PrepAIred privacy policy

Effective 3 November 2026

The short version. PrepAIred is built to work with no internet, so almost everything happens on your phone and stays there. There is no account, no email address, no phone number and no real name. There are no adverts, no tracking and no analytics, and we never sell data. What does leave your phone is listed below, with how long it is kept.

1. Who we are

PrepAIred is provided by Nural AI Ltd, a company registered in England and Wales (company number 16667502), registered office 20 Wenlock Road, London N1 7GU ("we", "us"). We are the data controller for the information described here. Contact us about privacy at sam@nural-ai.com.

2. What stays on your phone

These never leave your phone. We cannot see them.

Questions you ask the AI, and its answers. The AI runs entirely on your phone.
Photos you ask about. They are looked at on your phone and not uploaded.
Your nearby chat history, contacts and the name you choose for nearby chat.
Your location as you use the map. Routes and shelters are worked out on your phone.
Downloaded maps, guides, the offline library and the AI model.
Your settings, including notification choices and your region.

3. What leaves your phone, and why

Official warnings and local reports (our server)

To show warnings and reports near you, the app sends our server a rough location, rounded to about 100 metres. It does this when you open Alerts, and in the background if notifications are on. Our server then looks up official sources, such as the Environment Agency, the Met Office, the US National Weather Service, NDMA India, GDACS and the US Geological Survey. Those sources never receive your location. Whether to notify you is decided on your phone.

If you use local reports, the app creates an anonymous key on your phone. The server sees only this key and a name generated from it, such as "Quiet Otter 42". With it, the server keeps:

Reports you post: the type, your text and the place, rounded to about 1 km (about 100 m for things like blocked roads, where the exact spot matters).
Your votes and flags on other reports.
Messages you post in area chat rooms (for adults only).
A trust score, built from how often your reports are confirmed, plus any in-person vouches.
The areas you have checked in to, as cells of roughly 20 km across, and on which days, for the last 14 days. This is only used to label posts "local" or "visitor".

Nearby chat over Bluetooth

Phones nearby with PrepAIred can see that your phone is there and the name you chose for nearby chat.
Messages are encrypted end to end. Messages for someone out of range may be carried by other PrepAIred phones, sealed so those phones cannot read them.
If you turn on location sharing, your rough position (about 100 m) is sent, encrypted, only to phones you are connected to.
Hazard reports sent over Bluetooth can be read by PrepAIred phones nearby, with the place rounded to about 1 km. A phone that later has signal may upload them to our server, where they are treated like any other report.

SOS

When you send an SOS, any phone nearby can see that an SOS is active and how strong its signal is, so people can find you. The details you add (where you are, who is hurt or trapped, how many people, your note) are sealed so that only verified emergency responders can read them. Other PrepAIred phones carry the sealed SOS onwards but cannot open it. We use this information to help protect life.

Purchases

PrepAIred Plus is bought through the App Store or Google Play. They handle payment; we never see your card details or your name. We use RevenueCat to confirm purchases. It receives a random ID created by the app and your purchase records from Apple or Google. Restore purchases uses your store account to find what you bought.

Downloads

When you download things, the service you download from sees your IP address, as with any download:

the AI model, from Hugging Face;
maps and content updates, from our storage on Google Cloud;
offline library books, from Kiwix.

Server logs

Like any web server, ours records each request for security and fault-finding, including the IP address and the rough location in the request. These logs are deleted after 30 days.

4. What we do not do

No accounts, email addresses, phone numbers or real names.
No adverts, advertising IDs, tracking across apps, or analytics tools.
No history of where you have been.
We never sell or rent personal data, or use it for marketing.

5. How long we keep it

What	Kept for
Local reports	Shown for up to 2 days, deleted after 7 days
Area chat room messages	Shown for 1 day, deleted after 2 days
Anonymous key, trust score and check-in areas	Until you delete it, or 12 months after you last used local reports
Server logs	30 days
Purchase records	As long as needed to provide what you bought, and as the law requires for financial records
Everything on your phone	Until you delete it or remove the app

Delete my data in Settings removes your reports, messages, vouches and trust score from our server straight away, and the keys, contacts and saved feed from your phone.

6. Our legal bases (UK GDPR and EU GDPR)

Legitimate interests: showing warnings and reports near you, keeping spam and false reports down, and keeping the service secure.
Contract: providing PrepAIred Plus when you buy it.
Vital interests: passing an SOS to responders.
Your permission: location, Bluetooth, camera, photos and notifications are only used once you allow them in your phone's settings, and you can turn them off there at any moment.

7. Where data is processed

Our server and storage run on Google Cloud in London. RevenueCat and Hugging Face are based in the United States, and Kiwix in Switzerland. Where data goes outside the UK or EU, it is protected by the safeguards the law requires, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, or an adequacy decision.

8. Your rights

You can ask to access, correct, delete or move your data, object to how we use it, or ask us to restrict it. Most of this you can do yourself in the app: Delete my data removes everything we hold. Because there is no account, we can only find your data from the anonymous key on your phone. For anything else, email sam@nural-ai.com. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Children

PrepAIred is not aimed at children under 13, and we do not knowingly collect their data. Area chat rooms are for adults only.

10. Security

Bluetooth messages and SOS details are encrypted. Content updates are signed so the app only accepts genuine ones. Connections to our server use HTTPS. Requests to change data are signed with your phone's key, so nobody else can post or delete as you.

11. Changes

If we change this policy, we will update the date at the top and, for important changes, tell you in the app.

PrepAIred does not replace the emergency services. If someone is in danger, call your local emergency number first.