Privacy Policy

Last updated: March 14, 2026

Overview

This Privacy Policy explains how personal data is collected and processed when you use the website and future mobile applications of PrepYourWeek.

  1. Controller

The controller responsible for data processing is:


Jakob Schmid

Lungitz 127

4223 Katsdorf

Austria


Email: contact@prepyourweek.app

  1. Data we collect

We may collect and process the following types of personal data


  1. Waitlist Information

    When you sign up for the waitlist on our website, we collect your email address.


  2. Server and Technical Data

    When visiting the website, technical information may be processed automatically by the hosting provider, such as:

    • IP address

    • browser type

    • device information

    • access time

    • server logs


  3. Account Data

    If you create an account in the mobile application, we may process:

    • email address

    • login credentials

    • authentication data from thrid-party providers such as Google or Apple


  4. App Usage Data

    When using the mobile application, the following data may be processed

    • usage analytics

    • crash reports

    • device information

  1. Mobile Application Permissions

The mobile application may request certain permissions from the user’s device in order to operate properly.


Depending on the features used, the application may access limited device information such as:


  • device type

  • operating system version

  • application performance data

  • crash reports


The application does not access sensitive device features such as photos unless explicitly stated and approved by the user.


Users can manage or revoke permissions at any time through their device settings.

  1. International Data Transfers

Some third-party service providers used by the service may process data outside the European Economic Area (EEA).


When such transfers occur, appropriate safeguards are used to ensure that personal data remains protected in accordance with applicable data protection laws, including the GDPR.


These safeguards may include standard contractual clauses approved by the European Commission.

  1. Purpose of Processing

We process personal data for the following purposes

  • operating and maintaining the website

  • managing the waitlist and notifying users about the product launch

  • providing and maintaining user accounts

  • improving the functionality and stability of the application

  • analyzing usage to improve the service

  1. Legal Basis for Processing

Personal data is processed based on the following legal grounds under Article 6 GDPR:


  • Art. 6(1)(b) GDPR – processing necessary to provide requested services (e.g., waitlist registration or user accounts)

  • Art. 6(1)(f) GDPR – legitimate interest in operating and improving the service

  1. Third-Party Services and Infrastructure

The website and services rely on the following providers which may process personal data:


Hosting

The website is hosted using Framer. When accessing the website, server logs and IP addresses may be processed.

Authentication and User Accounts (Supabase)


Waitlist Storage

Waitlist email addresses are currently stored using Google Sheets provided by Google.


Authentication and User Accounts

The User accounts will be managed using Supabase.


Google Sign-In

Users may choose to sign in with their Google account. This authentication service is provided by Google.


When using Google-Sign-In, certain information may be shared with the application such as:


  • name

  • email address

  • Google account identifier


This data is used solely for authentication and account creation.

Google may process personal data according to its own privacy policy. More information can be found here:

https://policies.google.com/privacy


Sign in with Apple

Users may choose to sign in using their Apple account. This authentication service is provided by Apple.


Depending on the user's Apple settings, Apple may provide the following information:


  • name

  • email address (or a private relay email address)


This information is used only for authentication and account creation.

Apple may process personal data according to its own privacy policy. More information can be found here:
https://www.apple.com/legal/privacy/


Email Delivery

Emails may be sent using Amazon Web Services Simple Email Service (AWS SES).


Analytics

Framer Analytics may be used to analyze website usage and improve the service.


Google Analytics for Firebase

We use Google Analytics for Firebase, a mobile analytics service provided by Google LLC, to understand how users interact with our mobile application.


Google Analytics for Firebase collects information such as:

  • device information

  • app usage data

  • session duration

  • interactions with app features

  • approximate location derived from the IP address


This information helps us analyze usage patterns and improve the functionality and user experience of the application.


Data may be transferred to and processed on servers located outside the European Economic Area. In such cases, appropriate safeguards such as Standard Contractual Clauses are used.


More information:

https://firebase.google.com/support/privacy


Firebase Crashlytics

We use Firebase Crashlytics, a crash reporting service provided by Google LLC.


Crashlytics automatically collects information about app crashes and technical errors, including:

  • device model

  • operating system version

  • app version

  • crash logs and stack traces

This information helps us detect, diagnose and fix technical issues in order to improve the stability and reliability of the application.


More information:

https://firebase.google.com/support/privacy


These providers may process technical data necessary to operate their services.

  1. Data Retention

Personal data is stored only as long as necessary for the respective purpose.

Waitlist emails are stored until:


  • the user unsubscribes, or

  • the service launches and communication regarding the launch has concluded.


Account data in the future application will be stored until the user deletes their account.

  1. Unsubscribe and Account Deletion

Users may unsubscribe from email communications at any time using the unsubscribe link included in emails.


Users are able to delete their accounts within the application.

  1. User Rights

Under the GDPR, users have the following rights:


  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object to processing (Art. 21 GDPR)


Requests regarding personal data may be sent to:
schm.jakob9@gmail.com

  1. Right to Lodge a Complaint

Users have the right to lodge a complaint with a supervisory authority.


In Austria, this is the

Austrian Data Protection Authority (Datenschutzbehörde)

https://dsb.gv.at/

  1. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the service or legal requirements.