Privacy Policy — United States

📍 Select Your Region: UK (GDPR) USA (CCPA) Japan (APPI) France (RGPD)

CompliChef Lite is operated by CompliChef, a UK-registered company providing food safety compliance software to USA businesses. Our primary data servers are located in the United Kingdom.

Data Controller: CompliChef Ltd (UK)
Privacy Enquiries: privacy@complichef.me

Note: If you are a California resident, additional rights under the California Consumer Privacy Act (CCPA) apply — see Section 9 below.

2. Data We Collect

Account Data

Name, email address, authentication provider (email or Apple ID), and account role.

Business Data

Business name, address, type, and region for compliance localisation.

Compliance Records

Temperature logs, hot holding sessions, reheating records, delivery checks, cooldown records, probe calibrations, cleaning tasks, checklists, and daily diary entries you create in the app.

Subscription Data

Plan type and renewal status. Payment processing is handled entirely by Apple — we never store card or payment details.

Device Data

Device UUID (for offline sync conflict resolution only) and API request metadata.

3. How We Use Your Data

We use your data solely to provide and improve CompliChef Lite:

Create and maintain your account and business profile
Store, sync, and display your compliance records
Calculate CompliClub rewards points and ranks
Generate reports and PDF exports (PDFs are processed locally on your device)
Power the opt-in CompliClub leaderboard (business name and points only)
Verify your subscription status with Apple
Send essential transactional communications

We do not use your compliance records for advertising, profiling, or any purpose beyond providing the service.

4. CompliClub Leaderboard

If you opt in to the CompliClub leaderboard, only your business name and total Chef Points are visible to other opted-in users. No personal data, staff data, or compliance records are shared. You may opt out at any time via Settings → CompliClub → Join the Leaderboard toggle, and your entry is removed immediately.

We process your personal information on the following legal bases:

Contract Performance — To provide the service you subscribed to
Legitimate Business Interest — To improve the service, prevent fraud, and maintain security
Consent — For optional features such as the CompliClub leaderboard
Compliance with Law — Where required by statute or regulation

Compliance records are retained for a minimum of 12 months to support food safety compliance and audit trails.

Account data is retained for the duration of your subscription and up to 12 months after cancellation to satisfy federal accounting and tax retention requirements.

You may request account deletion at any time by emailing privacy@complichef.me. Note that deletion may be delayed if required by law.

Data Location: Your data is stored on servers in the United Kingdom. International transfer of data to the UK is authorized under applicable US law.

Security measures include:

TLS 1.2+ encryption for data in transit
bcrypt password hashing
Regular security audits
Access controls and authentication

Apple Inc. (USA) — Subscription validation
UK Hosting Providers — Infrastructure and storage

We do not sell personal information. We share data only as necessary to provide the service or as required by law.

10. Changes

We will notify you of material changes to this policy via in-app notice or email. Continued use after changes take effect constitutes acceptance.