Privacy Policy

Last updated: 20 May 2026

1. Who We Are

Plan X Prep Ltd (Company No. 16710082), registered in England & Wales, is the data controller for personal data processed through Plan X Prep ("we", "us", "our").

Data Protection contact: privacy@planxprep.com

General support: support@planxprep.com

2. What Data We Collect

Account data

Name, email address, and authentication credentials.

Health & body data

Height, weight, age, gender, activity level, dietary preferences, allergies, and macro targets. This data is used to generate personalised meal plans and calculate your daily calorie and macro targets.

Household data

Partner/spouse details (dietary preferences, macro targets) and children's ages for age-adjusted portion scaling. This data is provided by you and stored in your account.

Apple Health data (iOS)

With your explicit permission, we read steps, workouts, and active calories burned from Apple Health to personalise your meal plan and track your activity level. We write weight, calories, protein, carbohydrates, and fat data to Apple Health so you can view everything in one place.

Apple Health data is stored on your device by Apple's Health framework. We do not transmit Apple Health data to our servers. You can grant or revoke health permissions at any time via iOS Settings > Health > Data Access & Devices > Plan X Prep.

Google Health Connect data (Android)

With your explicit permission, we read steps, exercise sessions, and active calories burned from Health Connect. We write weight and nutrition data to Health Connect.

Health Connect data is stored on your device by Google's Health Connect framework. We do not transmit Health Connect data to our servers. You can manage permissions via Android Settings > Health Connect > App permissions.

Progress photos

With your permission, you may take or select progress photos using your device camera or photo library. Photos are stored in your Plan X Prep account (hosted by Supabase). You can delete progress photos at any time from within the app. Photos are not shared with third parties.

Usage data

Meal plan interactions, recipe favourites, shopping list activity, screen views, and feature usage. This data is anonymised and used to improve the service.

Payment data

Subscription payments are processed by RevenueCat (for in-app purchases via Apple App Store and Google Play) and Stripe (for web payments). We do not store your card details. Payment processors receive only the data necessary to process your transaction.

3. How We Use Your Data

• Generate personalised meal plans matched to your calorie and macro targets
• Calculate daily nutrition targets using your body data and activity level
• Build shopping lists with real supermarket prices
• Scale portions for your household (partner, children)
• Process payments and manage subscriptions
• Monitor and fix errors to keep the service running (via Sentry)
• Understand how features are used so we can improve them (via PostHog)
• Send essential service communications

4. AI Chat Assistant (Preppy)

The in-app AI assistant ("Preppy") is powered by Anthropic Claude. When you send a message to Preppy, we send the following to Anthropic to generate a response:

• Your message
• Your macro targets (calories, protein, carbs, fat)
• Household context (partner dietary preferences, if applicable)
• Favourite and blocked recipes
• Weight progress summary
• Cooking style preference

We do not send your email address, name, exact age, or precise weight history. Anthropic processes this data under its commercial terms and does not use it to train models.

Meal plans themselves are generated by our algorithmic optimiser from a pre-curated recipe database. No personal data is sent to AI providers when generating your weekly plan.

5. Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance: Providing the meal planning service you subscribed to
• Legitimate interest: Improving the service, fixing errors, preventing fraud
• Explicit consent: Health data (Apple Health / Health Connect), progress photos, optional marketing communications

6. Data Processors & Third Parties

We share data only with the following service providers, each acting as a data processor under appropriate agreements:

Apple (iOS) and Google (Android) process Health data on-device under their own privacy policies. We do not transmit health data to our servers.

We do not sell your data to third parties.

7. Error Tracking & Analytics

Sentry (error tracking)

We use Sentry to monitor crashes and errors. Sentry receives anonymised error data including your Supabase user ID for debugging correlation. Sentry does not receive your email, name, password, or health data. Default personally identifiable information (PII) sending is disabled.

PostHog (product analytics)

We use PostHog to understand how features are used and improve the app. PostHog receives your Supabase user ID, app version, and anonymised interaction events (screen views, meal plan generation, recipe swaps). PostHog does not receive your email, name, or health data. Data is stored in PostHog's EU data centre for GDPR compliance.

8. International Data Transfers

Some of our data processors are based in the United States. Where data is transferred outside the UK/EEA, it is protected by appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner's Office.

9. Data Retention

• Account data: Retained for as long as your account is active
• Health data: Stored on your device by Apple/Google — not on our servers
• Progress photos: Retained until you delete them or close your account
• Payment records: Retained for 7 years as required by UK tax law
• Error logs (Sentry): Retained for 90 days
• Analytics (PostHog): Retained for 12 months

Upon account deletion, personal data is removed within 30 days. Anonymised usage data may be retained for service improvement.

10. Cookies

We use essential cookies only — for authentication sessions and referral tracking. No third-party advertising or tracking cookies are used.

11. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (for health data, photos, and marketing)

To exercise these rights, email privacy@planxprep.com. We will respond within 30 days.

12. Account Deletion

You can permanently delete your Plan X Prep account and all associated data at any time. There are two ways to do this.

Option 1 — In-app (recommended)

1. Open the Plan X Prep app on your device
2. Tap the Settings tab
3. Scroll to the Account section
4. Tap Delete Account
5. Confirm the deletion when prompted

Option 2 — Email request

If you cannot access the app, send an email from the address registered to your account to privacy@planxprep.com with the subject line "Account deletion request". We will action your request within 7 days.

What is deleted

The following is permanently deleted from our servers within 30 days of your request:

• Account information (name, email, password, user ID)
• Health and body data (weight, macros, dietary preferences, allergies)
• Household and partner information
• Meal plans, shopping lists, and inventory data
• Recipe favourites, dislikes, and notes
• Progress photos
• App usage history

What may be retained

• Payment records — retained for 7 years as required by UK tax law (HMRC)
• Anonymised usage data — interaction events stripped of all identifiers, retained for service improvement
• Backup snapshots — overwritten on a rolling 90-day schedule

Apple Health and Google Health Connect

Health data stored on your device by Apple Health (iOS) or Google Health Connect (Android) is managed by those platforms, not by Plan X Prep. To remove that data, revoke our permissions and use Apple or Google's deletion tools (iOS Settings > Health > Data Access & Devices, or Android Settings > Health Connect).

13. Children

Plan X Prep is designed for adults (18+). Children's data (age only) is collected as part of a household profile managed by an adult user, solely for the purpose of calculating age-appropriate portion sizes.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email and/or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

15. Contact & Complaints

If you have concerns about how we handle your data, contact us at privacy@planxprep.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint