Signing out clears the app's account cache, but shared devices still require care. You can clear website data in your browser. Disabling storage can prevent sign-in or offline features from working.

Cooking notifications require device permission where supported. You can change that permission in your device settings. Service providers may use necessary cookies or similar technologies for security and payment processing; additional consent will be requested where required.

7. Retention and deletion

We retain your account and saved content while needed to provide the service. You can request deletion through Profile or email. Account deletion removes saved meal-planning data and sessions from the active service. Limited pseudonymized billing, audit, security, or legal records may be retained for reconciliation, fraud prevention, disputes, or legal obligations. Backup copies may persist until their normal rotation; deletion is not a promise of immediate erasure from all backups or independent providers.

Background generation records are short-lived operational records, with terminal jobs scheduled for cleanup after approximately 24 hours. This does not delete the recipes or plans saved to your account or determine an AI provider's retention. Contact us for questions about specific records.

8. Your choices and rights

You can edit profile preferences, remove saved content through available controls, sign out, and delete your account. Depending on your location, you may have rights to access, correct, obtain a copy of, delete, restrict, or object to processing of your information, and withdraw consent where processing relies on consent. Email us to exercise a right; we may need to verify your identity. We will respond within applicable legal deadlines. You may also complain to your local data protection authority. We will not unlawfully discriminate against you for exercising privacy rights.

9. International processing and security

Prep is operated from the United States and uses providers that may process information in other countries. Protections can differ from those in your country. Where required, international transfers must use legally recognized safeguards. We use measures including encrypted transport, hashed passwords, and account-based access controls, but no service can guarantee absolute security.

10. Children and updates

Prep accounts are intended for adults aged 18 or older. Do not create an account or submit a child's identifying information if you are not authorized to do so. Contact us if you believe a child has provided personal information. We may revise this notice and will provide notice of material changes where required.

11. Contact

Tova Dating Inc. (doing business as Tova Platforms)
Delaware, United States
support@tovaplatforms.com