Privacy Policy for Prepped

Last updated: 4 November 2026

Prepped helps you get prepared: you get alerts about weather that affects your growing, important public announcements (VMA) and warnings from SMHI, you can make a planting schedule for the year, build your home preparedness step by step under Beredskap, and you can ask Oraklet, an AI assistant that answers from a knowledge bank on preparedness and self-sufficiency. We only collect what is needed to make that work and to improve the service. We never sell your data and don't use it for advertising or tracking.

Controller

Moralit AB, org. no. 559532-9599, Omsed 9265, 242 97 Hörby, Sweden.
Privacy contact: support@moral.it.

What we process and why

Data	Why	Legal basis
Email address	To create your account and send one-time codes when you sign in. We send no marketing.	Contract (Art. 6(1)(b) GDPR)
Postal code and what we derive from it: place, municipality, county, an approximate position (the postal code area's centre point) and a suggested hardiness zone	To fetch weather forecasts and warnings for your area, find public announcements for your county and suggest your hardiness zone. We never use your phone's location services.	Contract
Your choices: hardiness zone, language, which alerts you want, advance notice (days), sensitivity and daily summary time	To tailor the service to you.	Contract
Living situation (optional): apartment, holiday home, house or townhouse, smallholding or farm, or other	So Oraklet can tailor its advice to how you live. You can skip the question and change or remove the answer in Settings. Your living situation is also part of the anonymous question log below.	Contract (to tailor advice), legitimate interest (Art. 6(1)(f)) (for the anonymous log)
Device data: a random installation ID, push tokens (from Expo and from Apple/Google), platform, OS version, phone model, app version, language and when the device was last used	To send notifications to the right device in the right language.	Contract
Notification history: which weather events, warnings and reminders we have already sent you	To avoid sending the same alert more than once.	Legitimate interest
Planting schedule: plants you chose, sowing, planting-out and harvest dates, what you marked done or skipped, and the free text you write when you ask for a suggestion	To create and show your schedule. The suggestion is produced with AI (see Anthropic below). The conversation with the AI while you adjust a draft is kept for at most 24 hours.	Contract
Beredskap (preparedness): your household (number of adults and children, whether you have pets, water source and heating), what you have checked off or marked as not applicable, amounts you entered (for example litres of water or kronor in cash) and the ways you chose to cover different needs, including your own text, plus when you last checked each thing and when the household last changed	To calculate amounts for your household, show what applies to you, track how far you have come and remind you when something needs a look. Stored only on your account.	Contract
The medicine question in Beredskap (optional): only yes or no to whether someone in the household takes prescription medicine regularly – never which medicine	To show MCF's advice to keep a month of medicine at home. The answer may count as health data, so we only ask if you choose to answer. You can change it at any time.	Your explicit consent (Art. 9(2)(a)), which you can withdraw by changing the answer to no
Your questions to Oraklet: the text of the question you type, the latest messages in the conversation, your language, living situation and hardiness zone	So Oraklet can answer. The question is matched against our knowledge bank and sent to Anthropic (see below). We don't keep the answer or the conversation; the conversation exists only in the app on your phone and disappears when you start over or close the app.	Contract
Oraklet usage counters: how many questions you asked today and an estimated cost this month	To keep a daily and monthly limit per user and protect the service against abuse and runaway costs. The counters are tied to your user ID and are deleted automatically after a few days and about a month respectively.	Legitimate interest
Anonymous question log (can be turned off): the question (after email addresses, phone numbers, personal identity numbers and links are removed), living situation, hardiness zone, language, date, which parts of the knowledge bank the answer used, how well the question matched the knowledge bank and whether it could answer	To understand which questions are asked and to improve Oraklet and the knowledge base, for example by finding common questions per living situation. Saved without your user ID, so it can't be linked to you or your account. See "Anonymous question log" below.	Legitimate interest, with the right to object by turning logging off
Anonymous usage statistics (can be turned off): monthly counters of how the app is used, for example how often a Beredskap item is confirmed or topped up, how often a preparedness check before the weather is shown and opened, what kind of household change was made, and answers to "Was this helpful?"	To understand what helps and to improve the app. Only counts per month, without your user ID, without times and with one thing per counter, so it can't be linked to you.	Legitimate interest, with the right to object by turning it off
Shared household (optional): a name you choose to show the people in your household, when you joined, who is in the household, invite codes you created (with your name, for at most 48 hours) and, for 30 days after you leave a household, the fact that you did	So that people who live together can share preparedness and the growing plan, and so that one subscription covers the whole household. The waiting period and the limits on codes and new members protect against abuse. See "Shared household" below.	Contract, legitimate interest (for the limits)
Purchases and subscription (if you get Prepped Premium): which subscription you have, when it runs until and its purchase history. Apple or Google handles the payment, so we never see your card details	To give you what you paid for, on all your devices	Contract
Reported answers (if you report an answer from Oraklet): the question and answer, with no user ID, after easily recognisable personal data has been removed, your language and the date	To correct wrong or offensive answers	Legitimate interest
Technical logs: your pseudonymous user ID (a random ID from the sign-in service), which function was called, response time, app version and, for Oraklet, the number of processed words ("tokens") and which episodes were used. Logs don't contain your email, postal code, position, push tokens or your questions and answers.	To keep the service secure and working, and to troubleshoot.	Legitimate interest

