PrepTide AU · 001
Find my plan →
Document version 2026-08-10 · v1

Privacy Policy

Preptide handles information most food companies never touch — including which medication you're on. This policy explains exactly what we collect, why, who processes it for us, and how to see, fix, or delete it. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1 · Who we are

Preptide is operated by Bodyplanz Pty Ltd, trading as Preptide. For anything in this policy, contact our privacy contact at info@preptide.com.au.

2 · What we collect

  • Identity & contact — name, email, phone, delivery address, delivery instructions, account password (stored only as a salted hash).
  • Quiz & plan information — your answers about medication use, appetite, symptoms, goals, and food preferences, and the phase/plan generated from them (see section 3).
  • Tracker entries — if you use the optional tracker, the entries you log (for example weight, dose day, how you're feeling).
  • Orders & payments — order contents, delivery history, credits, promo use. Card payments are processed by Stripe; we never see or store your full card number. A payment token is retained so your weekly subscription can be charged.
  • Consents — which versions of the Health Acknowledgement, terms, and marketing consent you accepted, and when.
  • Usage & device data — pages visited, actions taken (for example starting checkout), referral source and campaign parameters, cookie identifiers, IP address and browser type (see section 7).
  • Correspondence — emails and messages you send us.

3 · Health information (sensitive information)

Your quiz answers and tracker entries can reveal health information — for example, that you use a GLP-1 medication. Australian law treats this as sensitive information with stricter rules. We collect it only with your consent, use it only to build and adjust your meal plan and run the service features you use, and never sell it or use it to build advertising profiles of you.

You can use Preptide without the tracker, and you can ask us to delete your quiz responses and tracker history at any time (section 9).

4 · How we use your information

  • To provide the service: build your plan, take payment, cook and deliver your meals, and run your dashboard.
  • To send service messages you can't opt out of while subscribed: order confirmations, cutoff reminders, delivery tracking, payment-failure notices.
  • To follow up an unfinished checkout with a resume link, so you can pick up where you left off.
  • To send marketing (tips, offers, product news) only if you've opted in — every message has an unsubscribe link (section 10).
  • To measure and improve the site and our advertising: aggregated analytics and conversion measurement (section 7).
  • To prevent fraud and abuse, and to comply with tax, consumer, and food-safety law.

5 · Who we share it with

We never sell personal information. We share it only with the providers who run parts of the service for us:

  • Kitchen & delivery partner (Foober) — receives your name, delivery address, phone, delivery instructions, and order contents so meals can be cooked, packed, and delivered.
  • Stripe — payment processing and card storage.
  • Postmark — transactional email delivery. Mobile Message — SMS delivery.
  • Klaviyo — email marketing and checkout-recovery automation (email, name, order context).
  • Google — website analytics (Google Analytics), address autocomplete (Google Maps), and cloud hosting (Google Cloud, Australian region).
  • Meta — advertising measurement for our ads (see section 7; identifiers are hashed before sending).
  • Neon — our database provider (hosted in the AWS Sydney region).
  • Professional advisers, and authorities where the law requires it.

Your quiz and tracker health details are not shared with advertising platforms.

6 · Overseas disclosure

Your core service data is hosted in Australia (Google Cloud australia-southeast1; database in the AWS Sydney region). Some providers listed above — Stripe, Klaviyo, Postmark, Meta, and parts of Google — process data in the United States and other countries. Where information goes overseas, we take reasonable steps consistent with APP 8 to ensure it is handled in line with Australian privacy standards, including using providers' data-protection terms.

7 · Cookies & tracking

  • Essential storage — your session login, cart, and plan are kept in cookies/local storage so the site works.
  • Analytics — Google Analytics 4 measures how the site is used (IP anonymisation enabled).
  • Advertising measurement — the Meta Pixel and Conversions API tell us when our ads lead to orders. Identifiers sent server-side (email, phone) are hashed first. This measures our ads; it does not send your health answers.
  • Attribution — we record how you found us (for example a campaign link) alongside your order.
  • You can limit tracking with browser cookie controls and ad-platform settings (Google Ad Settings, Meta Ad Preferences). The site works with non-essential cookies blocked.

8 · Security & retention

  • Data is encrypted in transit (HTTPS) and at rest with our hosting providers. Access is restricted to those who need it to run the service. Passwords are salted and hashed; card numbers never touch our servers.
  • No internet service can promise absolute security. If a data breach is likely to cause you serious harm, we will notify you and the OAIC as the Notifiable Data Breaches scheme requires.
  • We keep information while your account is active and as long as Australian tax, consumer, and food-safety law requires us to keep transaction records. When retention isn't required, we delete or de-identify on request (section 9).

9 · Access, correction & deletion

  • See and fix — most of your details are visible and editable in your dashboard. For anything else, email info@preptide.com.au and we'll provide a copy of your information or correct it.
  • Delete — you can ask us to delete your account, quiz responses, and tracker history. We'll action requests within 30 days, keeping only what the law obliges us to retain (for example order and payment records), and we'll tell you what that is.
  • Requests are free. We may need to verify your identity first so we don't hand your data to someone else.

10 · Marketing choices

  • Marketing email only goes to people who opted in — the checkout and quiz consent boxes are unticked by default and optional.
  • Opt out any time: the unsubscribe link in any marketing email, your dashboard, or info@preptide.com.au. SMS marketing (if any) can be stopped by replying STOP.
  • Opting out of marketing never affects service messages like delivery tracking or cutoff reminders while you have an active subscription.

11 · Complaints

If you think we've mishandled your information, email info@preptide.com.au — we'll acknowledge your complaint promptly and respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

12 · Changes & contact

We'll update this policy as the service evolves and will note material changes on your dashboard or by email. The current version always lives at preptide.com.au/privacy.

DOCUMENT VERSION 2026-08-10 · V1