BakeSafe Privacy Policy

Contact: bakesafehelp@gmail.com

Controller and contact: BakeSafe is provided by bakesafeuk. Contact us at bakesafehelp@gmail.com about privacy or data requests. This notice explains how BakeSafe handles personal data under UK data protection law.

Account data: When you sign in with Google, BakeSafe receives your Google email address, display name if provided, and Firebase account ID. We use this to sign you in, keep your records separate, and sync your account across your phone, tablet and laptop.

Records you enter: BakeSafe stores the compliance information you add, including temperature logs, daily diary entries, 4-weekly reviews, allergen and ingredient records, label details, supplier details, stock records, availability, customer orders, invoices, business name/address and settings. Use first names only for customer orders and avoid adding unnecessary personal information.

Photos and label scanning: If you use photo or bulk photo scanning, the images are sent securely to BakeSafe's cloud scanning service, supported by Google cloud processing services, to read ingredient and allergen information. BakeSafe stores the extracted text you choose to keep, not the original photo as a permanent account record.

Notifications: If you turn on notifications, BakeSafe stores a device push token and your reminder settings so Firebase Cloud Messaging can send order, stock expiry and FSA alert notifications. You can turn reminders off in BakeSafe and can also block notifications in your device settings.

Payments and subscriptions: If you subscribe, payment is handled by Stripe. Stripe processes payment and billing information such as your name, email address, billing address, payment method details, payment status, invoices and fraud checks. BakeSafe stores Stripe customer/subscription IDs and subscription status so we can manage access. BakeSafe does not store full card details.

FSA alerts: BakeSafe checks the public Food Standards Agency food alerts feed and compares relevant alert wording with your saved stock/allergen records so it can show matching alerts.

Local app storage: BakeSafe uses necessary browser/PWA storage such as localStorage, sessionStorage, cache storage and a service worker so the app can load, remember essential preferences, recover from cached app issues, and work as an installed PWA. BakeSafe does not use advertising or tracking cookies.

Why we use data: We use your data to provide the BakeSafe service, save and export your records, sync across devices, send reminders you enable, keep the app secure and reliable, and help you maintain food safety records. The lawful bases are contract, legitimate interests, and consent or device permission for notifications.

Who processes it: BakeSafe uses Google Firebase Authentication, Firestore, Cloud Functions and Cloud Messaging for sign-in, storage, processing and notifications, and Stripe for payment and subscription processing. BakeSafe's cloud scanning service, supported by Google cloud processing services, processes label photos when you choose to scan them. Your browser, operating system and device notification services may process app and notification data needed to deliver the PWA. We do not sell your data.

When we may share data: We may share relevant information if needed to prevent or investigate scams, fraud, abuse or security issues, to protect BakeSafe or other users, to comply with the law, or to respond to a valid request from a court, regulator, law enforcement or other public authority.

Where it is stored: Data is stored and processed using Google services. This may involve processing outside the UK. Where that happens, Google is responsible for using lawful transfer safeguards such as adequacy arrangements or standard contractual clauses.

Retention: Daily task records are deleted after 6 months. Customer order records are deleted after 3 months. Stock control is active stock only. Consent records are kept for legal purposes. Push tokens are kept while notifications are enabled or usable. Deletions are permanent, so export records you need to keep.

Your rights: You can ask to access, correct, delete, restrict or receive a copy of your personal data, and you can object to some processing. You can withdraw notification permission at any time. Contact bakesafehelp@gmail.com to exercise these rights. You can also complain to the Information Commissioner's Office at ico.org.uk.

Beta notice: BakeSafe is in testing and supports record-keeping, but you remain responsible for meeting your own food safety and business obligations. Do not rely on BakeSafe as your only compliance record.