Privacy Policy
This policy explains how ConchX LTD (“we”) uses personal information in Repeat, the food safety diary app.
ConchX LTD is registered in England and Wales, company number 09916195. Our registered office is Venture House, 2 Arlington Square, Bracknell RG12 1WA. We are registered with the Information Commissioner's Office (ICO). For anything about your information, email support@repeat-now.com.
1. Two kinds of information
Account information: the business email, the business's name and address, and how you use Repeat. We decide how this is used, so we are its controller.
Your records: everything your business records in Repeat, including the names of the people who work there. Your business decides what goes in, so the business is the controller. We use your records only to run Repeat for you.
2. What we collect
Business details: name, address, postcode, food hygiene register ID, opening times, logo, business email and customer ID.
People: the names and roles of the people who work at the business, the language each person uses in the app, the Owner's and Managers' own PINs, and training courses with their dates. Each check is saved with the name of the person who did it.
Food safety records: checks, temperatures, deliveries, suppliers and their phone numbers, cleaning, pests, repairs, complaints, recalls, allergens, reviews, notes and corrections. A complaint may say that a customer was ill, so record only what's needed, and leave out customers' names and contact details unless you need them.
Signing in and devices: the codes we email (kept only in scrambled form), a scrambled key for each linked phone or tablet, the owner's sign-in on their own phone, and notification settings.
Your agreement to the Terms and Conditions: the version, the exact text, the business email and the time.
Help and support messages: what you write, the name of the person who sent it, and the customer ID.
Technical information: to stop misuse, we count requests from each internet (IP) address, kept only in scrambled form. Google keeps technical logs of requests to our server, including the IP address, for up to 30 days.
3. Why we use it
To provide Repeat under our contract with your business: saving your records, moving them to a new device, showing them on the owner's phone, sending sign-in codes, reminders and alerts, and making the inspection report.
To keep Repeat safe and working, and to stop misuse. This is in our legitimate interests.
To answer your Help and support messages. We look at your records only when you ask us to, or to fix a problem.
To keep proof of what was agreed, and to meet our legal duties.
We don't sell personal information, show adverts, or use tracking or analytics. We don't send marketing emails. We don't make decisions about people by computer alone.
4. Who we share it with
We use these companies to run Repeat. They use the information only to provide their service to us:
Google Cloud and Firebase, which store your records and run our server, in London.
Resend, which sends our emails. We use its data centre in Ireland.
Microsoft 365, where our support inbox is.
Apple and Google, who take the subscription payments under their own privacy policies. Apple, Google or Mozilla, depending on the device, deliver notifications.
When you look up your address, the postcode you type is sent to the Food Standards Agency's food hygiene register, postcodes.io and OpenStreetMap. Fonts and the tools that make PDF files load from Google Fonts, Cloudflare, jsDelivr and unpkg, which see your device's internet address, as with any website.
We'll also share information if the law requires it, and with a company that takes over Repeat (see the Terms and Conditions). We don't send your records to food inspectors: you show them the report yourself.
5. Where it's kept
Your records are kept on the business device and with Google Cloud in London. Some of the companies above are based outside the UK, for example in the US. When information leaves the UK, we make sure it has the protection UK law requires, such as the UK's approved data transfer agreements or the UK-US data bridge.
6. How long we keep it
Your records: while your business uses Repeat, we keep the last 2 years of records, ready for an inspection. After you cancel, we keep them for 90 days in case you come back or want a copy, then we delete them.
The owner can also delete the business at any time, in the app (Account, Delete this business). Its records are then deleted straight away.
Sign-in codes: 10 minutes. The owner's sign-in on their own phone: 180 days after it was last used.
Help and support messages: 2 years after we answer.
Proof of your agreement to the Terms and Conditions: 6 years after your business stops using Repeat, in case of a dispute.
7. Keeping it safe
Information travels over encrypted connections. Codes and device keys are stored in scrambled form. Browsers can't reach our database directly: everything goes through our server, which checks the device first.
On the business device, anyone with the Staff PIN can see the records, so keep it within your team and change it when someone leaves.
8. Cookies and storage on your device
Repeat doesn't use cookies for tracking or adverts. It saves your records in the browser's storage on the device, so it works without internet. Repeat needs this to work.
9. Your rights
You can ask for a copy of your information, ask us to correct or delete it, object to how we use it or ask us to limit it, and ask for your records in a format you can take elsewhere. Email support@repeat-now.com and we'll reply within one month.
If you work at a business that uses Repeat, your employer decides about the records it keeps. Ask your employer first, and we'll help them answer.
If you're unhappy with how we use your information, please tell us. You can also complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.
10. Changes to this policy
If we make important changes, we'll tell you in the app or by email before they apply.
Questions about this policy: support@repeat-now.com. Last updated 19 October 2026.