Privacy Policy

mise — Food Safety Compliance The Form Lab · ABN: 16 384 119 323 Effective date: 27 May 2026 Last updated: 27 May 2026.

The short version (TL;DR)

• We collect only what we need to run mise

• Your compliance records are yours — we never sell them, share them for advertising, or delete them

• We use a small number of trusted third-party services to run the app — listed below

• We use cookies on our website for analytics and advertising — not inside the app

• You can request your data or ask us to close your account any time

• mise does not replace professional food safety advice — you remain responsible for your own compliance

• We'll always be straight with you about what we do with your information

1. Who we are

mise is a food safety compliance app built and operated by The Form Lab, an Australian business.

Contact: Email: support@miseapp.com.au Website: miseapp.com.au Governing law: New South Wales, Australia

2. What information we collect

When you create an account:

• Your name and email address

• Your business name, ABN (optional), location, and state or territory

• Your chosen password (stored securely — we never see it in plain text)

  
  

When you use the app:

• Daily compliance task completions, including timestamps and recorded values

• Corrective actions and notes you enter

• Photos you choose to attach to records

• Supplier details you add to your register

• Staff profile information including food training details

• Staff health log entries

• Permit and certification details you add

  
  

When you visit our website:

• Pages you visit and actions you take (via Google Analytics)

• Whether you came from an ad and what you did after (via Meta Pixel)

• Your approximate location and device type

• Cookies — see Section 7

  
  

We do not collect:

• Payment card details (handled entirely by Stripe — we never see your card number)

• Any data from your device beyond what's needed to run the app

• Location data beyond your nominated state or territory

3. How we use your information

To run the app:

• Create and maintain your account

• Display your daily tasks and record completions

• Generate your compliance exports and PDF records

• Send you permit and certification expiry reminders

• Provide Pro features including record intelligence insights and handover notes

  
  

To communicate with you:

• Send account-related emails (invitations, subscription updates, support responses)

• Send marketing emails if you have opted in (see Section 4)

• Send reminders you've opted into

  
  

To improve mise:

• Understand how the app is used in general terms

• Fix bugs and improve performance

  
  

We do not:

• Sell your data to anyone

• Use your app data for advertising

• Share your compliance records with third parties except as described in Section 4

• Use your data to train AI models beyond what's described in Section 4

4. Third parties we work with

We use a small number of trusted services to run mise. We share only the minimum data necessary for each service to function.

Supabase — database, authentication, and file storage Your account data, compliance records, and uploaded photos are stored on Supabase infrastructure hosted in the Asia-Pacific region. Supabase is SOC 2 compliant. supabase.com/privacy

Stripe — payment processing When you subscribe, Stripe handles your payment details. We never see or store your card number. Stripe is PCI-DSS compliant. stripe.com/privacy

Resend — transactional email We use Resend to send account emails such as team invitations and subscription notifications. Your email address is passed to Resend for this purpose only. resend.com/privacy

Vercel — web hosting Our invite acceptance page is hosted on Vercel infrastructure. vercel.com/legal/privacy-policy

Anthropic — AI-powered record insights (Pro plan only) Pro plan users receive nightly record intelligence insights. To generate these, anonymised compliance pattern data — such as task completion rates and failure patterns — is sent to Anthropic's API. No personally identifiable information, business names, or specific record content is included in these requests. anthropic.com/privacy

Google Analytics — website analytics We use Google Analytics to understand how visitors use miseapp.com.au. This data is collected via cookies on the website only and is not linked to your app account. policies.google.com/privacy

Meta Pixel — website advertising We use Meta Pixel on miseapp.com.au to measure the effectiveness of our advertising and to show relevant ads to people who have visited our site. This data relates to website visitor behaviour only and is never linked to your app data or compliance records. facebook.com/privacy/explanation

Marketing email provider — Klaviyo — marketing communications If you opt in to marketing emails, your name and email address are passed to our marketing email provider for this purpose only. You can unsubscribe at a ny time using the link in any marketing email.

5. Your compliance records

Your records are yours. Always.

• We never delete your compliance records

• Records are retained permanently on our servers regardless of your subscription status

• If your subscription is active, you have full access to export your records at any time

• If you cancel, you have a 30-day grace period with full export access

• After 30 days your account access is suspended but your records remain stored

• If you re-subscribe at any time, full access to all historical records is restored

• Records are never used for any purpose other than providing the mise service to you

6. Important limitation of liability

mise is a compliance record-keeping tool. It is designed to help food business operators maintain structured, audit-ready records in accordance with FSANZ Standard 3.2.2A.

mise does not:

• Guarantee that your business is compliant with all applicable food safety laws

• Replace the advice of a qualified food safety professional

• Account for local council requirements beyond the FSANZ framework

• Accept liability for any regulatory action, fine, or enforcement outcome

The operator remains solely responsible for ensuring their practices meet all applicable local, state, territory, and national requirements. If you are unsure about your obligations, contact your local council or a qualified food safety consultant.

By using mise you acknowledge and accept these limitations.

7. Data security

We take reasonable steps to protect your information:

• All data is transmitted over encrypted connections (HTTPS/TLS)

• Passwords are hashed and never stored in plain text

• Database access is protected by row-level security — users can only access their own organisation's data

• Photos are stored in access-controlled storage buckets

• We use Supabase infrastructure hosted in Sydney, Australia

No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@miseapp.com.au.

To the maximum extent permitted by law, The Form Lab's liability for any data breach or security incident is limited to the amount you paid for mise in the 12 months preceding the incident.

8. Cookies

On our website (miseapp.com.au): We use cookies for analytics (Google Analytics) and advertising (Meta Pixel). When you first visit our site you will be asked to accept or decline non-essential cookies.

• Essential cookies — required for the site to function. Cannot be declined.

• Analytics cookies — help us understand how visitors use our site.

• Advertising cookies — used to measure ad effectiveness and show relevant ads.

You can withdraw your cookie consent at any time by clearing your browser cookies or using the cookie settings link in our footer.

In the mise app: The app does not use cookies.

9. Your rights

You have the right to:

• Access your personal information — email us at support@miseapp.com.au and we will provide a summary of the personal information we hold about you within 30 days

• Correct inaccurate information — update most details directly in the app under Settings, or contact us

• Export your compliance records at any time from within the app

• Unsubscribe from marketing emails at any time using the unsubscribe link in any email

• Close your account — contact us at support@miseapp.com.au and we will deactivate your account. Your compliance records will be retained as described in Section 5 but your personal information will be removed from active systems within 30 days.

• Complain — if you believe we've handled your data incorrectly, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

We will respond to all privacy requests within 30 days.

10. Children

mise is intended for use by food business operators and their staff. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use mise. If you are between 13 and 18, you should have permission from a parent or guardian before creating an account.

11. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email or through the app before the changes take effect. The effective date at the top of this document will always reflect the most recent version.

Continued use of mise after changes are notified constitutes acceptance of the updated policy.

12. Contact us

For any privacy questions, data requests, or account closure:

The Form Lab support@miseapp.com.au miseapp.com.au

We aim to respond to all privacy queries within 30 days

This policy is governed by the laws of New South Wales, Australia and the Australian Privacy Act 1988 (Cth). Nothing in this policy limits any rights you may have under applicable consumer protection laws including the Australian Consumer Law.