Privacy Policy

1. Who is responsible for your data?

KitchenLog, operated by RCBM Apps, Blackpool, Lancashire, United Kingdom, is the data controller for the personal data processed through the service. We are registered in the United Kingdom.

Contact us about privacy at: hello@kitchenlog.online.

2. What personal data we collect

We only collect the data we need to run the service:

• Account data: name, email address, phone number and password hash when you sign up or are invited.
• Business data: venue name, address, role assignments and subscription details.
• Records you create: check results, temperatures, cleaning logs, delivery notes, corrective actions, photos, signatures and audit trails.
• Technical data: device type, browser, IP address, crash logs and push-notification tokens.
• Payment data: handled by Stripe; we do not store full card numbers.

3. Why we use your data

We use your data to:

• Provide, host and improve the KitchenLog service.
• Send daily reminders, alerts and important service messages.
• Generate reports, exports and audit trails for your business.
• Process payments and manage subscriptions.
• Keep the app secure and troubleshoot issues.

Our legal bases under UK data-protection law are: performing our contract with you, complying with legal obligations, and pursuing our legitimate interests in running a secure and reliable service. Where required, we ask for your consent (for example, for push notifications).

4. Who we share data with

We do not sell personal data. We use a small number of trusted service providers to host and operate the app:

• Lovable Cloud / Supabase — cloud database, authentication and storage.
• Stripe — payment processing.
• Web push services — delivery of reminder and alert notifications.
• AI services — optional product-scan and menu extraction features. Only the image or text you choose to scan is sent.

All providers are contractually bound to keep your data secure and to process it only on our instructions.

5. Where your data is stored

Data is stored in secure cloud infrastructure. We use providers that maintain appropriate safeguards for UK and EEA data-protection requirements. We do not transfer personal data outside the UK/EEA unless adequate protection measures are in place.

6. How long we keep your data

We keep your data for as long as your account is active, plus a reasonable period afterwards to support billing, legal claims and audit requirements. You can request deletion at any time; some information may need to be retained where the law requires it.

7. Cookies and similar technologies

We use a minimal set of cookies and local-storage items to keep you signed in, remember your theme preferences and measure basic app performance. We do not use third-party advertising cookies.

8. Your rights

Under UK data-protection law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to or restrict certain types of processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time (for example, for notifications).

To exercise any of these rights, email us at hello@kitchenlog.online. We will respond within one month.

9. Security

We protect your data using industry-standard measures, including encryption in transit, access controls, audit logging and regular backups. No system is completely secure, so please keep your login details safe and report suspected breaches to us immediately.

10. Children

KitchenLog is intended for business use and is not directed at children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy as the service or the law changes. We will notify you of material changes by email or through the app. Continued use after the effective date means you accept the updated policy.

12. Complaints

If you have a concern about how we handle data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.