Privacy policy
Last updated 28 October 2026
Klidy keeps food safety records for UK food businesses. We collect only what the app needs to do that. We don't sell your data, show adverts or track you across other apps or websites.
Who we are
Klidy is run by Human Robotics Institute, 73 River Road, Barking, Essex, IG11 0DR. Questions about your data: help@klidy.co.uk.
When a business uses Klidy to record its staff's checks and training, the business decides what goes in. For that data, the business is the controller and Klidy processes it on the business's behalf. For the account owner's own details and billing, Klidy is the controller.
What we collect
| Who | What | Why |
|---|---|---|
| Account owner | Email address, password (stored scrambled, never readable), business and site names | To sign in and run the account |
| Staff | Short name, full name, role, optional email, a 4-digit PIN (stored scrambled) | To show who did each check, and to put the right name on certificates |
| Food safety records | Checks, temperatures, notes, corrective actions, photos of delivery notes, the time each was recorded and which device recorded it | The records themselves, and the EHO compliance pack |
| Training | Courses given, progress, test answers and results, certificates issued or uploaded | To run courses and keep training records |
| Documents | Certificates and premises documents (gas, electrical, fire, pest control, insurance) you upload | To keep them with your records and in the EHO pack |
| Help messages | What you write to us in Manage > Help | To answer you |
| Billing | Plan, renewal dates, and the payment provider's customer reference. We never see or store card numbers. | To know what's paid for |
The app doesn't use your location, contacts or advertising ID. It uses the camera only when you choose to take a photo.
Our legal basis
We use account, records and training data to provide the service you signed up for (contract). We keep billing records because tax law requires it (legal obligation). We use help messages to answer you and improve Klidy (legitimate interests).
Who we share it with
Only these services, and only to run Klidy:
| Service | What it does | Where |
|---|---|---|
| Supabase | Stores the database, files and sign-ins | London, UK |
| Vercel | Hosts the app and its server functions | UK/EU and USA |
| Stripe | Takes card payments on the website | UK/EU and USA |
| Apple App Store, Google Play | Take payments made in the phone apps | Global |
| RevenueCat | Keeps track of App Store and Google Play subscriptions | USA |
| Resend | Sends emails such as certificates | USA |
| Apple iCloud Mail | Receives email sent to help@klidy.co.uk | Global |
Where data leaves the UK, these providers use the UK's approved safeguards, such as the International Data Transfer Addendum or the UK–US data bridge. We share data with anyone else only if the law requires it.
How long we keep it
- Records, staff and documents: while the account is open. If a plan ends, the account becomes read-only and the EHO pack can still be downloaded. After an account is deleted, see Deleting your account.
- Klidy International Academy certificates: 3 years from issue, so they can still be checked.
- Billing records: 6 years, for tax.
- Help messages: 2 years after the last message.
Your rights
You can ask to see, correct, download or delete your personal data, or object to how we use it. Staff should ask their employer first, because the business controls its records. Email help@klidy.co.uk and we'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Klidy is for businesses and their staff. It isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date at the top and tell account owners about any important change.