Apart from the medicine question in Beredskap (see above), we don't intentionally process sensitive data. If you write such information yourself in a free text, for example in a question to Oraklet, it is handled like any other question, so please don't write personal details in your questions. We make no automated decisions with legal effects for you.

Oraklet and AI

Oraklet is an AI assistant. It answers from a knowledge bank we have compiled and can be wrong, especially on health, food, gas, electricity and water. Double-check important things and call 112 in an emergency. When you ask a question:

The question is turned into a searchable vector at Amazon Bedrock (within the EU) to find the matching parts of the knowledge bank.
The question, the latest messages in the conversation, excerpts from the knowledge bank, your living situation, your hardiness zone and your language are sent to Anthropic, which writes the answer. Your email address, postal code, position and user ID are never sent there.
The answer is shown in the app. We keep neither the answer nor the conversation.

There is a limit on how many questions you can ask per day and month. It is shown in the app.

Anonymous question log

Unless you have turned it off in Settings → Share anonymous statistics, we save each question you ask together with the data listed in the table above, but without your user ID. Personal data that is easy to recognise, such as email addresses, phone numbers, personal identity numbers and links, is removed automatically before the question is saved, but we can't recognise names or addresses, so please don't write them. Because the log can't be linked to you:

we can't remove or provide an individual question on request, and the log is not deleted when you delete your account
questions are kept for 24 months and then deleted automatically. We only keep the day a question was asked, never the time
questions about health, medicines and similar are only counted, without the question text
you can turn logging off at any time. No new questions are then saved. Questions already saved are anonymous and can't be found again

Anonymous usage statistics

The same setting, Share anonymous statistics, also controls a few simple counters of how the app is used, for example how many people answered "Still true" or "Top up" for a given Beredskap item in a month. We only add one to the count, without your user ID and without a time, and each counter covers a single thing, so the counters can't be linked to you or pieced together into a picture of you. They are kept for 24 months and are not affected when you delete your account. If you turn the setting off, you are no longer counted.

Shared household

In Settings → Shared household you can share Beredskap and the growing plan with up to three other adults you live with. You then share everything under Beredskap (including the household details, such as the number of children, pets and the answer to the medicine question), the growing schedule, your housing and where you grow. The others also see your name in the household and when you joined. Your email address, postal code and location, your notifications and your questions to the Oracle stay yours alone, and nobody sees who pays for Premium. Before you join, the app shows what is shared, and what you have already checked or planned is added to the household.

If you leave the household, or someone else in it removes you, you get a copy of what you shared and the others keep theirs. If you delete your account, what you shared stays with the others, but your name and your place in the household are removed. When only one person is left, the household ends and that person keeps everything. The medicine answer follows the household in the same way; you can change it at any time.

