Privacy

Effective 30 October 2026. Names every provider that handles your content, including live Talk, the reading of imported pages and pictures, and Google as a model provider.

Preppit turns a sketch, some pinned notes and a line of instruction into a prompt for an AI. Everything it holds, it holds so that it can do that. This page says what it holds, why, for how long, who else sees it, and how you get it back or make it go away.

What Preppit holds

Your account

Your email address and a password, held by Supabase (our sign-in and database provider). We never see the password. Each connector link you create — one for Claude, one for ChatGPT, one for the Mac app — is a token we store only as a hash, with the label you gave it and when it was last used, so you can tell them apart and revoke them one at a time.

Your canvases

Everything you put on a canvas: the drawing, shapes, typed text, pinned notes, the overall instruction, and any pictures you place or capture. Each canvas is stored under your account, keyed by an id like vp_…, so that the AI you send it to can fetch it again at full resolution and so that you can reopen it from Previous work.

Captures and where they came from

When the Mac app captures part of your screen, it also records where the capture came from — the application's name, its window title and, for a browser, the page's address — so the brief can say "a Keynote slide" or "a web page" rather than leaving the AI to guess. A window title can be the most sensitive thing on a canvas ("Acme — redundancy plan v3"). It travels with the capture to whichever AI you serve it to. There is not yet a switch to keep it back; until there is, the way to keep a title out of a brief is to remove that capture from the rail before serving, and we say so here rather than pretend otherwise.

Voice notes

A voice note is stored as audio and transcribed, and the transcript is what the AI reads; the audio itself is never sent to the AI. Transcription is done by a third-party speech-to-text provider (Groq, see below), which receives the audio and, as a hint, the words from your list of your own terms. If you correct a transcript, we remember the spelling you corrected it to, in that small list, so the next transcript gets it right. That list holds words, not sentences.

Live Talk

When you press Talk, your microphone audio streams from your browser straight to Deepgram, a speech-to-text provider, which sends back the words as you say them. Preppit's own server never receives the audio; it keeps a count of seconds used, not what was said. The words on the page you are looking at go with the stream as vocabulary, so names and terms are heard right. We have opted out of Deepgram's model-improvement programme, so your audio is not used to train their models. If a guest on a share link uses Talk, their audio goes the same way; a recording a guest chooses to keep is stored with your Preppit, on our own storage only.

As you talk, Preppit works out which part of the page you mean. To do that it sends the words so far, the notes already on the page and the page's text to TypeSafe, a decision-model provider, through Vercel's AI Gateway or directly. Where a picture is needed to find the thing you are pointing at, a picture of the page or a cropped detail of it goes too. Anything you have hidden with Protect is blacked out or left behind first.

Text read from pictures

When you place or capture a picture, Preppit reads the text in it so that a note pinned near a line can say which line. On the Mac this uses Apple's on-device text recognition. On the server it uses open-source recognition running on our own machine. The picture does not go to a third party for this.

Reading an imported page

When you import a deck, PDF or web page, Preppit works out what each page is made of — which lines are headings, where paragraphs break, what belongs together — so your comments can land on the right part. The text of the page and the position of each block are sent to TypeSafe for this; no pictures. Pictures on an imported page are sent to Google (Gemini) once, so Preppit can list what is in them and a comment can point at a chart or a photo rather than the whole picture; a picture that Protect is hiding part of is not sent. Both happen as the page is prepared, not when you send.

The instruction suggester

If you ask Preppit to suggest an instruction, the typed text and notes on the canvas — not the pictures — are sent to a third-party language model (currently Groq) to draft one line, after Protect has replaced anything you are hiding. This only happens when you ask.

AI reads

If you ask for an AI read, Ask AI, Check it or to have the AI make the changes, the Preppit — its pictures, typed notes, transcripts and instruction, or just the part you picked — is sent to a model provider (Anthropic, OpenAI or Google, named on the button) on our account, and what comes back is stored with that Preppit. This happens only when you ask, never by default, and we count how many you have asked for each month. We use these providers through their business APIs, whose terms say they do not train on what is sent. A page that Protect is hiding part of goes without its picture.

Colleague links

When you send a colleague link, the person opening it sees that one Preppit and can add notes to it. We store what they add under your account, along with the name they type and the time; we do not create an account for them or keep anything else about them. Their browser gets no cookie from us beyond what is needed to keep their notes attached while they work.

Your plan

Which plan you are on, when a trial ends, and the month's counts of collaborations and AI reads. If you subscribe, payment is taken by Stripe; we hold a Stripe customer id, the plan, the renewal date and receipts, and never your card number.

Which AIs are connected

When an AI adds your connector, it introduces itself by name. We keep that name, its version and the time, so the app can show you which AIs are connected. Nothing about what you said to that AI is recorded.

People you share a link with

A share link opens a page where someone can add to your Preppit without an account. Of that person we hold: the first name they type, so their marks can be told from yours; the marks themselves, which become part of your Preppit; and, only if they choose to give one, an email address so that the answer can be sent to them as well as to you. That address is used for that one reply about that one Preppit and nothing else — it is not a mailing list, it does not create an account, and one click on that email tells us to forget it. They can also clear it themselves at any time from the same page. Everything held about them lives inside your Preppit, so deleting the Preppit deletes it too, and revoking the link stops the page opening at all. If you type a colleague’s address into the share sheet, Preppit sends them one email under your name with your request and the link. That address is held on that one Preppit — to send the invitation and, if they ask for it, the answer — and nothing else; a link in the email removes it in one click, revoking the link stops it being used, and deleting the Preppit deletes it.

