Privacy Policy for the HACCP App

Plain-English summary

HACCPapp is a digital HACCP app for food businesses. We collect only what the app needs to keep your temperature logs, daily checks and allergen records safe and inspection-ready. We never sell your data, never use it for advertising, and you can export or delete everything at any time.

1. Who we are

This privacy policy applies to the HACCPapp mobile application and the website at haccpapp.net. For the purposes of GDPR and the UK GDPR, HACCPapp is the data controller for the personal data described below.

If you have any question about this policy or how your data is handled, contact our privacy team at [email protected].

2. Information we collect

We deliberately keep data collection to a minimum. The HACCP app collects the following:

Account information

• Email address — used to create your account, sync your records across devices and contact you about your subscription.
• Business name and details — the name of your food business, sites, fridges/freezers and menu items that you enter so your records are organised and labelled correctly.
• Staff names (optional) — if you attribute checks to team members, the names you enter are stored to show who completed each record.

Food safety records you create

• Temperature readings, daily opening/closing checks, cleaning schedules, delivery checks, allergen matrices, incident and corrective-action logs, and any photo evidence you attach.

Technical information

• Device and diagnostic data — basic information such as app version, device model and anonymous crash reports, used only to keep the app stable and secure.
• Authentication tokens — secure tokens that keep you signed in and sync your records.

3. Google Play Data Safety disclosure

For full transparency, this table mirrors the Data Safety section shown on our Google Play listing.

All collected data is encrypted in transit using TLS, and you can request deletion at any time. See Account & Data Deletion.

4. How we use your data

We use your information solely to:

• Provide the core HACCP app functionality — storing, syncing and exporting your food safety records.
• Keep your records available for the 2-year retention period recommended by the UK FSA and EU HACCP guidance.
• Generate your inspection-ready PDF and compliance score dashboard.
• Maintain your subscription and provide customer support.
• Keep the app secure, diagnose crashes and prevent abuse.

We never use your data for advertising, profiling or sale to third parties.

5. Legal basis for processing (GDPR / UK GDPR)

• Performance of a contract — to deliver the app you've subscribed to.
• Legal obligation & legitimate interest — to help you meet your own statutory HACCP record-keeping duties under EU Regulation 852/2004 and the UK Food Safety Act 1990, and to keep the service secure.
• Consent — where you optionally provide additional information (for example, staff names or photos).

6. Sharing & third-party processors

We do not sell or rent your data. We share data only with the trusted infrastructure providers (sub-processors) that are necessary to run the app:

• Cloud hosting & database — to securely store and sync your records.
• Google Play Billing — to process subscriptions (Google, not us, handles all payment data).
• Crash diagnostics — anonymised stability reporting.

Each processor is bound by contract to protect your data and use it only to provide their service to us.

7. Storage, security & retention

Your records are stored offline-first on your device and synced to encrypted cloud storage. We protect data with TLS encryption in transit, access controls and regular backups. See our Security overview for detail.

Retention: we keep your food safety records for the 2-year period that food safety authorities expect, plus a short grace period. When you delete your account, your records are removed as described in our data deletion policy.

8. Your rights

Under GDPR and UK GDPR you have the right to:

• Access — request a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and records.
• Portability — export your records (the app's PDF export already provides this).
• Restriction & objection — limit how we process your data.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any right, email [email protected]. You also have the right to complain to your data protection authority (the ICO in the UK).

9. Deleting your data

You can request deletion of your account and all associated records at any time. Full instructions — including the in-app option and the web request form — are on our dedicated Account & Data Deletion page, as required by Google Play.

10. Children

HACCPapp is a business tool intended for food business operators and their staff. It is not directed at children and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy as the app evolves or the law changes. Material changes will be reflected here with a new "last updated" date, and significant changes will be communicated in-app.

12. Contact us

Questions about your privacy or this policy? We're happy to help.

This Privacy Policy was last updated on 18 June 2026 and is published at https://haccpapp.net/privacy/. It applies to the HACCPapp Android application and forms part of our Terms of Service.