Privacy policy

Who we are

KebabSafe is a food hygiene and health and safety record-keeping app for UK takeaways and kebab shops. The company details published in the app are Lincoln Tradeworx Ltd, company number 16957370. Which company acts as the data controller for the information described in this policy is still being confirmed, and the controller will be named here once that is settled.

Records are restricted to the account that created them and the app's administrators. Shared access between separate staff accounts is not currently confirmed. Your account, business profile and membership data are used to run the service. The sections below set out the detail.

What we collect

• Account details: your name, email address, your role (owner, manager or staff) and your sign-in credentials, which are handled by our platform's authentication system.
• Business details: the business name and address you enter when you register, plus your shop profile if you add one — shop name, address, phone number, food business registration number, manager name and optional description.
• Compliance records you create: temperature checks (equipment name and type, temperature, time, whether it passed, who recorded it and any notes), cleaning logs, fryer and oil changes, opening and closing checklists, delivery checks (supplier, items delivered, delivery temperature, packaging condition, who received it), allergen checks, equipment checks, fire safety checks, incident reports (type, severity, description, people involved, witnesses, actions taken) and staff training records (staff name, training type and dates, certificate number, provider).
• Photos and documents you attach to those records, such as equipment photos and training certificates. You choose these yourself through your device's file or camera picker, so the app only receives the images you deliberately select. On phones, the app may prompt for camera or photo access at that moment; nothing is read from your device without that action.
• Membership and payment details: plan type, membership status, start and end dates and how many staff accounts you are allowed. Card details are entered on Stripe's own checkout page — we never see or store your card number. We keep the Stripe references for your customer, subscription, payment and checkout records, and the amounts paid, so a payment can be matched to the right account.
• Deletion requests: the email address, name and account identifier used to ask for your account to be deleted, and notes we add while handling it.
• Usage information: our platform records page traffic and simple in-app events such as a trial being started, a log being submitted or a report being exported. These events carry an event name, not the contents of your records.
• Information kept on your device: your chosen language and a one-time sign-up flag are stored in your browser's local storage, and any form entries you have not yet saved are kept in session storage until you save them or leave the page.

Why we use it

• To give you the service: creating your account, storing your records, showing them back to you and producing the reports you export.
• To keep the app secure and working: preventing misuse, diagnosing faults and understanding which features are actually used.
• To run memberships: starting free trials, matching payments to accounts and dealing with billing questions.
• To answer you: responding when you contact us about support, billing or a deletion request.
• To promote KebabSafe: measuring whether our advertising leads to sign-ups, using the tags described below.

Who we share it with

We do not sell your information. We share it only with the providers that run the app and its payments:

• Base44, the platform KebabSafe is built on. It provides our hosting, database, sign-in, file storage, email delivery, usage analytics and the AI integration described below.
• Stripe, which takes card payments for memberships. Payments are made on Stripe's own checkout pages and are subject to Stripe's privacy policy.
• Google, through Google Ads and the Google tag loaded in the app. We use it to measure whether our advertising leads to sign-ups. This shares a pseudonymous account identifier and advertising cookies with Google; it does not share the contents of your compliance records.
• The platform's AI integration, which is used only when you generate a written report from your records. The records included in that request are sent to the AI provider to produce the report text.

We may also disclose information where the law requires it, for example in response to a valid request from a regulator or an environmental health officer with lawful authority.

Where your information is held

Your account data, records and attached files are held in our platform provider's cloud database and file storage. Our providers are international companies, so your information may be processed outside the UK.

How long we keep it

• Shop profiles and compliance records are stored to provide your account history and reports. Exact retention periods and the procedure for removing associated data after an account deletion request are still being confirmed.
• Billing and payment records are kept as long as we need them for accounting, tax and dispute handling.
• Deletion requests are kept as a record that we received and actioned your request.
• Whether backups retain deleted data, and for how long, still needs to be confirmed with the platform provider.

The exact period for each of these is still being confirmed — those periods are listed under Still being confirmed, rather than being left to guesswork.

Your choices and rights

Under UK data protection law you can ask to see the information we hold about you, have it corrected, have it deleted, restrict or object to how it is used, and receive a copy in a portable format. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Inside the app you can export your records from the Records screen at any time, update your business details in Settings, and request permanent deletion of your account from Settings. For anything else, contact us using the details at the end of this policy.

Deleting your account

Settings includes an account deletion request option for account holders with access to Settings. It records a request and signs you out; it does not itself delete accounts or records or cancel billing. The identity checks, data-removal procedure, billing cancellation and completion time still need to be confirmed. Reports already exported remain on your device. You can also request deletion through the support email below.

You can also send a deletion request by email if you prefer.

How we protect your information

• Each account signs in with its own credentials, and shop records are only visible to the accounts that own them and to the app's own administrators.
• Attached photos and certificates are stored in the app's file storage and are reachable by anyone who has the file link, so treat those links as sensitive and share them only with people you trust.
• No system is perfect. Keep your sign-in details private, and tell us straight away if you think someone else has accessed your account.

Cookies and local storage

KebabSafe keeps your language choice and a one-time sign-up flag in your browser's local storage, and holds unsaved form entries in session storage until you save them or close the page. Our advertising tags may set Google cookies so we can tell whether an advert led to a sign-up. You can clear local storage, session storage and cookies at any time in your browser settings; clearing the language setting simply returns the app to English.

Children

KebabSafe is a business tool for food businesses and their staff. It is not intended for children, and accounts should be held by adults.

Still being confirmed

These details are not settled yet. We would rather mark them as open than state something we cannot stand behind, and each one will be filled in here once it is confirmed:

• Which company is the data controller for each part of the service. The company details published in the app are not, on their own, a statement of who the controller is.
• The exact retention periods: how long records, billing data, deletion requests and platform backups are kept.
• The complete list of providers we share information with, including which AI provider handles report generation.
• Where our providers hold data, and the safeguards relied on when information is processed outside the UK.
• How long a verified deletion request takes to complete.
• Our Information Commissioner's Office registration details.

Changes to this policy

If the app changes in a way that affects your information, we will update this page and change the date at the top. Please check back if you want to see the current version.

Contact us

Questions about this policy, or about the information we hold for your shop, can go to info@kebabsafe.uk or through our contact page. If you are asking about your shop's account, include your shop name and the email address you signed up with so we can find it quickly.