Introduction
NANO-SOFT TECHNOLOGY ("we," "our," or "us"), a company registered in Romania, operates the Preplo mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By using Preplo, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
- Email Address: Required for account creation and authentication
- Password: Securely hashed and stored for account access
- Authentication Method: Whether you sign in via email/password or Apple Sign-In
- User Preferences: Your timezone setting and app configuration preferences
- Newsletter Subscription: Your email address if you opt in to receive our newsletter or marketing communications via our website
Recipe & Usage Data
- Saved Recipes: Recipes you extract and save to your library, including any AI-generated recipe alterations (e.g., vegan or spicier variations)
- Cooking History: Records of recipes you've cooked, including timestamps, frequency, ratings, personal notes, and whether you would make the recipe again
- Shopping Lists: Lists generated from your saved recipes, including individual item completion tracking
- Cooking Streaks: Weekly cooking activity for gamification features, including streak freeze usage
- Extraction History: Records of recipe extraction requests, including source URLs, extraction status, and processing results
Location Data
- Precise Location: Used only when you access the "Find Nearby Stores" feature
- Location data is not stored permanently and is only used to query nearby grocery stores
- You can deny location permission and still use all other App features
Subscription & Payment Data
- Subscription Status: Whether you have an active premium subscription
- Purchase History: Records of subscription purchases for account management
- Payment processing is handled entirely by Apple (App Store) or Google (Play Store)
- We never receive or store your credit card information
Device & Analytics Data
- Device Information: Device type, device model, operating system version, and app version
- Usage Analytics: App usage events and interaction patterns linked to your account identifier to improve our service
- Analytics events include feature usage (extractions, cooking sessions, shopping lists), navigation flows, error tracking, and subscription interactions
Push Notification Data
- Device Push Token: A unique token used to deliver push notifications to your device
- Notification Preferences: Whether you have enabled or disabled push notifications
- Notification types include: cooking streak reminders, recipe suggestions, billing alerts, and extraction completion notices
How We Use Your Information
- ✓Account Management: To create and maintain your account, authenticate your identity, and provide customer support
- ✓Core Functionality: To extract recipes from videos, save them to your library, and generate shopping lists
- ✓Feature Enhancement: To track cooking streaks, provide personalized recommendations, and improve your experience
- ✓Subscription Management: To verify your subscription status and provide access to premium features
- ✓Service Improvement: To analyze usage patterns and improve the App's performance and features
- ✓Communication: To send important updates about your account, subscription, or the App (you can opt out of marketing communications)
- ✓Push Notifications: To send cooking streak reminders, recipe suggestions, extraction completion alerts, and important billing notifications (with your permission)
Third-Party Services
We work with trusted third-party services to provide and improve Preplo. These services have their own privacy policies governing how they handle your data:
RevenueCat
Manages subscription status and purchase verification. RevenueCat receives anonymous user identifiers and purchase receipts. View RevenueCat Privacy Policy
Clerk
Provides authentication and user account management, including email/password sign-in and Apple Sign-In. Clerk processes your email address, hashed password, and authentication tokens. User account events (creation, updates, deletion) are synchronized via secure webhooks. View Clerk Privacy Policy
OpenAI API
Processes video transcripts to extract recipe information. We send only video transcripts/descriptions—no personal user data is shared with OpenAI. View OpenAI Privacy Policy
Google Places API
Provides nearby grocery store information when you use the "Find Nearby Stores" feature. Your location is sent to Google only when you explicitly request nearby stores. View Google Privacy Policy
PostHog
Product analytics to understand app usage and improve our service. PostHog receives your anonymous user identifier and tracks in-app events such as feature usage, navigation patterns, and error occurrences. Analytics data is processed in the EU (eu.i.posthog.com). View PostHog Privacy Policy
Expo Push Notifications
Delivers push notifications to your device. When you enable notifications, your device push token is stored on our servers and sent to Expo's push notification service to deliver messages such as cooking streak reminders, recipe suggestions, and extraction updates. You can disable notifications at any time in your device settings. View Expo Privacy Policy
Amazon Web Services (AWS)
Provides cloud storage for recipe and video thumbnail images. Images associated with your saved recipes are processed (converted to optimized formats) and stored on AWS S3. No personal information beyond the images themselves is shared with AWS. View AWS Privacy Policy
EmailOctopus
Manages our email newsletter and marketing communications. If you subscribe to our newsletter, your email address is shared with EmailOctopus for email delivery. You can unsubscribe at any time via the link in each email. View EmailOctopus Privacy Policy
Data Retention
- Account Data: Retained while your account is active and for up to 30 days after deletion request
- Recipes & Shopping Lists: Retained while your account is active; deleted upon account deletion
- Cooking History & Streaks: Retained while your account is active; deleted upon account deletion
- Location Data: Not stored permanently; used only for real-time store queries
- Push Notification Tokens: Retained while your account is active and notifications are enabled; deleted upon account deletion or when you disable notifications
- Analytics Data: Event data linked to your account identifier retained in accordance with our analytics provider's default retention policy; aggregated trend data retained indefinitely for service improvement
Your Privacy Rights
Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Portability
Receive your data in a structured, machine-readable format
Right to Restrict
Request limitation of processing of your personal data
Right to Object
Object to processing based on legitimate interests or marketing
How to Exercise Your Rights: You can delete your account directly within the App (Settings → Delete Account), or contact us at hello@preplo.app for any other requests. We will respond within 30 days.
Data Security
We implement industry-standard security measures to protect your personal information:
- All data transmitted between your device and our servers is encrypted using TLS/SSL
- Passwords are hashed using secure algorithms and never stored in plain text
- Authentication tokens are stored securely on your device using platform-specific secure storage
- Access to user data is restricted to authorized personnel only
- Regular security audits and updates to our infrastructure
Children's Privacy
Preplo is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@preplo.app and we will promptly delete such information.
International Data Transfers
Your information may be transferred to and processed in countries other than Romania, including the United States (for cloud infrastructure and third-party services). We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide notice through the App or via email. Your continued use of Preplo after such modifications constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Registered in Romania. This Privacy Policy is governed by the laws of Romania and the European Union.