How long we keep data

Account, postal code, choices, living situation and the question-log choice: until you delete your account.
Planting schedule: until you delete your account. A draft in progress and its conversation with the AI are kept for at most 24 hours.
Beredskap (household, check-offs and choices): until you delete your account.
Shared household: your name and membership until you leave the household or delete your account. What you share is kept as long as the household exists and deleted when it ends (each member then has their own copy). Invite codes at most 48 hours, the fact that you recently left a household 30 days.
Device data: until you sign out or delete your account. If a notification can no longer be delivered to the device, e.g. because the app was uninstalled, we remove it. A device that hasn't been used for 180 days is removed automatically.
Notification history: 8 days; about 40 days for the monthly preparedness check.
Oraklet usage counters: the daily counter a few days, the monthly counter about a month.
Anonymous question log: 24 months, see above.
Anonymous usage statistics: 24 months, see above.
Reported answers: 24 months. They are not linked to you and are not affected when you delete your account.
Subscription: until you delete your account. Apple and Google keep their own purchase records under their terms.
Technical logs: 30 days.
Backups: deleted data may remain in database backups for up to 35 days. After that it is gone.

Deleting your account

You can delete your account at any time in the app: Settings → Delete account. This immediately deletes your email address, postal code, position, choices and living situation, planting schedule, everything you saved under Beredskap, devices, notification history and usage counters. If you're in a shared household you leave it first: what you shared stays with the others (see "Shared household"). We only keep one fully anonymous row for statistics, with hardiness zone, the month the account was created and the month it was deleted. It can't be linked to you. The anonymous question log and usage statistics contain no user ID and are therefore not affected (see above).

Can't reach the app? Email support@moral.it from the address you sign in with, and we'll delete the account for you.

Deleting your account does not cancel a subscription. You manage that in the App Store or Google Play: cancel it there, or it keeps renewing.

Who processes data for us

Amazon Web Services (Amazon Web Services EMEA SARL): running the service. Sign-in, database, email (one-time codes) and servers run in the AWS Stockholm region (eu-north-1). Amazon Bedrock is used in the EU to turn questions into searchable vectors; the knowledge bank is stored in the same region.
Anthropic (Anthropic PBC, USA): the AI provider for Oraklet and for creating planting schedules and plant information. It receives what is described under "Oraklet and AI" and, for planting schedules, the plants you chose, your free text, your hardiness zone and the year. It never receives your email address, postal code, position or user ID. The transfer to the USA is protected by the EU Standard Contractual Clauses (modules 2 and 3) in Anthropic's data processing addendum. According to Anthropic's terms, data sent through its API is not used to train models, and inputs and outputs are deleted automatically on its side within 30 days. Only if content is flagged for violating its usage policy can it be kept longer, for up to two years.
Expo (650 Industries, Inc., USA): relays push notifications to your phone. Expo receives your push token and the notification content, for example "Get ready: Frost tomorrow". The transfer to the USA is protected by Expo's self-certification under the EU–US Data Privacy Framework, with Standard Contractual Clauses as a fallback.
RevenueCat (RevenueCat, Inc., USA): keeps track of subscriptions from the App Store and Google Play. RevenueCat gets your pseudonymous user ID and the store's purchase details, never your email address or postal code. The transfer to the USA is protected by the EU's standard contractual clauses in RevenueCat's data processing agreement. The data is removed when you delete your account.
Apple and Google: deliver notifications to your device through the Apple Push Notification service and Firebase Cloud Messaging.

We fetch weather forecasts and warnings from SMHI and public announcements from Krisinformation.se. We only send SMHI the coordinates of a roughly 5 × 5 km grid cell, never any information about you, and we fetch announcements from Krisinformation without sending anything about you. Postal code data comes from GeoNames and is built into our service. The podcast episode links Oraklet suggests are fetched from the podcast's public feed, without sending anything about you.

Security

Data is sent encrypted (HTTPS) and stored encrypted at AWS. Sign-in keys are kept in your phone's secure storage. Access to the database is limited to the service itself, and our technical logs don't contain your questions, answers, email address, postal code, position or push tokens.

Your rights

You have the right to:

request a copy of the data we hold about you (access)
have incorrect data corrected (you can change most of it yourself in the app)
have your data deleted (see above)
request that processing is restricted
object to processing based on legitimate interest, for example by turning off the anonymous question log
receive the data you gave us in a machine-readable format (data portability)

These rights apply to data that can be linked to you. For that reason we can't search or delete in the anonymous question log on your behalf. Contact us at support@moral.it to exercise your rights. If you believe we process your data incorrectly you can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.

Children

Prepped is not directed at children under 13.

Changes

We update this policy when the service changes. We announce material changes in the app.