Privacy Policy

Welcome to Be Prepared, operated by 6 Foot Media LLC ("we," "us," "our"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website and application (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Contact Information:
6 Foot Media LLC DBA Be Prepared
Email: privacy@beprepared.ai

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password (encrypted), location (city/region)
• Profile Information: Emergency preparedness plans, family size, scenarios of interest, existing preparedness level
• Payment Information: Credit card details processed securely by Stripe (we do not store full card numbers)
• Communication Data: Messages you send us, support requests, feedback, survey responses
• User-Generated Content: Plans you create, inventory you track, notes and customizations

2.2 Information Collected Automatically

When you access our Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent, click patterns, navigation paths
• Device Information: Browser type, operating system, device identifiers, screen resolution
• Analytics Data: Collected via Google Analytics to understand user behavior and improve our Service
• Log Data: IP address, access times, referring URLs, error logs
• Cookies: See our Cookie Policy for detailed information

2.3 Third-Party Services

We use the following third-party services that may collect information:

• Supabase: Authentication services and database hosting for your account and plan data
• Google Analytics: Website analytics and usage patterns (only if you consent)
• Stripe: Payment processing and subscription management
• Resend: Email delivery service for transactional emails (verification, password resets, notifications)

Each of these third-party services has its own privacy policy governing the use of your information. We encourage you to review their privacy policies.

We use the information we collect for the following purposes:

3.1 Provide and Maintain the Service

• Generate AI-powered emergency preparedness plans based on your inputs
• Create and manage your account
• Process subscription payments and manage billing
• Store your plans, inventory, and preferences
• Provide customer support and respond to inquiries

3.2 Improve and Optimize the Service

• Analyze usage patterns to understand how users interact with our Service
• Develop new features and improve existing functionality
• Fix bugs and optimize performance
• Conduct research and testing to improve AI-generated content quality

3.3 Communication

• Send transactional emails (account verification, password resets, subscription updates)
• Send service announcements and important updates
• Send newsletters and educational content (with your consent, you can opt out anytime)
• Respond to your comments, questions, and support requests

3.4 Legal and Security

• Comply with legal obligations and respond to legal requests
• Enforce our Terms of Service and other agreements
• Protect against fraud, unauthorized access, and security threats
• Protect the rights, property, and safety of Be Prepared, our users, and the public

Important: We do NOT sell your personal information to third parties. We do NOT use your information for advertising purposes beyond our own Service.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

Your Rights Include:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data
• Right to Data Portability: You can receive your personal data in a structured, machine-readable format and transfer it to another service
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Object: You can object to our processing of your personal data for certain purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

How to Exercise Your Rights:

To exercise any of these rights, please submit a request through our in-app data request form (available in your account settings under "Privacy & Data") or contact us at privacy@beprepared.ai. We will respond to your request within 30 days.

Identity Verification: To protect your privacy, we may require identity verification before fulfilling data requests. We may ask for additional information to confirm your identity.

Limitations: Some requests may be limited by legal obligations. For example, we may retain certain information as required by law or for legitimate business purposes (such as completing transactions or resolving disputes).

We use cookies and similar tracking technologies to collect and store information. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

Types of Cookies:

• Essential Cookies: Required for authentication and core functionality (cannot be disabled without affecting Service functionality)
• Analytics Cookies: Help us understand how users interact with our Service (Google Analytics - requires consent)
• Marketing Cookies: May be used for targeted content in the future (optional, requires explicit consent)

Managing Cookies:

You can manage your cookie preferences through:

• Cookie Consent Banner: Accept or decline non-essential cookies when you first visit our Service
• Browser Settings: Most browsers allow you to refuse or delete cookies
• Cookie Policy Page: Visit our Cookie Policy for instructions on clearing consent and updating preferences

Note: Disabling certain cookies may limit some features of the Service.

Security Measures:

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest in databases
• Secure Authentication: Industry-standard authentication via Supabase Auth
• Access Controls: Strict access controls limiting who can access user data
• Regular Security Audits: Ongoing security assessments and updates
• PCI-DSS Compliance: Payment data processed by PCI-DSS compliant providers (Stripe)
• Secure Infrastructure: Hosted on secure, SOC 2 compliant infrastructure

Data Retention:

We retain your personal data for as long as:

• Your account is active
• Needed to provide the Service to you
• Required by law or for legitimate business purposes
• Necessary to resolve disputes, enforce agreements, or protect legal rights

Account Deletion: When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).

We share your personal information only in the following circumstances:

7.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting and authentication services
• Stripe: Payment processing and subscription billing
• Google Analytics: Website analytics (only if you consent)
• Resend: Email delivery services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

7.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests (subpoenas, court orders, government inquiries)
• Enforcement of our Terms of Service or other agreements
• Protection of the rights, property, or safety of Be Prepared, our users, or the public
• Investigation of fraud, security issues, or other illegal activities

7.3 Business Transfers

If Be Prepared is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service before your information is transferred and becomes subject to a different privacy policy.

7.4 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. Our Terms of Service require users to be at least 18 years old to create an account.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@beprepared.ai. We will delete such information from our systems promptly.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible.

We are based in New Jersey, United States. Your information may be transferred to and maintained on servers located in the United States or other countries where our service providers operate.

If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries, where data protection laws may differ from those in your country of residence.

By using the Service, you consent to the transfer of your information to the United States and other countries. We take steps to ensure that your data receives adequate protection in accordance with applicable data protection laws, including:

• Using service providers that comply with international data protection standards
• Implementing appropriate safeguards for international data transfers
• Ensuring contractual protections for data transferred to third parties

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

We will notify you of any material changes by:

• Sending an email to the address associated with your account
• Posting a prominent notice on our Service
• Requiring you to accept the updated Privacy Policy before continuing to use the Service (for significant changes)

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, you should stop using the Service and may delete your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: