Privacy Policy

Prep Mobility is a movement and recovery app provided by Edition Ventures Ltd, company number 17100663, registered in England and Wales. In this policy, "Prep Mobility", "Prep", "we", "us", and "our" mean Edition Ventures Ltd and the Prep Mobility app and related services.

This policy explains what personal data we collect, why we use it, where it goes, and the choices you have. We do not sell your data and we never show third-party ads. We use one attribution service, AppsFlyer, to measure which of our own ads bring people to Prep Mobility; it reads Apple's advertising identifier only if you tap Allow when iOS asks, and you can switch it off any time in Profile -> Privacy & data.

Who controls your data

Edition Ventures Ltd is the controller for the personal data described in this policy. Some companies process data for us as service providers, including Supabase, RevenueCat, Railway, OpenAI or another OpenAI-compatible model provider, Apple, Google, and PostHog.

Account and sign-in

Prep Mobility requires an account to use the app. You can sign in with Apple, Google, or a six-digit code sent to your email address. If you sign in by email, we store your email address to identify your account and send you a sign-in code; the code is single-use and expires. When you sign in, we receive a stable user ID and, depending on the sign-in method and what you choose to share, your email address and name. We use this to identify your account, keep you signed in, sync supported app data, provide customer support, and protect the service. Authentication is provided by Supabase.

Profile and personalisation

We may store profile and onboarding information such as your first name, email address, primary sport, primary goal, weekly goal, routine length, routine tuning, body focus areas, reminder time, and saved routine order. We use this to personalise routines, restore your setup across devices, and give Coach enough context to respond usefully.

Some of the information you choose to provide may reveal health-adjacent or health-related information, especially body focus areas, pain descriptions, injury concerns, and chat messages about how you feel. We treat this as sensitive. We use it only to provide and personalise Prep Mobility, generate relevant Coach responses, maintain safety boundaries, and keep your account history available to you. Where UK data protection law requires a special category condition, we rely on your explicit consent for health-related information you choose to provide for these features.

Subscriptions

Prep Mobility is a paid app unless we make specific free features available. Purchases are processed by Apple through Apple's in-app purchase system. We use RevenueCat to verify entitlement and subscription status. RevenueCat and our backend may process information such as your app user ID, Apple transaction identifiers, product ID, subscription status, renewal or expiry dates, and related entitlement metadata. We do not receive or store your full card details.

App data on your device

Some data is stored locally on your device, including timer state, local settings, workout history, streaks, favourites, custom routines, and other app preferences. Deleting the app removes the local copy unless the same data has also been synced to your account or retained by Apple or another third party under their own policies.

Chat and AI Coach

When you use Coach, we process the messages you send, assistant replies, inline cards, tool results, thread titles, timestamps, and technical metadata such as the model used, latency, and token counts. Chat history is stored in Supabase so you can resume conversations across devices.

The chat backend sends relevant messages and context to an OpenAI Chat Completions-compatible model provider so that the provider can generate a reply. Coach may also use your profile and preferences to tailor responses. We do not use Coach for diagnosis, treatment, or medical decision-making.

Voice dictation

If you use voice dictation in the chat composer, the app uses your microphone and Apple's Speech Recognition framework to produce a live transcript where supported. When you confirm a dictation, the recording is sent to Prep's transcription service so we can return a more accurate transcript. The recording is discarded after transcription is completed or fails. The resulting transcript is handled like other chat text if you send it to Coach.

Notifications

If you opt into notifications, we use notification permissions only for app reminders you choose, such as daily movement reminders or trial reminders. We may store reminder preferences and, where needed, a device or push token reference to deliver notifications. You can change notification permissions in iOS Settings.

Product analytics, diagnostics, and security

We use PostHog for product analytics in the app. PostHog may process information about how the app is used, such as feature interactions, session events, app version, device and platform information, and an anonymous identifier used to understand app usage over time. We host PostHog data in the EU. We never send chat messages, voice transcripts, descriptions of pain or how you feel, or your body focus area selections to PostHog. We use this to understand what is working, improve Prep Mobility, fix issues, and make product decisions. You can opt out any time in Profile -> Privacy & data.

We also may process operational data such as app version, device platform, locale, request timing, server logs, crash diagnostics, rate-limit events, hashed IP-derived identifiers, and security events. Apple may provide crash and diagnostic information to us if you have opted into sharing analytics with app developers in iOS settings. We use this data to keep Prep Mobility reliable, secure, and abuse-resistant.

