Privacy notice

Who we are

Chef Hygiene is run by Jetmeaway Ltd. We are the controller of the personal data described in this notice, for the Chef Hygiene website and app. You can contact us at info@chefhygiene.com.

When a business uses the app, the records it keeps about its kitchen and its staff belong to that business. For those records the business is the controller, and we process them for it, only to run the app.

What we collect in the app

• Your account: your email address, your name if you sign in with Apple or Google, and how you sign in. Passwords are kept only in a scrambled form that nobody can read. When you sign up, we also note the country you signed up from and which app you used (iPhone, Android, Windows or browser); we do not keep your IP address.
• The business: its name, address, food hygiene rating, sites and opening times.
• The team: staff names, languages, jobs and roles, and managers’ email addresses. Staff PINs are kept only in a scrambled form.
• The kitchen’s records: checks, temperatures, cleaning, deliveries, batches, notes (in the language they were written in, with an English copy), photos, scanned paper records, documents and certificates, complaints and accidents.
• Health records: when staff are ill or come back to work. Food hygiene law asks businesses to keep ill staff away from food, so the business records this. Only its owners and managers can see these records.
• Devices: which kitchen tablets and staff phones are joined to the business, and a notification address for each phone or browser that turns notifications on.
• Inspector links: when a business shares a secure link with an inspector, when the link was opened.
• Error reports: when something goes wrong in the app, what failed, on which screen, the type of device and the app’s version. They never include the kitchen’s records, photos or anyone’s email address.
• AI inspections: if a business uses the AI inspector, the photos taken for it (of the kitchen, not of people), the chef’s answers to its questions, and its report.
• Purchases: for subscriptions and AI inspections bought in the app, what was bought, when, and for which site. Apple or Google takes the payment, and we never see card details.

The app also keeps a copy of its screens and of checks not sent yet on the device, so it works without internet.

What we collect on the website

When you join the waiting list, we collect:

• your name and email address
• your phone number, if you give it
• for restaurants: business name, type of business, postcode, number of sites and the languages your staff speak (if you tell us)
• for engineers: your trade, the area you cover and your Gas Safe number (if you tell us)
• the page you signed up on, and the date and time

Why we use it

• To run the app for the business and its staff: keeping its records, showing what is due, sending the notifications and emails it asks for, and letting an inspector see the records it shares. Our legal basis is our contract with the business.
• To check the photos and answers of an AI inspection when a business asks for one, and to write its report. Our legal basis is our contract with the business.
• To tell you about Chef Hygiene by email or notification: news, new features and changes to the service. Every such email has a link to stop them; emails about your account, like sign-in codes, still come. Our legal basis is our legitimate interests in keeping our customers informed.
• To email you about the launch and invite you to try Chef Hygiene, if you joined the waiting list. Our legal basis is your consent, which you give by ticking the box. You can withdraw it at any time.
• To keep the website and app working and safe, for example to find and fix errors and to block spam and misuse. Our legal basis is our legitimate interests in running a secure service.

We do not sell your data and we do not use it for advertising.

Who we share it with

Only the service providers that help us run Chef Hygiene. They may only use your data to provide their service to us:

• Supabase: our database, file storage and sign-in. The data is stored in London, in the UK.
• Vercel: hosting for the website and the web app.
• Resend: sending our emails, such as sign-in codes.
• Google Firebase: sending notifications to phones and browsers that turn them on.
• Sentry: error reports, so we can find and fix problems. They are stored in the EU, in Germany.
• Anthropic (Claude): checks the photos and answers of AI inspections and writes their reports. It does not use them to train its AI, and normally deletes them within 30 days. It works in the United States.
• Help chat (in the app and on this website): your questions and the conversation so far are sent to Anthropic (Claude) to write the answer. Anthropic does not use them to train its AI. We keep the questions you type into the help guide, without your name, login or internet address (personal details like email addresses and phone numbers are removed automatically), for up to 12 months, to improve the app and the guide. We also count how many messages each person sends in a day (by your login in the app, or a scrambled form of your internet address on the website), and delete those counts after 2 days. Don’t type personal details into it.
• Apple and Google: if you choose to sign in with them, and to take payments for what is bought in the app.

An inspector sees a business’s records only when the business shares a link with them. Where a provider processes data outside the UK, we make sure it is protected by safeguards approved under UK law.

How long we keep it

• The app: for as long as the account is open. Inspectors expect kitchens to keep their records, so we suggest keeping them for at least 2 years. The business can download its records at any time.
• The waiting list: until 12 months after we launch, or until you unsubscribe or ask us to delete it, whichever comes first.
• Help chat questions: up to 12 months, without your name, login or internet address.

Deleting your account

You can delete your account in the app: on Home, tap “Your account”, then “Delete my account”. To keep you safe, we email you a code first, and the account is deleted 30 days after you ask. Until then you can keep it. We email you when you ask, and again when it is deleted. The steps are also at app.chefhygiene.com/delete-account.

Deleting the account of a business’s only owner also deletes the business: every site, record, photo, staff member and tablet. Please download your records first, because the law may expect you to keep them. Deleting a manager’s account removes only the manager; the records they signed keep their name. Deleted data can stay in our providers’ backups for up to 30 days until they are overwritten.

Diners

Diners can make a free account on chefhygiene.com/diners. We keep your email (to sign you in with a code), your phone number, your country and town or area (and, in the UK, only the first part of your postcode, such as WC2), the nickname you choose and, later, the votes you give. We use them to run your account and, when voting starts, to keep votes fair (one person, one vote). We keep your area to show you restaurants near you.

• The public only ever sees your nickname. Your email and phone are never shown, and restaurants never see your details.
• We send you news and offers only if you tick the box for it. You can change your mind at any time.
• If you invite a friend by email, we send them the one email you ask for, and we don't keep your friend's email address.
• You can delete your diner account at any time on chefhygiene.com/diners. It is deleted at once, with your email, phone and nickname.

Engineers

Engineers can make an account in the app. We keep your trading name, contact name, phone number, email, the trades you do, the areas you cover, your hours and the certificates you upload (with their numbers and expiry dates). Restaurants in your areas see your trading name, contact name, phone, hours and, for gas, your Gas Safe licence number. Your certificate files are private: a restaurant sees them only after you tap Share, for 7 days, and we keep a record of each request. We remind you before a certificate expires. You can delete your engineer account in the app at any time.

Chef Hygiene connects restaurants and engineers. We are not the contractor and we do not check registrations or certificates. Restaurants should check the official register (for gas, the Gas Safe Register) before any work.

Your rights

You can ask to see, correct or delete your data, withdraw your consent, or object to how we use it. Contact us at info@chefhygiene.com. If you are staff at a business, you can also ask the business. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes

If we change this notice, we will update the date at the top of this page.