Privacy policy

Data controller

Data controller: [PENDING: data from the account holder -- legal review 👤-P4, see specs/09-marketing-web/tasks.md].

For any question about this policy or to exercise your rights, write to the address on the contact page.

Where each piece of data lives: device vs. server

Qhalix runs 100% offline on the kitchen device: HACCP records (temperatures, cleaning, traceability, receiving, freezing/defrosting, oil, labeling, tasks and reports) are generated and stored on the customer's own device, not on a Qhalix server. That is the MVP model -- see ARCHITECTURE.md §1.3.

Only two things reach the licensing server: the data needed to validate and renew the device license (device identifier, contracted plan, validity) and the billing data needed to charge the subscription.

The app keeps a local, rotated log file of operational activity (for debugging) that never leaves the device and never contains a PIN or its hash.

What data we process

Staff data: display name and access PIN, always stored as a salted hash (never in plain, reversible text).

License data: device identifier, license key (format qlx_live_…), contracted plan and validity status.

Billing data: handled by the relevant payment gateway -- Qhalix does not store card numbers.

Your operation's HACCP records: live on your device, under your control, not on a Qhalix server (in the MVP).

Purposes and legal basis

Providing the contracted service (contract performance): activating and keeping the device license valid, enabling offline HACCP logging.

Managing the monthly subscription charge (contract performance).

Responding to your contact or support requests (legitimate interest in assisting you).

Complying with legal obligations (tax, accounting) where applicable.

Data processors

Payment gateway for the subscription charge -- Stripe or Paddle depending on the active method.

Cloudflare -- hosting for this site.

Hosting provider for the production licensing API: [PENDING: data from the account holder -- legal review 👤-P4, see specs/09-marketing-web/tasks.md].

None of these providers use your data for their own advertising purposes -- they process it solely to provide the service contracted with Qhalix.

Retention periods

HACCP records: live on your device and under your control while you use Qhalix; HACCP records are a legal requirement, so Qhalix never blocks read/export access to that history, even with an expired license (see the degradation policy in Terms and Conditions).

License and billing data on the server: for as long as the license is active and, after cancellation, for the legal retention period for accounting/tax records that applies.

Your rights

You have the right to access, rectify, and erase your data, as well as to request restriction of processing, object to processing, and data portability.

You can exercise these rights from the contact page. You also have the right to lodge a complaint with the competent supervisory authority.

Competent supervisory authority and response timeframe: [PENDING: data from the account holder -- legal review 👤-P4, see specs/09-marketing-web/tasks.md].

International transfers

[PENDING: data from the account holder -- legal review 👤-P4, see specs/09-marketing-web/tasks.md] -- to be completed based on the actual location of the providers listed above at the time this page is published.