Advertising attribution

We run ads for Prep Mobility on Meta, TikTok and Apple Ads. To know which of those ads bring people to the app, we use AppsFlyer, an attribution service. The app tells AppsFlyer when it is installed and opened, along with device and platform information, your IP address, Apple's vendor identifier, and four product milestones: plan created, paywall viewed, routine started and routine completed. RevenueCat tells AppsFlyer when a trial starts or converts and when a purchase is made, including the amount. AppsFlyer matches this against ad activity and shares install and milestone postbacks with Meta, TikTok and Apple Ads so those platforms can measure and optimise our campaigns.

Apple's advertising identifier (IDFA) is read only if you tap Allow when iOS asks permission to track. If you decline, attribution falls back to aggregated, privacy-preserving methods such as Apple's SKAdNetwork. We never send AppsFlyer or any ad platform your name, email, chat messages, descriptions of pain or how you feel, or your body focus selections. Switching off Product analytics in Profile -> Privacy & data also stops all AppsFlyer activity on your device.

What we don't do

• No ad-serving SDKs: Prep Mobility never shows third-party ads, and AppsFlyer is used only to measure our own campaigns.
• No sale of personal data.
• No sharing with data brokers. Ad platforms receive only the attribution postbacks described above.
• No tracking across other companies' apps or websites unless you allow it when iOS asks, and then only to attribute our own ads.

Legal bases

We use your data where it is necessary to provide Prep Mobility and manage your account or subscription; where we have a legitimate interest in securing, debugging, supporting, and improving the service; where we need to comply with law; and, where required, where you have given consent. For health-related information you choose to provide, we use it only for the feature you asked for and, where required, on the basis of explicit consent. You can withdraw consent by deleting the relevant data or your account, but this will not affect processing that already happened.

Who we share data with

We share data only where needed to operate Prep Mobility, including with:

• Supabase for authentication, account data, profile sync, and chat storage.
• RevenueCat for subscription entitlement management.
• PostHog for product analytics.
• AppsFlyer for install and campaign attribution, and through it Meta, TikTok and Apple Ads, which receive the attribution postbacks described above.
• Apple for App Store purchases, Sign in with Apple, iOS permissions, crash diagnostics, and platform services.
• Google if you choose Google sign-in.
• Railway or other hosting providers for the chat and transcription API.
• OpenAI or another OpenAI-compatible model provider for Coach replies and transcription.
• Professional advisers, authorities, or other parties where required by law, security, fraud prevention, or a business transfer.

These providers may process data under their own terms when you use their services directly, such as Apple purchases or Google sign-in.

International processing

Your data may be processed in the United Kingdom, the European Economic Area, the United States, or other countries where we or our service providers operate. Where UK data protection law requires safeguards for international transfers, we use appropriate safeguards such as adequacy arrangements, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or equivalent contractual protections.

Retention

We keep personal data only for as long as needed for the purposes described in this policy.

Account, profile, subscription, and synced app data are generally kept while your account is active. Chat history is kept until you delete threads, delete your account, or we no longer need it to provide the service. Voice recordings sent for transcription are discarded after transcription is completed or fails. Operational logs and security records are kept for as long as reasonably needed to run, debug, secure, and defend the service. We may retain limited records longer where required for legal, tax, accounting, dispute, fraud prevention, or security reasons.

Your choices and rights

You can change many preferences in the app. You can delete chat threads from the chat history sheet where available. You can delete your account and server-side account data from Settings -> Danger Zone -> Delete account. You can clear local history and reset preferences from Settings -> Data & Storage.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also have the right to withdraw consent where processing is based on consent.

To exercise rights you cannot complete in the app, use the support route provided in the app or on our App Store listing. We may need to verify your identity before acting on a request.

UK users can complain to the Information Commissioner's Office if they are unhappy with how we handle personal data. We would prefer you contact us first so we can try to resolve the issue.

Children

Prep Mobility is intended for users aged 9 and over. We do not knowingly collect personal data from children under 9. If we learn that a child under 9 has created an account or provided personal data, we will take reasonable steps to delete it.

Marketing

We do not currently send third-party advertising or marketing emails. If we send marketing about Prep Mobility in the future, we will do so only where permitted by law and will provide a way to unsubscribe. We may still send service, account, subscription, security, or transactional messages where needed.

Automated decisions

Prep Mobility uses automated and AI-assisted systems to suggest routines and generate Coach replies, but we do not use them to make decisions that produce legal or similarly significant effects about you.

Security

We use technical and organisational measures designed to protect personal data, including authentication, access controls, row-level database security, transport encryption, and operational monitoring. No system can be guaranteed to be completely secure.

Changes to this policy

If this policy materially changes, we will update the in-app copy and the "Last updated" date, and where appropriate we will present the updated policy in-app before it takes effect.