Prepsy

Privacy Policy

Effective and last updated: October 19, 2026

Prepsy (formerly Pantry) is a meal-planning and nutrition app for iPhone, operated by Koba Labs LLC, a Texas limited liability company ("we," "our," or "us"). This policy explains what information we collect through the Prepsy app and prepsy.app, how we use it, who we share it with, and the choices you have.

If you live in Washington, Nevada or Connecticut, our Consumer Health Data Privacy Policy also applies to you and explains your rights over health-related information.

---

1. Information We Collect

Account information. If you sign up with email: your name, email address and a password (stored in hashed form by our authentication provider). If you use Sign in with Apple: your name and the email Apple shares with us, which may be a private relay address. If you use Google: your name, email address and profile photo link.

Health and body information you enter. Your age (we ask for your birthday during setup but store only your age), sex, height, weight and the weight entries you log, target weight, activity level, fitness goal, and your calorie, protein, carbohydrate and fat targets.

Food preferences. Your diet style, dietary restrictions and allergies, foods you dislike, cuisine preferences, cooking skill, meals per day and how long you like to spend cooking.

Food and kitchen activity. Your pantry items, grocery list, the meals you save, rate (including the reasons you give) and log in your food diary with their calories and macros, and recipes you create or import, including links you share into the app.

Photos. Photos you take or choose of your fridge, pantry shelves, grocery receipts or meals. We send them for processing to read what is in them (see section 3); we do not store them on our servers. A copy of your most recent scan is kept on your phone and removed when you delete your account.

What our scanners read and what you change. When you scan your pantry, we keep the list of foods the scan found and the changes you make to it, both when you review it and later in the Last scan sheet (for example, an item you rename, remove or type in). When you scan a receipt, we keep each item line the reader found: the text as printed on the receipt, the food name we expanded it to, its category, the product code printed beside it, the name of the store as the receipt prints it, and the changes you make in the review. We never keep the photo, the receipt's total, or any payment card digits. We also remember the names you choose when you rename an item, so the next scan can use them. This is text only and is deleted when you delete your account.

Subscription information. Apple and our subscription provider, Superwall, tell us your subscription status, plan, price, and trial, purchase and renewal dates. We never see or store your payment card details.

Usage and device information. Events such as screens viewed and features used, crash and error reports, device model, operating system version, language, time zone and app version. Superwall also collects Apple's identifier for vendors (IDFV) and your purchase history for the subscription screens. If you allow notifications, we store your push notification token.

Communications. Whether you chose to receive marketing email and promotional notifications, and anything you send us.

Website. If you join the waitlist on prepsy.app, your email address and the time you signed up. See section 8.

We do not collect your precise location, contacts, microphone audio, Apple Health data or your device's advertising identifier, and we do not track you across other companies' apps or websites.

---

2. How We Use Your Information

• To provide Prepsy: calculating your calorie and macro targets, suggesting meals from what you have, reading your photos, estimating nutrition, and keeping your pantry, grocery list, saved meals and food diary.
• To run your account and subscription: sign-in, email verification, password resets, free trials, restoring purchases, customer support, and preventing abuse (including a bot check from Cloudflare at sign-in and sign-up).
• To communicate with you: service messages such as sign-up confirmation, trial-ending reminders, subscription notices, password resets and policy updates, by push notification or email. These are not marketing.
• Marketing, only if you opt in: if the box at sign-up is ticked, we send occasional cooking tips, product updates and offers by email and by push notification (for example, a discounted offer after a free trial ends). In the United States the box starts ticked and you can untick it before you sign up; everywhere else it starts unticked. Every marketing email has an unsubscribe link, and you can turn promotional notifications off at any time under Profile → Offer notifications. People who sign in with an Apple private relay address never receive marketing email.
• To make scanning more accurate: your own renames are remembered so your next scans use them. Item lines, receipt text and the changes people make to them are also used to measure and improve how well Prepsy reads photos and receipts. Where several different people have renamed the same printed receipt line at the same store to the same name (at least three people, and most of them agreeing), that name is added to a shared list so everyone's receipts read better. The shared list holds the printed line and the name, never an account ID, email or anything else about who made the change, and a name leaves the list if too few people still support it or their accounts are deleted.
• To understand and fix the app: product analytics and crash reports. We do not send your email address, weight, body measurements, calorie or macro numbers, or diet restrictions to our analytics provider.

We do not use your health information for advertising or marketing, and we do not sell it.

---

3. AI Processing

Prepsy's meal suggestions, photo reading and nutrition estimates are powered by AI models from OpenAI, Google (Gemini) and TypeSafe. We ask your permission before the first AI feature sends your information, and you can withdraw it at any time in the app under Profile → AI Data Processing. When you use these features, we send them:

• the photos you scan (fridge, pantry, receipts, meals)
• your pantry items and the foods you search or log
• your food preferences, diet style, dietary restrictions and allergies
• your calorie and protein targets and meal settings
• recipe text and links you import

TypeSafe receives text only, never photos: the names of foods you scan or keep in your pantry, recipe ingredients, and the diet restrictions and allergies a meal is checked against. It answers yes-or-no and pick-one questions about that text, such as whether a scanned item is food.

