Privacy Policy
This policy explains what personal data the HACCPapp Android app (package com.haccpapp.app), the web dashboard at dashboard.haccpapp.net and the website haccpapp.net process, why, and what control you have. Questions: [email protected].
1. What we collect
| Data | Why |
|---|---|
| Account: email address, display name, sign-in method (email and password, or Google Sign-In). Handled by Firebase Authentication. | To create and secure your account. |
| Business profile: business name, type, address and country, team member names and roles, optional food-handler certificate dates. | To run the app and print your records. |
| Food safety records you enter: temperature readings, opening and closing checks, cleaning logs and schedules, deliveries, incidents and corrective actions, pest control visits, suppliers, menu items and allergens. | This is the service itself. Records sync to our cloud so they survive a lost phone and can be shown to an inspector. |
| Photos you take with the in-app camera (for example cleaning or delivery evidence). Camera permission is used only when you take a photo. | To attach evidence to a record. |
| Device push token (Firebase Cloud Messaging). | To send reminders and app update notices. |
| Usage and device analytics (Firebase Analytics): app events such as sign-up, trial start and report generated, plus the Android advertising ID. | To understand which features work and to measure Google Ads installs. |
| Subscription status. Payment is handled entirely by Google Play. We never see your card details. | To unlock paid features. |
2. Where data is stored
Data is kept on your device (local database), in Google Firebase (Firestore, Authentication, Cloud Messaging, Analytics) and on servers we control for photos, report generation and sync. Google processes Firebase data under its own terms and may transfer it outside the UK and EEA with appropriate safeguards.
3. Who sees it
We do not sell personal data. Data is shared only with the service providers needed to run the app (Google Firebase, Google Play, our hosting provider) and when you choose to export or show a report, for example an EHO inspection pack. The public allergen menu page (haccpapp.net/m/...) is shown only if you switch it on, and contains only the menu and allergen information you publish.
4. Legal basis (UK and EU GDPR)
Contract (providing the app you signed up for), legitimate interests (security, fraud prevention, product analytics) and, where required, consent (advertising ID and analytics, which you can limit in your Android settings).
5. How long we keep it
Records are kept while your account is active and for up to 2 years in the cloud archive so they are available for inspections. When you delete your account, server-side data is erased (see below). Firebase Analytics data is retained by Google for the period configured in our Firebase project (up to 14 months).
6. Your rights
You can access, correct, export or delete your data, object to processing, and complain to your data protection authority (in the UK, the ICO). Most of this is available inside the app. Otherwise email us and we reply within 30 days.
7. Deleting your data
In the app: Settings, Delete account. This removes your account and the cloud data for your business. You can also follow the steps on our account and data deletion page.
8. Children
HACCPapp is a business tool and is not directed at children under 16.
9. Security
See our security page. Data is encrypted in transit (HTTPS) and access to each business's records is restricted to the signed-in owner.
10. Changes
If we change this policy we will update the date above and, for material changes, notify you in the app.