Privacy Policy

Information WePrep uses

Google sign-in provides your account identifier, email address and basic profile details. WePrep stores the display name you choose and the Groups, checklists, checklist items, assignments and invitations you create or join.

If you enable browser notifications, WePrep stores the technical push subscription needed to reach that browser or installed app. The push provider and your browser or operating system also process the notification.

Business billing

If you use WePrep Business, Stripe processes payment details, recurring monthly or yearly charges, invoices and receipts. WePrep stores bounded billing identifiers and subscription status needed to provide Business access, reconcile provider events and support your account. WePrep does not store full card details.

Stripe processes billing information under its own privacy terms. Payment and invoice information may also be available through the Stripe customer portal.

Feedback and diagnostics

When you send beta feedback, WePrep stores your selected feedback type, message, account identifier, app version and limited technical context such as the page you were using.

WePrep also records bounded, sanitised diagnostic details for unexpected failures. These records are designed to exclude passwords, authentication tokens, cookies, invitation secrets, checklist notes and unrestricted stack traces.

How information is used and shared

Information is used to run WePrep, keep shared checklists synchronised, deliver requested checklist reminders and activity notifications, respond to feedback, protect the service and diagnose failures. Checklist content is visible to authorised users in its Group.

Supabase provides authentication, database and realtime services. Vercel hosts and delivers the web application. Stripe processes optional Business payments. WePrep does not sell personal information or use checklist content for advertising.

Security and access

WePrep’s hosting providers use encryption in transit and at rest. WePrep also uses authenticated Group access controls and Row Level Security to restrict stored information to authorised users.

WePrep is not end-to-end encrypted. Authorised production operators may technically access stored information when reasonably necessary to operate, troubleshoot, secure or support the service.

Notifications

Notification information may be sent through browser and operating-system push services. Notification content can appear on a lock screen and may be visible to anyone who can access that device.

You can choose which automatic activity notifications you receive and mute individual Groups. Dated checklist reminders are controlled separately for each checklist.

Retention and control

Information is kept while needed to provide the service, meet legitimate security needs or resolve beta issues. Group owners can remove Group data through available product controls. You can request account or data deletion through the process on the Support page.

Changes

No internet service can promise perfect security. This policy may change as the beta evolves; material updates will be dated on this page.