Preppr Privacy Policy
Last updated: 10/20/2025
Introduction
Thank you for choosing to be part of our community at Preparedness Innovations, Inc. (the “Company,” “Preppr.ai” or “Preppr,” “we,” “us,” or “our”). We are committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our websites, www.preppr.ai and app.preppr.ai (collectively, the “Sites”), and when you interact with our services.
If you have questions about this Privacy Policy or our data handling practices, please contact us at connect@preppr.ai. Please discontinue the use of the Sites and our services if you do not agree with the terms in this Privacy Policy.
This Privacy Policy applies to all information collected through the Sites, as well as to any related services, sales, marketing, or events (collectively referred to in this Privacy Policy as the “Services”).
Please read this Privacy Policy carefully, as it will help you make informed decisions about how you share your personal information with us.
1. WHAT INFORMATION DO WE COLLECT?
Personal Information You Disclose to Us
In Short: We collect personal information that you provide directly, such as your name, email address, account type, address, and any content you share with Preppr.
We collect personal information that you voluntarily provide when you register, use, or interact with the Sites. The personal information we may collect includes:
Contact Data: Your first and last name, email address, and physical address, which we use to facilitate account creation, communications, and account management.
Account Type: Information about the type of account you choose, which helps us tailor your experience and deliver the appropriate services.
Content: We collect "Your Content," "Output Content," and "Contributor Content" as defined in our Terms of Service. This includes any content you create, submit, or transmit through the Services, such as text, documents, or other materials you upload, as well as the AI-generated output resulting from your use of the Services.
Sensitive Information: We do not process sensitive personal information (SPI), personally identifiable information (PII), or protected health information (PHI) unless expressly authorized in writing by Preppr, as outlined in our Terms of Service.
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information Automatically Collected
In Short: Certain information – such as IP address, browser, and device characteristics – is collected automatically when you visit the Sites.
When you visit or navigate the Sites, we automatically collect certain information. This information does not reveal your specific identity but may include device and usage information such as:
IP address
Browser and device characteristics
Operating system
Language preferences
Referring URLs
Device name
Location
Date and time of access
This information is primarily used to ensure the security and proper operation of our Sites and to assist with internal analytics and reporting.
2. HOW DO WE USE YOUR INFORMATION?
In Short: We process your information to provide Preppr’s services, ensure secure access, and meet our legal and business obligations.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
Provide and Manage Services [Contractual]: We use your information to create, store, and manage your account, facilitate secure access, and ensure that platform features function correctly.
Facilitate Account Creation and Login [Contractual]: We use your information to facilitate account setup and secure login.
To provide and facilitate delivery of Services [Business Purposes]: We process Your Content to generate and provide you with Output Content.
To facilitate user-to-user interaction [Business Purposes]: We process Contributor Content to make it available to the primary User(s) of the campaign to which the Contributor submitted it, in accordance with the licenses granted in our Terms of Service.
Enhance User Experience and Support [Business Purposes]: We may request feedback on your experience and provide support based on usage data to improve service quality.
Protect Our Services [Business Purposes/Legal Reasons]: We use data to monitor for misuse or unauthorized access, taking steps to secure the platform against risks.
Comply with Legal Obligations [Legal Reasons]: We may use your information as necessary to comply with legal requirements, such as responding to court orders or governmental inquiries.
Improve and Optimize Services [Business Purposes]: We analyze usage data to improve Preppr’s functionality, inform new features, and identify usage trends.
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
In Short: We only share information to comply with laws, protect your rights, or fulfill business requirements.
We may share your information in the following circumstances:
Compliance with Laws: We may disclose your information as necessary to comply with applicable laws, governmental requests, judicial proceedings, court orders, or legal processes (including for national security or law enforcement requirements).
Vital Interests and Legal Rights: We may share information if we believe it’s necessary to investigate, prevent, or act on violations of our policies, fraud, threats to safety, or illegal activities.
