Who we are
Millieprep is the data controller for the information described here. You can reach us at [email protected].
What we collect
Your account
Your email address, name and password are held in our own identity server, which we run ourselves rather than hand to a third party. Passwords are stored hashed — we cannot read them, and neither can anyone who asks us to. The main application database stores no name or email at all, only an account identifier.
The people you cook for
Names, ages where you give them, allergies, intolerances and dietary preferences for each person in your household.
How you use the app
Your meal plans, shopping baskets, saved and favourited recipes, pantry contents, schedule, and which supermarket you prefer.
Analytics
We record which pages are visited, which route served them, the referring page, whether the device was mobile, how long the page was open and how much of that time was active. These records are linked to your account so we can tell returning use from new use. We do not log IP addresses or browser user-agent strings, and raw page-view records are deleted automatically after 90 days. There is no third-party analytics service, no advertising network and no cross-site tracking on this site.
Payments
If you subscribe, Stripe collects and holds your card details. They are entered directly into Stripe's own form and never reach our servers. We store only the identifiers Stripe gives us — a customer reference and a subscription reference — along with your subscription's status and dates.
Why we're allowed to
| Information | Lawful basis |
|---|---|
| Account, meal plans, baskets, pantry | Performance of our contract with you — without it there is no service |
| Allergies, intolerances, dietary needs | Your explicit consent (special category data) |
| Payment records | Contract, and our legal obligation to keep financial records |
| Analytics | Our legitimate interest in understanding whether the product works, balanced against the fact that it is pseudonymous, never sold, and deleted after 90 days |
| Service emails (trial reminders, failed payments) | Contract — these are about your account, not marketing |
Who else sees it
These are the only third parties involved, and each one only receives what it needs:
| Who | What they get | What for |
|---|---|---|
| Stripe | Your card details (directly), name, email, and the amount | Taking payment |
| Resend | Your email address and the message | Sending account emails |
| Cloudflare R2 | Recipe and product images | Image storage |
| Google (Gemini) | Recipe and grocery catalogue text only | Categorising ingredients and generating recipe images. No household, profile or allergy information is ever sent. |
We do not sell personal data, and we do not share it for anybody else's marketing. Some of these providers process data outside the UK; where they do, they do so under the safeguards UK data protection law requires.
How long we keep it
- Your account and household data — until you ask us to delete it.
- Page-view records — 90 days, then deleted automatically.
- Payment and invoice records — six years, because tax law requires it.
Your rights
You can ask us to:
- give you a copy of everything we hold about you;
- correct anything that's wrong;
- delete your account and its data;
- stop or limit how we use it;
- hand it over in a portable format;
- object to our use of it under legitimate interests, including analytics.
Where we rely on your consent — your household's allergy and dietary information — you can withdraw it at any time, and withdrawing it does not affect anything we did with it beforehand.
Email [email protected] and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use one cookie to keep you signed in, and a second to protect forms against cross-site request forgery. Both are strictly necessary for the site to work, which is why there is no cookie banner — there is nothing optional to consent to. We set no advertising or tracking cookies.
Children
Millieprep is for adults. You may add children as people you cook for — that is the point of a household meal planner — but the account, and responsibility for what goes in it, belongs to an adult.
Changes
If we change what we collect or why, we'll update this page and change the date at the top. If the change is significant, we'll email you rather than hope you notice.