Asking for a place

Anyone can make an account. If you joined the waiting list while Preppit was invite-only, or join it from a page that still offers one, we hold your email address, the page you asked from, the date, and — only if you write one — what you said you would use it for. That is kept so we can email you about your place and about Preppit opening; those emails are part of what you asked for, and you get them whether or not you tick anything else.

The form also offers one tick box: email me occasionally about Preppit. It starts unticked, it is never ticked for you, and ticking it is the only thing that puts your address on the mailing list. Leaving it alone costs you nothing but the occasional email. Every email sent on the strength of that tick carries a one-click unsubscribe that needs no sign-in, and your inbox's own unsubscribe button works too.

If you unsubscribe we keep the address marked as unsubscribed rather than deleting it, so that a later import cannot quietly put you back on. To have it removed altogether, write to privacy@preppit.ai.

The mailing list

Three kinds of address can appear on it, and they are not treated alike. Someone who has an account may get occasional product and service email about the thing they signed up for. Someone who ticked the box on the request form has consented, and may be emailed until they unsubscribe. An address a customer typed into a share sheet was given to us by someone else, for one purpose — it is marked as having no marketing consent, it is left out of any export used for sending, and it is never mailed. We record consent as it was given; we never infer it from the fact that we hold an address.

Logs

The server keeps ordinary operational logs — errors, timings, sizes and counts — and never the contents of a canvas, a picture, a note or a voice recording. A diagnostics panel exists for debugging on devices without a console; it is off by default, shows only sizes and types, and stays on your device.

What Preppit does not hold

Your conversations with the AI. Preppit sends a brief into a conversation and can be asked by the AI for a canvas by id; it cannot read the conversation, your chat history, the AI's memory, or files you have uploaded elsewhere. It sets no advertising or tracking cookies. We count page views and a handful of product steps (a demo drawn on, a board served, a door chosen, a place held on the waiting list) without identifying you: no cookie, no id, and the address is hashed with the day so the count means nothing tomorrow. Those counts are kept for ninety days.

Where it goes

When you send a canvas, the brief and its pictures go to the AI you chose — Anthropic's Claude or OpenAI's ChatGPT — through the connector you added there. From that moment their privacy terms govern that copy. Preppit gives the AI the pictures only when it asks for them by id.

If someone pastes a Preppit link into a Slack workspace that has added our Slack app, Slack is given the brief's title, sender, text and a card image to show under the link.

We use these providers to run the service. Each acts on our instructions; none is allowed to use your content for anything else, and none may train a model on it.

We do not sell your data, share it with advertisers, or use your canvases, pictures, notes or recordings to train any model.

How long

• Account and everything under it: until you delete the account.
• Canvases, pictures, transcripts and records: on Pro and Firm, until you delete them or the account. On Free, sent records older than 30 days move to the bin, where they stay a further 30 days before they are gone; a record you have pinned is never removed automatically. When a paid plan ends, nothing moves to the bin until 30 days after we have emailed you.
• Notes added through a colleague link: as long as the Preppit they are on.
• A request for a place: until the batch is closed and you have either joined or told us to remove it; at most two years from the request.
• Mailing list: until you unsubscribe. An unsubscribed address is kept, as an address and a date only, so you are not re-added by a later import.
• AI reads: stored with the Preppit; the provider keeps nothing.
• Payment records: receipts for six years, as tax law requires, at Stripe and in our accounts.
• Original files: kept by default with your Preppit so requested changes can be applied to the original. Turn this off in your account or for an individual upload. An organisation may prevent retention for its members. Originals remain while the Preppit is in the bin and are removed on permanent deletion. If retention is off, we process the file but keep only the imported pages and their content.
• Voice audio: kept so a note can be played back before you send; deleted with the canvas it belongs to.
• Connector tokens: until you revoke them. Revoking one is immediate.
• The connected-AIs list: held in memory and forgotten when the server restarts.
• Server logs: for the short period our hosting provider keeps them — days, not months.
• Backups: our database provider may keep rolling backups for up to 7 days; deleted data leaves them on that schedule.

Your controls

• See it: Previous work shows every record; the account page lists every connector link.
• Take it away: the account page exports everything under your account as one file.
• Delete some of it: any canvas or record can be deleted from Previous work; a conversation that already received it keeps its copy but can no longer fetch it again.
• Delete all of it: the account page deletes your account and everything under it. This is immediate and cannot be undone.
• Revoke a connector: from the account page, one link at a time; that AI stops being able to reach anything of yours.
• Stop the email: the unsubscribe link in the footer of any marketing email, in one click, with no sign-in. Email you asked for — a sign-in link, a document someone sends you — is not marketing and carries no unsubscribe, because there is nothing to unsubscribe from.

Under UK data protection law you can also ask us to correct something, to restrict or object to how we use it, or to send you a copy, and you can complain to the Information Commissioner's Office. Write to privacy@preppit.ai; we answer within a month.

Legal basis

We process your account and your canvases because that is the service you asked for (performance of a contract). We keep operational logs and the connected-AIs list because running a reliable service depends on them (legitimate interests). We ask for microphone access before recording and only record while you hold the button (consent). We keep a request for a place, and send the two emails that go with it, because that is what you asked us to do (legitimate interests, and the request itself). We send marketing email only where you have ticked the box (consent), or, to people who already have an account, about the service they signed up for (soft opt-in under PECR) — and in both cases only until you unsubscribe.

Security

Traffic is encrypted in transit. Connector tokens are stored hashed. Each account's data is separated from every other's in the database and in file storage. If you find a vulnerability, please tell us at security@preppit.ai; we will acknowledge within two working days and will not take action against good-faith reports.

Children

Preppit is not for anyone under 13, and is not designed for use by children.

Changes

When this page changes in a way that matters, the date at the top changes and we email everyone with an account.