Last updated: 16 August 2026
Prepo is a personal fitness and nutrition app. This document explains exactly what happens to your information, without unnecessary legalese.
There is no user account and no sign-up. Everything you enter — weight, meals, workouts, measurements, cycle, injuries, coach conversations — is stored on your device, in a local database encrypted by iOS. We hold no copy of it and cannot view it.
One important exception: the AI features (coach, meal photo analysis, cooking mode, weekly summary) have to send data over the internet in order to work. They go through a relay server we operate. The section "When data leaves your device" sets out exactly what is sent, where, and what is retained there.
The app contains no analytics, advertising or ad-network tooling. There is no third-party SDK collecting information. We do not build a marketing profile of you, and we do not share or sell information to anyone.
With your explicit permission, granted per category one at a time, the app reads from Apple Health:
Sleep · Heart rate variability (HRV) · Resting heart rate · Steps · Active energy · Body weight · Workouts · Blood glucose
Raw health data stays on your device and is used to calculate your daily readiness score, energy balance and training recommendations. It is not sent to our server.
The app writes exactly one value to Apple Health: body weight, and only if you enabled the morning weigh-in and approved it.
You can revoke any permission at any time: iOS Settings → Health → Data Access → Prepo.
Health data is never used for advertising or marketing.
If you enable cycle tracking, the data is stored on your device only and is never sent to any external service — not to our server and not to the AI coach. This is the most sensitive information the app holds and it is treated accordingly.
The app requests each of these permissions only at the moment you use the feature that needs it — never at install or sign-up.
There are exactly three cases, all initiated by you:
These features send information to Anthropic (which operates the Claude model) in order to produce a response.
Through our relay server. The app contains no API key. Instead it calls a relay we operate on Cloudflare Workers, at fitfit-proxy.alexkogan826.workers.dev, which forwards the request to Anthropic using our key. The reason is technical: a key embedded in an app can be extracted from it by anyone.
What is sent to the relay:
What the server retains: request counters only, keyed to the install identifier, automatically deleted after 26 hours. Subscription validity is cached until its expiry date. Message and photo content is not stored on the server — it is forwarded to Anthropic and discarded from memory.
Before the first send, you are shown the exact list of data that will be transmitted and must approve it.
Never sent: cycle data, body measurements, full weight history, calendar event contents, raw Apple Health data.
Use is subject to Anthropic's privacy policy: https://www.anthropic.com/legal/privacy
and Cloudflare's: https://www.cloudflare.com/privacypolicy/
Personal key (alternative). If you prefer, you can enter your own Anthropic API key in Settings. In that mode the app calls api.anthropic.com directly, our relay is not involved at all, and nothing is sent to it. The key is stored encrypted in the device Keychain.
When you scan a barcode, only the barcode digits are sent to the open Open Food Facts database to retrieve nutrition values. No name, identifier or information about you is sent.
Open Food Facts privacy policy: https://world.openfoodfacts.org/privacy
Purchases are handled by Apple. We never see or receive your payment details — they pass between your device and Apple only. From Apple we receive only the signed purchase receipt described above.
In the app: Profile → Delete all data. This erases the local database, all preferences, coach memory, caches, the install identifier, widget data and any personal key from the Keychain.
Deleting the app from your device also removes the local data.
The relay server stores no content, and request counters expire on their own within 26 hours. There is therefore nothing to request deletion of separately — and no way to recover it.
Data written to Apple Health remains in Apple Health and can be deleted through the Health app.
Profile → Export data produces a readable JSON file containing everything the app holds about you. It is yours — save it, send it, or open it in any text editor.
The app is not directed at children under 13 and we do not knowingly collect information from them.
Prepo is a tracking and motivation tool. It is not a medical device and does not provide diagnosis or treatment. Body-fat percentages, calorie figures and training recommendations are estimates for trend tracking. For any medical question — including medication, injuries, diabetes or pregnancy — consult a doctor.
Updates will be published at this address with a new revision date.
alexkogan826@gmail.com