Privacy Policy

The data controller is Martin Rost, c/o flexdienst – #20426, Kurt-Schumacher-Straße 76, 67663 Kaiserslautern, Germany. Email: [email protected]

Prepora is a privacy-first app. By default, all data (documents, checklists, emergency profile, medication list, emergency locations and, from version 1.1, your supplies) is stored locally on your device. Your documents are encrypted with AES-256-GCM. The emergency profile, medication list, emergency locations and supplies are intentionally not encrypted so they remain readable in an emergency without the vault password; they are protected by iOS Data Protection and do not leave your device unless you create a backup. You can optionally create a backup in your own private iCloud. That data then resides in your private CloudKit container on Apple's servers — the provider has no access to it. Your documents remain encrypted with your key; the remaining data (checklists, emergency profile, medication list, emergency locations, supplies) is stored unencrypted in the container so that emergency information stays readable without the vault password. No personal data is stored on the provider's servers.

Your documents are encrypted with AES-256-GCM (via Apple CryptoKit). From version 1.1, they are encrypted with a dedicated data key that is wrapped twice: with a key derived from your password using PBKDF2-SHA256 (600,000 rounds), and with a key derived from your recovery key using HKDF. On a new setup, this data key is generated randomly; when updating from an earlier version, the existing key is kept and re-wrapped the first time you unlock with your password — your documents do not need to be re-encrypted. Up to version 1.0.x, the key was derived directly from your password using HKDF-SHA256. The keys are stored in the Apple Keychain on your device. We have no access to your encrypted documents.

You can optionally create a backup in your personal iCloud. Your documents remain encrypted with your key; the remaining data is stored unencrypted in your private CloudKit container so that emergency information stays readable without the vault password. We have no access to your iCloud data.

We use TelemetryDeck for anonymized app analytics. A hashed (non-reversible) device identifier is transmitted so that usage statistics can be evaluated without identifying you. This identifier is not linked to your identity and is not used to track you across other companies' apps or websites. The contents of your documents, names or quantities are never transmitted. Only usage statistics are captured (e.g., which features are used). More information: https://telemetrydeck.com/privacy

We use RevenueCat to process in-app purchases — both the premium subscriptions (offered up to version 1.0.x) and the one-time purchase “Prepora Premium” (from version 1.1). RevenueCat receives an anonymous app user ID and, from Apple, the data necessary to unlock your purchase (purchase history, transaction ID, subscription or unlock status). This data is not linked to your identity. More information: https://www.revenuecat.com/privacy

This website is served via Cloudflare. Cloudflare may temporarily process technical data such as IP addresses to deliver the website and protect against attacks. For audience measurement we use Umami, analytics software we host ourselves on a server in Germany — no data is passed on to third parties. Umami does not use cookies and does not store IP addresses. We record the page visited, the referring source, browser, operating system, device type, screen resolution, language setting and country of origin. This data is not combined into a user profile, nor is it used to recognise you across other websites. The legal basis is our legitimate interest in a data-minimising analysis of website usage (Art. 6(1)(f) GDPR). You can object to this measurement at any time by using a content or script blocker.

When you use the contact form, your information (name, email, message) is forwarded to us via Web3Forms. Web3Forms does not store data permanently. Your inquiry is used exclusively to process your request.

You have the right to access, rectification, deletion and restriction of processing of your data. Since Prepora stores all data locally on your device, you can delete it at any time yourself (Settings → Delete All Data). For questions, contact [email protected].