BitePrep Privacy Policy

Last updated: May 20, 2026

Company Information

BitePrep is operated by TechBasi LLC, based in Michigan, United States.

You can reach us at info@techbasi.com.

Summary

Information We Collect

1. Account Information

When you create an account, we collect:

• Email address — required for your account and for transactional communications.
• Display name — optional, used for personalization and shown to people you share planners with.
• Authentication identifier (UID) — the unique account ID issued by Firebase Authentication.

You can sign in using any of the following providers. Each provider returns a UID and, depending on what you authorize, your email and name:

• Sign in with Apple (via Apple)
• Google Sign-In (via Google)
• Email and password (via Firebase Authentication; passwords are stored encrypted by Firebase and are never accessible to us)

2. Content You Create in the App

We store the content you create in the app so it stays in sync across your devices and (if you choose) is visible to people you share with:

• Meals — names, ingredients, notes, and cuisine type.
• Weekly meal plans — meal assignments per day, per meal time.
• Rotation and queue settings — patterns you configure (Flexible, Favorite, Leftovers, Meal Prep, Blank).
• Meal prep notes — notes you write for a given week.
• Dietary preferences — cooking days, meal times, dietary restrictions, and disliked ingredients you configure during onboarding or later in settings.

3. Sharing Data

BitePrep lets you share a meal planner with another person ("shared meal planners"). When you use this feature:

• We store the email address of the person you invite, along with invitation metadata (when the invite was created, when it expires, when it was accepted).
• When an invitee accepts, we record them as a member of the shared planner with a role (e.g., editor).
• Shared planner content is visible to all members of that planner.

4. Subscription and Purchase Data

BitePrep has a free tier and a paid Pro tier. Subscription state is managed by RevenueCat on our behalf:

• RevenueCat receives an anonymous app user identifier that lets it associate purchases with your account.
• RevenueCat receives purchase event data from Apple (e.g., started, completed, cancelled, refunded).
• Apple processes the payment itself. We do not see, store, or have access to your credit card, debit card, or other payment details.

5. Diagnostic and Analytics Data

To keep the app working and to understand how features are used, we collect:

• Crash reports via Firebase Crashlytics — includes device model, OS version, app version, stack traces, and a Firebase-assigned identifier.
• Analytics events via Firebase Analytics — examples include app_opened, onboarding_completed, meal_created/updated/deleted, weekPlanned, mealAssigned, paywallShown, purchaseStarted/completed/cancelled/failed, and accountDeleted. These events do not contain the contents of your meals or plans.
• A device and app identifier issued by Firebase, used to associate analytics and crashes with your account once you sign in.

6. Legal Acceptance

When you accept these Terms and this Privacy Policy, we record the timestamp and the version number of the documents you accepted on your user profile (termsAcceptedAt, termsVersion, privacyVersion). This is so we can ask you to re-accept if the documents change.

What We Do Not Collect

We do not collect:

• Photos, camera data, or images of any kind. The app does not request camera or photo library permissions.
• Location data.
• Microphone or audio data.
• HealthKit data.
• Push notification tokens. The app does not currently send push notifications.
• Contacts.
• Search history outside the app.

How We Use Your Data

We use the data described above to:

• Create and maintain your account.
• Sync your meals, weekly plans, and preferences across your devices.
• Let you share planners with people you invite and let invitees join.
• Process and manage your subscription.
• Detect, diagnose, and fix crashes and bugs.
• Understand which features are used (in aggregate) to improve the app.
• Respond to support requests.
• Comply with legal obligations.

Legal Basis (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal bases are:

• Contract performance — running your account, syncing your data, and providing the subscription you purchased.
• Legitimate interests — diagnostic data and analytics needed to keep the app working and improve it, minimized to what is necessary.
• Consent — where required by law (e.g., certain analytics in some jurisdictions). You can withdraw consent at any time.
• Legal obligation — where we are required by law to retain or disclose data.

Third-Party Services

We share the data described above with the following service providers acting on our behalf:

Each provider processes data under its own privacy policy. We have data processing agreements with these providers where required by law.

We do not sell your data. We do not share your data with advertisers (the app shows no ads).

Sharing Between Users

Sharing in BitePrep is user-initiated:

• When you invite someone, they will see your name, the planner content, and the email you used to invite them.
• When you accept someone's invite, they will see your name and email and you become a member of their planner.
• You can remove members from planners you own, and you can leave planners shared with you.

International Data Transfers

BitePrep's data is stored on infrastructure operated by Google (Firebase) in the United States. If you access the app from outside the United States — including the EEA and United Kingdom — your data will be transferred to and processed in the United States.

For EEA and UK users, transfers rely on:

• Standard Contractual Clauses with our processors.
• Encryption in transit and at rest.
• The safeguards built into Google Cloud and our processors' contractual data protection terms.

Data Security

All data transmitted between the app and our servers is encrypted using industry-standard TLS. Data at rest is encrypted by our cloud providers. Passwords are hashed by Firebase Authentication and are not accessible to us.

No system is perfectly secure. If we ever become aware of a breach that affects your data, we will notify you as required by applicable law.

Your Privacy Rights

GDPR (EEA / UK)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

CCPA / CPRA (California)

You have the right to:

• Know what personal information we collect and how we use it.
• Request deletion of your personal information.
• Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising.
• Non-discrimination for exercising your rights.

To exercise any of these rights, follow the account deletion process below or email us at info@techbasi.com with the subject line "Data Protection Request — BitePrep."

Data Retention

We retain your personal data only for as long as your account exists, or for as long as needed to provide the service or comply with our legal obligations. When you delete your account, we delete your data as described above.

Aggregated, anonymized analytics that cannot be linked back to you may be retained longer.

Children's Privacy

BitePrep is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact info@techbasi.com and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we make a material change, we will:

• Update the "Last updated" date at the top.
• Increment the version number recorded with the policy.
• Prompt you to review and accept the updated policy the next time you open the app, where appropriate.

We record the version of the policy you have accepted on your user profile so we know when to ask you again.