Contributors and Users: The Services are designed to facilitate collaboration. If you are a "Contributor," (as defined in our Terms of Service), your "Contributor Content" will be shared with the User(s) associated with the campaign(s) you are contributing to. By submitting Contributor Content, you consent to this sharing as part of the Service's function.
With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.
4. HOW DO WE HANDLE YOUR LOGINS?
In Short: Preppr manages login information securely through Amazon Cognito, providing account authentication and access management.
Preppr uses Amazon Cognito to manage login credentials, ensuring secure storage and processing of authentication details. When you register or log in to preppr.ai or app.preppr.ai, your login credentials (such as email and password) are encrypted and securely handled by Cognito, enhancing account security by managing authentication to ensure only you have access to your Preppr account.
5. HOW DO WE STORE DATA AND PROVIDE FEATURES?
In Short: We use secure data storage and integrate third-party services to enhance Preppr’s functionality.
Preppr uses Amazon Web Services (AWS) for secure data storage and processing. We integrate third-party services, including OpenAI, Gemini, Claude, DeepGram, Unstructured.io, and AskNews/DeepNews to deliver specific platform features. Data and content shared with Preppr for these features are processed by the providers under their own privacy and data retention policies:
Amazon Web Services (AWS): AWS provides robust infrastructure for data storage, processing, and management, compliant with stringent privacy and security standards, including data encryption and access control. For a full overview of AWS’s privacy practices, please review their policy.
OpenAI: Preppr uses OpenAI's GPT-4o, GPT-4.1, and GPT-4.1 Mini models to power features such as question-answering and text generation. OpenAI automatically deletes inputs and outputs on their backend within 30 days of receipt or generation for API users, unless otherwise agreed or required for policy enforcement or legal compliance. API business data is used only for limited purposes: to provide services, detect abuse, and investigate potential issues. Data is retained for a maximum of 30 days unless legally required to keep it longer. Access to this data is restricted to authorized employees and vetted third-party contractors who are bound by confidentiality agreements. This data is not used to train OpenAI's models by default. OpenAI employs AES-256 encryption to protect stored data and uses TLS 1.2+ protocols to secure data in transit. Strict access controls are implemented to limit who can access customer data. Additionally, OpenAI adheres to SOC 2 Type 2 standards, undergoing regular independent audits to verify security practices and compliance.
Gemini: Preppr incorporates Google's Gemini 2.5 Flash and Pro models for various analytical and generative tasks. Preppr uses Paid Services, thus Google doesn't use prompts or responses to improve their products, and processes data in accordance with the Data Processing Addendum for Products Where Google is a Data Processor. For Paid Services, Google logs prompts and responses for a limited period of time, solely for the purpose of detecting violations of the Prohibited Use Policy and any required legal or regulatory disclosures. For abuse monitoring purposes, Google retains prompts, contextual information, and outputs for fifty-five (55) days. Gemini for Google Cloud is compliant with ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC1, SOC2, and SOC3 certifications. All data that Gemini processes is encrypted at rest and in transit, with comprehensive audit logging and role-based access controls implemented.
Anthropic: Preppr utilizes Claude Sonnet 4 for advanced reasoning, question-answering and text generation, and analysis tasks. For API users such as Preppr, Anthropic automatically deletes inputs and outputs on their backend within 30 days of receipt or generation, except when zero data retention agreements are in place or when retention is required for Usage Policy enforcement or legal compliance. Anthropic does not use API data for training unless there is a specific agreement stating otherwise.
Shared Security Measures: All AI providers implement enterprise-grade security measures including:
Data Encryption: Industry-standard encryption for data at rest and in transit
Access Controls: Strict role-based access controls limiting data access to authorized personnel
Compliance Certifications: SOC 2 compliance and various ISO certifications
Audit Logging: Comprehensive logging and monitoring of data access and usage
Regular Security Audits: Independent third-party security assessments
Across all AI models, Preppr ensures:
Limited Retention: Data is retained only for the minimum time necessary for service provision and security monitoring
Purpose Limitation: Data is used solely for providing requested services and detecting policy violations
No Unauthorized Training: Unless explicitly agreed, customer data is not used to train or improve AI models
Secure Transmission: All data transmission occurs over encrypted channels with appropriate security protocols
Compliance Adherence: All processing complies with applicable data protection regulations and industry standards
DeepGram: For audio data processed via DeepGram, data and transcripts are retained temporarily to facilitate service delivery and improvement. Data usage for model training requires explicit customer consent. For further details, please refer to Deepgram's privacy policy.
