A preference is not permanent. Build private personalization that can change with context.
Collect only chosen private context.
Name purpose, source and expiry.
Include setting, goal and energy.
Offer correction, deletion and export.
Personalization should remain revisable.