Privacy Notice

This Privacy Notice explains how John Roper, trading as "MakrPrep" ("MakrPrep", "we", "us"), collects and uses personal data when you use the MakrPrep application and website at makrprep.com. John Roper is the data controller for the personal data described here.

1. Personal data we collect

• Account data: your email address, name (if provided), business name (if provided), hashed password, and marketing consent status.
• Application data: the recipes, ingredients, customers, orders and other business records you enter into MakrPrep.
• Support data: messages, feedback and screenshots you send us.
• Free download data: if you ask for a free download, such as the recipe costing spreadsheet, your email address, which download you asked for, the page you came from, and when you agreed to our emails and when you unsubscribed.
• Technical data: IP address, device and browser information, and basic usage/telemetry needed to operate and secure the service.

Payment details (card numbers, billing address, tax IDs) are collected and stored by Paddle when you subscribe. We never receive or store your full card details.

2. Why we use it and legal bases

• Providing the service: creating your account, storing your data, running the application. Legal basis: performance of the contract.
• Billing and tax: sharing the minimum data needed with Paddle so they can take payment, issue invoices and remit sales taxes. Legal basis: performance of the contract and legal obligation.
• Security and fraud prevention: detecting misuse, protecting accounts, keeping logs. Legal basis: legitimate interests.
• Customer support: responding to your questions. Legal basis: performance of the contract / legitimate interests.
• Product improvement: understanding how MakrPrep is used in aggregate. Legal basis: legitimate interests.
• Free downloads: emailing you the link to the download you asked for. Legal basis: consent.
• Marketing emails: pricing tips, news and offers about MakrPrep. We send these if you opt in when you create an account, or when you ask for a free download, where joining our emails is part of the offer. Legal basis: consent. You can withdraw it at any time with the unsubscribe link in every email, in Settings if you have an account, or by emailing us. Withdrawing doesn't stop a download you've already been sent from working.

3. Who we share it with

• Paddle.com Market Limited: our Merchant of Record. Paddle handles all payments, subscription management, tax compliance, invoicing, refunds and buyer support for MakrPrep. See Paddle's Privacy Notice.
• Supabase: our database, authentication and hosting provider.
• Lovable: the platform MakrPrep is built and hosted on, which also sends our emails.
• Cloudflare: infrastructure, edge delivery and email routing.
• Termly: our consent management provider for the cookie banner.
• Professional advisers: legal and accounting advisers where necessary.
• Authorities: where required by law or to protect our rights.

We do not sell personal data.

4. International transfers

Some of our providers process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to protect the transfer.

5. Retention

We keep account and application data for as long as your account is active. When you delete your account we delete or anonymise your data within 30 days, except where we are required to keep records for legal or tax reasons. To prevent trial abuse we keep a one-way salted hash of the email address of accounts that have used a free trial; the original email cannot be recovered from this hash.

We keep free download signups until you unsubscribe or ask us to delete them. After you unsubscribe we keep your email address and the date, only so we don't email you again by mistake. Ask us and we'll delete it completely.

6. Your rights

Under UK/EU data protection law you have the right to access, rectify, erase, restrict or port your personal data, to object to certain processing, and to withdraw consent at any time. You can exercise most of these rights from Settings or by emailing hello@makrprep.com. We will respond within one month. You also have the right to complain to a supervisory authority. In the UK, the Information Commissioner's Office (ico.org.uk).

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encrypted storage, access controls, row-level database security and audit logging.

8. Cookies

MakrPrep uses strictly-necessary cookies for authentication and session management, and, subject to your consent, analytics cookies to help us improve the service. You can manage your preferences at any time via the "Consent Preferences" link in the footer. See our Cookie Policy for details.

9. Contact

Data controller: John Roper, trading as MakrPrep, United Kingdom. Email: hello@makrprep.com.