Privacy Policy

1. Introduction

Reko is operated by Hollr Group Ltd ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store and protect your information when you use our web application, mobile application and related services (collectively, "Reko" or the "Service").

By using Reko, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (encrypted)
• Business name and address
• Business type (restaurant, café, pub, etc.)

2.2 Compliance Records

When you use Reko, you create and store:

• Temperature logs (fridge, freezer, cooking, cooling, delivery)
• Checklist completions
• Cleaning records
• Allergen information
• Supplier details
• Staff member names and roles
• Menu items and ingredients
• Food waste records

2.3 Usage Data

We automatically collect:

• Device information (type, operating system)
• IP address
• Pages visited and features used
• Time and date of access
• App performance data
• Crash reports and error logs, linked to an account ID only (via Sentry)

2.4 Payment Information

If you subscribe to a paid plan, our payment processor (Stripe) collects payment card details. We do not store your full card number.

2.5 Photos and Files

If you choose to, you can add photos and files to Reko, such as pictures of supplier invoices, training certificates, documents and screenshots sent with feedback. The app only uses your camera or photo library when you tap to add something.

2.6 Mobile App

If you allow notifications, the app stores a push notification token for your device so we can send reminders and alerts. You can turn notifications off at any time in your device settings. The app does not collect your location.

2.7 EHO Readiness Check

If you use the free readiness check on our website, we collect your email address, your venue name if you give it, and your answers. We use them to show and email your results, and our team may follow up once about them. If you tick the box, we also send you Reko tips by email, and you can unsubscribe at any time.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your subscription payments
• Send service-related communications (account updates, security alerts)
• Improve and develop new features
• Provide customer support
• Comply with legal obligations
• Protect against fraud and abuse

We do not sell your personal data to third parties.

4. Legal Basis for Processing (UK GDPR)

We process your data under the following legal bases:

• Contract: To provide the Service you have subscribed to
• Legitimate interests: To improve our Service and protect against fraud
• Legal obligation: To comply with food safety record retention requirements
• Consent: For optional marketing communications (you can opt out anytime)

5. Data Sharing

We share your data only with:

• Service providers: Supabase (database hosting), Vercel (web hosting and anonymous page-view counts), Stripe (payments), Resend (email delivery), Sentry (error reporting), Expo, Google Firebase Cloud Messaging and Apple Push Notification service (delivering push notifications)
• Legal requirements: If required by law, court order or government request
• Business transfer: If Hollr Group Ltd is acquired or merged

We do not share your compliance records with Environmental Health Officers or any regulatory body. You control when and how to share your records.

6. Data Retention

We retain your data for:

• Account data: Duration of your account plus 30 days after deletion
• Compliance records: Up to 5 years while your subscription is active, and for 90 days after it ends
• Payment records: 7 years (legal requirement)
• Usage logs: 90 days

7. Data Security

We protect your data using:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Row-level security (users can only access their own data)
• Regular security audits
• Secure password hashing

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Restrict: Limit how we process your data
• Withdraw consent: For any processing based on consent

To exercise these rights, email hello@tryreko.com.

You can delete your account yourself at any time. See how to delete your Reko account.

9. Cookies

Reko uses essential cookies for:

• Authentication (keeping you logged in)
• Security (preventing fraud)
• Preferences (remembering your settings)

We do not use advertising or tracking cookies.

We count page visits with Vercel Web Analytics. It sets no cookies and does not identify you.

10. Children's Privacy

Reko is not intended for use by anyone under 16. We do not knowingly collect data from children.

11. International Transfers

Your data is stored on servers in the UK/EU. If data is transferred outside the UK/EU, we ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

13. Contact Us

For privacy-related questions:

Email: hello@tryreko.com
Post: Hollr Group Ltd, Norwich, UK

14. Complaints

If you're not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113