Privacy statement.

What we collect and why

We collect account names and email addresses, business and location details, team profiles, food safety records, supporting files and the dates and people associated with those records. We use them for sign-in, team access, daily record keeping, reminders, reports, support and protecting the service. Staff sickness records may contain sensitive information; include only what your business needs and use the access controls provided.

Website enquiries are used to reply to you. Do not send staff health information or other sensitive operational records through public enquiry forms. Technical error and security logs help us diagnose problems; passwords, authentication tokens and sensitive record values are excluded from application logs.

Who can see it

Your business’s Admins and Managers control team access. Staff access is limited by their role and assigned locations. We may access information when necessary to provide support, investigate a security issue or meet a legal obligation. We do not sell your information.

Reports and exports contain information about the people who performed checks. If a manager creates a public report link, anyone with that link can read its permitted evidence until it is revoked or expires. Share links and downloaded files only with appropriate recipients.

Service providers and overseas processing

Our database and file storage use Supabase in Sydney, Australia. The API, report service and our encrypted weekly backups run on Fly.io in Sydney. Cloudflare hosts the website. Resend handles account and notification emails; Google Firebase handles phone notifications; Sentry handles error diagnostics. These providers may process operational information outside New Zealand and Australia. Notifications are not used to send full food safety records or staff sickness details.

Google or Apple also processes your sign-in if you choose that option. Payments are not enabled on free accounts; we do not collect payment-card details.

Retention, access and corrections

Records are kept while your business uses the service. Ending access does not automatically delete evidence: our retention policy keeps each record for at least four years from creation, subject to legal holds. Backup copies are encrypted; the four most recent weekly copies are kept and older copies are deleted when a newer one completes. Information removed from the service can remain in these encrypted backups until they are replaced. Requests to remove personal details are assessed separately so that required evidence and attribution can be preserved.

You can ask for access to or correction of your personal information, or raise a privacy concern, by emailing [email protected]. We may need to verify your identity. You can also contact the New Zealand Privacy Commissioner. We will update this statement if the service or its providers change.