Consumer Health Data Privacy Policy

Effective: 26 October 2026

Fox Labs Limited operates Prep and Chef. Contact support@prepandchef.com or write to 62 Hector Street, Seatoun, Wellington 6022, New Zealand. This policy supplements our Privacy Policy and describes information that may reveal health needs, including information covered by Washington's My Health My Data Act and Nevada's consumer health data law.

Information, sources and purposes

Dietary preferences, allergies, health-related notes, recipes, meal plans and shopping choices can reveal health needs when associated with a person. Nutrition estimates or other information inferred from that content can also be covered, depending on their context. A recipe's nutrient content is not by itself a diagnosis about its user.

We receive this information from details you enter or upload, sources you ask us to import, recipes you choose to receive through a share link, and processing of that content. We use it to save and sync your selections, process an import, provide requested nutrition insights or sharing, and answer a support request. We do not use it for advertising, sell it or use it to train AI models.

Recipients and choices

Google/Firebase stores and processes account content. Relevant recipe text or images may be processed by Google Gemini or Anthropic to provide a requested feature; Supadata may process a public-source link for a transcript. Fastmail hosts our monitored support mailbox and processes the correspondence and attachments you send us. Email may also pass through Postmark or Cloudflare where they provide delivery or routing. These providers receive only the categories needed for their role. Other users receive content only through sharing you choose. We do not share consumer health data with affiliates.

We limit processing to the requested feature or another permitted basis. Where consent is required, we ask before collection and separately before sharing. General acceptance of our Terms is not that consent. You may omit optional dietary details, stop using an optional feature, withdraw consent, or request deletion through our privacy contact. This can prevent the particular feature from working but does not remove access to unrelated features.

We do not permit third parties to collect your consumer health data through Prep and Chef to track you over time across other websites or services. You can review and change saved content through the available app controls or ask us for a correction.

Requests, deletion and appeals

Email support@prepandchef.com to ask whether we hold covered health data, access it, withdraw consent or request deletion. You may also ask for the applicable recipient information and contact details. We verify requests proportionately and do not require a sign-in code or password.

We respond without undue delay. Washington's ordinary response deadline is 45 days from receipt; Nevada's is 45 days from authentication. Nevada deletion requests have a separate 30-day deadline after authentication. We apply the relevant deadline and explain any permitted extension within the initial response period. Background account deletion does not extend these deadlines. We action required deletion with relevant recipients and providers, including the applicable treatment of backups. We retain only information a lawful exception permits.

To appeal a refusal, email the same address with your request reference and why you disagree. We provide a written decision within 45 days of receiving the appeal, with reasons. If denied, you can complain to the Washington Attorney General or Nevada Attorney General, as applicable. We will not discriminate against you for exercising these rights.

Changes

We will notify you of material changes in the app or by email, update this policy and obtain any required consent before collecting new categories or using covered information for a new purpose. Our general Privacy Policy describes security, international processing and other retention rules.