Privacy Policy
Effective 31 August 2026
Preporion is built to be private by design: everything you enter stays on your device unless you turn on a feature that needs to leave it — Household Sync, the AI features, alerts, or map search. This policy explains what those features send, to whom, and what we do with it. Preporion is operated by Ivan Dimitrov, Vida Dimitrova 59, Dobrich 9300, Bulgaria (“we”, “us”), who is the data controller for the limited processing described below. Contact: support@preporion.pro.
Data stored on your device
Your readiness data — profile (name, age, sex, height, weight), household members and pets, inventory, kit, family plan, skills and simulation progress, saved locations and offline maps, emergency contacts, and any medical notes you choose to record — is stored locally on your device. Documents you add to the household vault (identity, insurance, medical or property scans) are held in your device's own storage as well; they are never uploaded, and we never receive them. Unless you turn on Household Sync, none of this reaches a server we control, so you stay in control of it: view and edit it in the app, and erase all of it at any time with “Reset All Data” in Settings.
Household Sync and accounts
The app does not require an account. Household Sync is optional, and it is the one feature that puts your readiness data on a server: if you turn it on, you create an account with an email address and password, and the household data you choose to share — inventory, kit, family plan and household member details — is stored in Google's Firebase (Firestore and Firebase Authentication) so the phones in your household can see the same thing. Google acts as our processor under its data processing terms, which incorporate the EU Standard Contractual Clauses for any transfer outside the EU. Everyone you invite to your household can see the data shared with it; invite only people you intend to share it with. We keep synced data for as long as the household exists. You can leave a household, delete your account from inside the app (Settings → Household Sync), or email us — deleting the account removes your synced data and your sign-in record within 30 days.
Location and maps
If you grant location permission, your device uses your location to show local hazard alerts and nearby shelters. To find alerts near you, your approximate coordinates and a search radius are sent to our alerts service, which uses them to answer that request and does not keep a location history. Official warnings for locations in the United States come from the National Weather Service. Your device requests those directly, so the coordinates being checked and your device's IP address go to the NWS rather than to us, and their use of that request is governed by their own privacy notice. No such request is made for a location outside United States jurisdiction. If you search for a place by name, the text you type is sent to Nominatim, run by the OpenStreetMap Foundation, to turn it into coordinates; the same service is asked the reverse question — coordinates in, place name out — when a location needs a label. Map tiles are fetched from the OpenStreetMap Foundation's tile servers as you pan the map, so your device's IP address and the area you are viewing reach them. Tiles you download for offline use are then stored on your device and are not requested again. We process location only with your consent (the permission you grant), and you can withdraw it at any time in your device settings.
AI features (ARIA, plan generator)
When you use AI features, the text you submit is sent to our AI provider, Groq, Inc. (United States), to generate a response that is returned to you. These requests are therefore processed on servers outside the EU. This transfer is governed by a data processing agreement with the provider that incorporates the EU Standard Contractual Clauses, and we instruct the provider to use your submission only to generate your response. So that answers fit your situation, a summary of your readiness data goes with the request: household size and the ages of the people in it, your inventory and kit, and your plan progress. Names are not included. Please do not type health information, or personal details about other people, into AI requests yourself. You choose whether to use these features, and a request is sent only when you submit it.
Notifications
If you allow notifications, your device is issued a push token by Google's Firebase Cloud Messaging so household updates and alerts can reach you. The token identifies the installation, not you by name. It is deleted when you turn notifications off, sign out, or uninstall the app.
Hosting and infrastructure
The app's server functions and our website run on Vercel, which processes the requests your device makes to us in order to deliver them. To stop automated abuse of the AI features we keep a short-lived rate-limiting counter, derived from your IP address, in Upstash Redis; it expires after one hour and is never used to identify you or build a profile. If you join the launch list on our website, or write to us through the contact form, the details you enter — your email address, and anything you type into the message — are processed by Resend to deliver that mail to us. We keep the correspondence only for as long as it takes to answer you. Each of these providers acts only on our instructions.
Subscriptions & payments
Preporion Pro is sold through the Apple App Store and Google Play. Payment is processed by Apple/Google — we never receive or store your card details. Through our billing provider, RevenueCat, Inc., we receive only the subscription entitlement status needed to unlock Pro features across your devices. RevenueCat acts as our processor under a data processing agreement.
What we do not do
We do not sell your personal data. We do not show third-party advertising. We do not build advertising profiles from your data.
Your rights and legal bases
Where we process personal data we rely on: performance of our contract with you (subscription entitlement status); your consent (location access, and each AI request you choose to submit — you can withdraw consent at any time by turning off the permission or not using the feature); and our legitimate interest in operating and securing the app. You have the right to access, correct, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. For data that lives on your device you exercise these directly — view and edit it in the app, and erase it with “Reset All Data”. For anything we or our processors hold (support emails, subscription entitlement records), email support@preporion.pro and we will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (CPDP), www.cpdp.bg — or with the authority in your country of residence.
California privacy rights
If you live in California, the CCPA as amended by the CPRA gives you rights over the personal information we hold. In the past 12 months the categories we have collected are: identifiers (an email address and account identifier, only if you use Household Sync; a push token, only if you allow notifications); commercial information (your subscription status, from the app stores); geolocation (only with your permission, and only to answer an alerts or map search request); and the content of AI requests you submit. We collect these to operate the features you ask for. We do not sell or share your personal information as those terms are defined by the CPRA, and we have not done so in the past 12 months. We do not use or disclose sensitive personal information for purposes beyond providing the app. You have the right to know what we collect, to have it deleted, to correct it, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these rights. Email support@preporion.pro to make a request; we will verify it against the account or record in question and respond within 45 days.
India — DPDP Act
If you are in India, we are the data fiduciary for the limited processing described in this policy: Ivan Dimitrov, Vida Dimitrova 59, Dobrich 9300, Bulgaria. We process your personal data for the purposes named above, on the consent you give when you turn a feature on, and for no other purpose. As a data principal you may access a summary of the data we hold, ask us to correct or erase it, nominate another person to exercise your rights, and raise a grievance. We keep personal data only while it serves the purpose it was collected for. For access, correction, erasure, nomination or grievance redressal, write to support@preporion.pro; the grievance officer is Ivan Dimitrov at the same address, and we will respond within 30 days.
Data deletion
Use “Reset All Data” in Settings to erase on-device data instantly. If you use Household Sync, delete your account in Settings → Household Sync: this removes your sign-in record and your synced household data within 30 days. You can also request deletion without opening the app, at preporion.pro/account-deletion. To delete any other record we hold (such as a support email or a subscription entitlement record), contact support@preporion.pro and we will delete it within 30 days.
Children
Preporion is not directed to children. You must be at least 16 years old — or the higher minimum age required in your country — to use the AI features, to create a Household Sync account, or to subscribe. You may record children as members of your household; that stays on your device, and where an AI request needs to account for them it carries their age and never their name. We do not knowingly collect personal data directly from children. If you believe a child has provided us personal data, contact support@preporion.pro and we will delete it.
Changes & contact
We may update this policy; the “updated” date above will change, and we will note material changes in the app. Questions or requests: support@preporion.pro. Operator and data controller: Ivan Dimitrov, Vida Dimitrova 59, Dobrich 9300, Bulgaria. Phone: +359 887 275 427.