We do not send your name, email address, weight, height or age to these AI providers, and none of them use the data we send to train their models. How long each keeps request data is set by its own terms: OpenAI and Google may keep it for a limited time for abuse monitoring; TypeSafe keeps it only for as long as it needs to provide its service, under its data processing agreement.

To draw meal photos we send meal names, ingredients and steps, never information about you, to fal.ai. To look up nutrition we send food names and barcodes to FatSecret and Open Food Facts; for receipts, the barcode is the product number printed beside an item, sent on its own and never with your name, account or receipt. Product names that Open Food Facts returns are saved on our servers so a product is looked up only once; those saved names are product facts and are not tied to any person. Product data from Open Food Facts is available under the Open Database License.

AI output can be wrong. Nutrition figures are estimates and diet or allergen labels come from each recipe's listed ingredients; see our Terms of Use.

---

4. Who We Share Information With

We share information only with the service providers that run Prepsy for us, each for the purpose listed:

• Supabase – database, sign-in and file storage
• OpenAI, Google (Gemini) and TypeSafe – AI processing, with your permission (section 3)
• fal.ai – meal photo generation (no personal information)
• FatSecret and Open Food Facts – nutrition lookups (food names and barcodes)
• PostHog – product analytics and crash reports, keyed to a random account ID
• Superwall – subscription screens and purchase status
• Apple – sign-in, in-app purchases and push notifications; Google – sign-in if you choose it
• Expo – delivering push notifications (your push token and the message)
• Loops – email delivery (your email, name, subscription status and app activity signals such as when you last opened Prepsy; never health information)
• Cloudflare – website hosting, email routing and bot protection
• YouTube API Services – the Discover tab shows public recipe videos; no personal information is sent. See Google's Privacy Policy. When you share a TikTok or YouTube link into Prepsy, the link is sent to that service and to noembed.com to read the video's details.

We may also disclose information when required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case this policy would continue to apply to your information.

We do not sell your personal information, share it for cross-context behavioral advertising, or let these providers use it for their own advertising.

---

5. Data Retention and Deletion

• While your account is active, we keep your account and app data so Prepsy works.
• When you delete your account (Profile → Delete Account), we immediately delete your profile, pantry, grocery list, food diary, saved meals, ratings, weight entries, usage records and meal-generation logs, and remove your email from our email provider. This includes the scan results, receipt lines, edits and remembered renames described in section 1. Deleting your account does not cancel an Apple subscription; cancel it in Settings › [your name] › Subscriptions.
• Copies may remain in encrypted database backups for a limited period before they are overwritten.
• Analytics events are tied to a random account ID, not your name or email. You can ask us to delete them (section 7).
• Waitlist emails are kept until Prepsy launches and you unsubscribe or ask us to delete them.
• We do not keep your scan photos on our servers. Scan results, receipt lines, edits and remembered renames are kept while your account is active.
• An entry in the shared receipt list contains no account information, so it is not tied to your account; it stays only while enough other people still support it.

---

6. Security

Information is encrypted in transit, access to your data is restricted to your account by database security rules, and we never handle payment card details. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you and the authorities as the law requires.

---

7. Your Rights and Choices

Wherever you live, you can:

• See and correct your information in the app, or ask us for a copy of it
• Delete your account and data in the app (Profile → Delete Account), or by emailing us
• Withdraw AI permission under Profile → AI Data Processing
• Stop marketing email with the unsubscribe link in any marketing email
• Stop promotional notifications under Profile → Offer notifications
• Turn off notifications in your iPhone's Settings

To make a request, email [email protected] from the address on your account. We respond within 45 days. If we decline a request, you can appeal by replying with "Appeal" in the subject line, and if you are not satisfied with our answer you can contact your state attorney general. Washington, Nevada and Connecticut residents have additional rights described in our Consumer Health Data Privacy Policy.

Do Not Track. Our website and app do not track you across other sites or apps, so they do not change behavior in response to Do Not Track signals.

---

8. Website and Waitlist

When you join the waitlist on prepsy.app, we store your email address and sign-up time in our database and use it to tell you when Prepsy launches. Every email includes an unsubscribe link, or email [email protected] to have your address deleted. The website is hosted by Cloudflare, which processes your IP address and basic request information to deliver and protect the site, and it loads fonts from Google Fonts, which receives your IP address. The website uses no analytics, advertising trackers or cookies.

---

9. Age Requirement

Prepsy is for adults 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, contact us and we will delete it.

---

10. Users Outside the United States

Prepsy is operated from the United States, and our service providers process information in the United States and other countries. If you use Prepsy from outside the United States, your information will be transferred to and processed in the United States.

---

11. Changes to This Policy

We may update this policy. We will change the date at the top, and if the changes are material we will tell you in the app or by email before they take effect.

---