Unstructured.io: For document chat features, content shared with Preppr is processed by Unstructured.io’s tools in line with their privacy practices. For further details, please refer to Deepgram's privacy policy.
AskNews/DeepNews: Preppr Intelligence is powered by an AskNews and DeepNews API integration, which is powered by Claude Sonnet 4. AskNews provides access to structured news data with powerful APIs that allow seamless integration of global news insights, enabling advanced search functionality for disaster-related information. The DeepNews component functions as a state-of-the-art agent capable of self-reflection, on-the-fly learning, and deep research into news archives. This intelligence system is particularly valuable for tasks requiring complex analysis and high-level strategic planning, such as monitoring geopolitical risk and making event forecasts. This intelligence infrastructure enhances Preppr's disaster preparedness capabilities by providing real-time information monitoring, sentiment analysis, and geo-contextualized insights that improve our products. The integration allows Preppr to leverage enriched datasets that support advanced search functionality while maintaining data isolation and privacy standards consistent with the rest of the application stack. AskNews does not store user data or content.
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries outside your own.
Our servers, hosted by Amazon Web Services (AWS), are primarily located in the United States. If you are accessing Preppr from outside the U.S., please be aware that your information may be transferred to, stored, and processed by us in the U.S. and by third-party services we utilize. These transfers comply with privacy protections required under applicable laws.
7. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
In Short: We are not responsible for the safety of information shared with third-party providers who are not affiliated with Preppr.
Preppr may contain links to third-party websites, services, or applications not governed by this Privacy Policy. These operate independently, and we encourage reviewing their privacy policies directly. Preppr does not control, endorse, or guarantee the accuracy or safety of any information provided on third-party websites.
8. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as you have an active account. If you suspend your account, we retain "Your Content" for 365 days to allow for reactivation, after which it is deleted. You may also request immediate deletion. We retain "Output Content" and "Contributor Content" under an irrevocable license to improve our Services. Data from Pilot Activities is not subject to deletion.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
Active Accounts: While your Account is active, we retain your personal information and "Your Content" (as defined in our Terms of Service) to provide you with the Services.
Suspended Accounts and Automatic Deletion: If you choose to suspend your Account, it will become inactive. We will retain your personal information and "Your Content" for a period of three hundred sixty-five (365) days (the "Retention Period"). If you do not reactivate your Account within this period, your personal information and "Your Content" will be permanently deleted from our active production systems.
Data Retained for Service Improvement: As described in our Terms of Service, we retain "Output Content," "Contributor Content," and other anonymized or derivative data under an irrevocable license to operate, maintain, and improve our Services. This data is disassociated from your personal information upon the deletion of your account.
Backups and Legal Obligations: When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Exception for Pilot Data: Notwithstanding the above, all "Pilot Data" (as defined in our Terms of Service and described in Section 14 of this Policy) is retained indefinitely and is not subject to the deletion procedures in this Section.
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We employ security protocols to protect your personal information.
Preppr uses a combination of industry-standard technical and organizational measures, including data encryption, access control, regular security assessments, and secure storage, to protect against unauthorized access, alteration, or disclosure. Although we strive to ensure security, please be aware that no security system is completely infallible.
10. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
Preppr does not intentionally gather or solicit data from children under the age of 18. By using the Sites, you confirm that you are either at least 18 years old or that you are the parent or guardian of a minor who consents to the Site’s use. If we inadvertently collect data from children under 18 without parental consent, we will deactivate the account and delete the data promptly.
