Privacy Policy

Last updated: January 21, 2026

At Haccpy, we are committed to protecting your privacy and ensuring the security of your information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our kitchen compliance platform. We believe you shouldn't have to choose between safety and staff privacy, which is why we've built our platform with privacy at its core.

1. Information We Collect

1.1 Account and Business Information

We may collect information that you provide directly to us when setting up and using our platform, including but not limited to:

Name, email address, phone number, and contact information
Business information and company details
Kitchen location and facility information
Payment and billing information
Account credentials and authentication data
HACCP protocols and compliance requirements

1.2 Compliance and Monitoring Data

Our platform processes video data locally on the Haccpy Bridge device within your kitchen. We collect only compliance-related metadata, not raw video footage:

Compliance events (e.g., mask violations, glove compliance)
Timestamped HACCP checklist submissions
Attendance and staffing data
Violation alerts and notifications
Device information and system status

Important: All video processing happens edge-only on the Haccpy Bridge device. We never stream or store raw video footage in the cloud. Only compliance metadata (results) is transmitted to our cloud platform, and all communication is encrypted.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our kitchen compliance platform
To process transactions and manage your account
To monitor and report on kitchen compliance (PPE detection, HACCP checklist completion)
To generate compliance reports and inspector-friendly documentation
To communicate with you about our services and updates
To detect, prevent, and address technical issues and security threats
To comply with legal obligations and regulatory requirements
To analyze compliance patterns and improve kitchen safety outcomes

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We may share information with trusted third-party service providers who assist us in operating our platform and conducting business operations
Legal Requirements: We may disclose information if required by law, court order, or governmental authority
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction
With Your Consent: We may share information with your explicit consent or at your direction

4. Data Security and Privacy Architecture

We implement industry-standard security measures and a privacy-first architecture to protect your information:

Edge-Only Processing: All video processing happens locally on the Haccpy Bridge device within your kitchen. No raw video leaves your premises.
No Cloud Video Storage: We never stream or store raw video footage in the cloud. Only compliance metadata (results like "Mask violation at 10:00AM") is transmitted.
Encrypted Communication: All communication between the Bridge and Cloud is encrypted using industry-standard protocols (TLS/SSL).
Secure Data Storage: Compliance metadata is stored with encryption at rest and access controls.
Regular Security Assessments: We conduct regular security audits and assessments.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Your Rights and Choices

You have the following rights regarding your personal information:

Access: You can request access to your personal information
Correction: You can request correction of inaccurate or incomplete information
Deletion: You can request deletion of your personal information, subject to legal and contractual obligations
Objection: You can object to certain processing activities
Data Portability: You can request a copy of your data in a portable format
Cookie Preferences: You can manage cookie preferences through your browser settings

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can control cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Haccpy
Email: info@haccpy.com
Phone: +971 58 962 0663
Address: Dubai, United Arab Emirates