11. YOUR PRIVACY RIGHTS (EEA AND CALIFORNIA RESIDENTS)
GDPR Compliance for EEA Residents
Preppr is committed to GDPR principles for EEA residents’ data, specifically:
Lawful Processing: We process data per GDPR Article 6, ensuring data use aligns with contractual needs, legal obligations, consent, or legitimate business interests.
Data Minimization: We collect only information necessary to fulfill Privacy Policy purposes.
Data Integrity and Confidentiality: We apply technical measures to ensure data confidentiality and integrity.
International Data Transfers: For data transfers outside the EEA, we use Standard Contractual Clauses (SCCs) and GDPR-compliant safeguards.
California Consumer Privacy Act (CCPA) for California Residents
California residents are entitled under the CCPA and California’s “Shine the Light” law to:
Know and Access: Details about the personal information we collect, including categories and purposes.
Delete Personal Information: Request deletion, except where retention is legally required.
Non-Discrimination: Exercise privacy rights without facing discrimination.
Account Information
In Short: You may review or update your account information, and you may suspend or request immediate deletion of your account. These deletion rights do not apply to data collected during Pilot Activities.
If you would at any time like to review or change the information in your account, you can:
Log in to your account settings and update your user account.
Suspension and Deletion of Your Account
You may suspend your account at any time through your account settings. Suspending your account initiates the 365-day Retention Period described in Section 8, after which your personal information and "Your Content" will be automatically deleted from our active systems.
You also have the right to request the immediate deletion of your personal information and "Your Content," as defined in our Terms of Service. You may submit this request in writing to connect@preppr.ai.
Upon your request for immediate deletion, we will delete your account, personal information, and "Your Content" from our active databases. However, we may retain some information to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements. As noted in Section 8, we retain "Output Content," "Contributor Content," and other derivative data to improve our Services.
Exception for Pilot Data: The deletion rights described in this section (both automatic and by request) do not apply to "Pilot Data" (as defined in our Terms of Service and described in Section 14 of this Policy). Preppr retains all Pilot Data indefinitely.
12. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
We may use cookies, web beacons, tracking pixels, and other tracking technologies on our Sites. Cookies are small text files stored on your device. We use cookies for:
Analytics: Understanding user behaviors for site improvement.
Personalization: Customizing content.
Security: Securing your account.
Site Management: Maintaining functionality and navigation.
Most browsers accept cookies by default, but you can adjust settings to remove or reject cookies. Note that rejecting cookies may affect functionality.
13. DO WE MAKE UPDATES TO THIS POLICY?
Yes, we may update this Privacy Policy as necessary to comply with relevant laws or improve transparency. The latest version will be indicated by the Last Updated date and will be effective immediately.
14. PILOT ACTIVITIES
In Short: If you participate in a pilot or beta program, your data may be used for broader purposes, including publications, and is not subject to standard deletion requests.
If you participate in a "Pilot Activity," "Beta," "Preview," or other evaluation program ("Pilot Services") as defined in our Terms of Service, you agree that any data you submit or that is generated in connection with your participation ("Pilot Data") is subject to different terms.
By participating, you acknowledge and agree that:
Broad Use: Your Pilot Data (including "Your Content," "Output Content," and "Contributor Content") may be used by Preppr for testing, evaluation, research, product development, marketing, and publication. This process may include manual or human review of your data.
Public Use: If Preppr uses Pilot Data for external publication or marketing, it will do so in an aggregated or anonymized form that does not personally identify you.
Exemption from Deletion: Pilot Data is not subject to the deletion rights or procedures described in Section 8 ("How Long Do We Keep Your Information?") or Section 11 ("Your Privacy Rights") of this Privacy Policy. Preppr retains all Pilot Data indefinitely as per the license granted in our Terms of Service, even after your account is suspended or terminated.
All Pilot Data will otherwise be handled securely and in accordance with the confidentiality and security provisions of this Privacy Policy.
15. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
If you have any questions, comments, or concerns about this Privacy Policy, please contact us by email at connect@preppr.ai or by mail at:
Preparedness Innovations, Inc. 232 Stagecoach Blvd Evergreen, CO 80439 United States
