Privacy Policy
mise — Food Safety Compliance The Form Lab · ABN: 16 384 119 323 Effective date: 27 May 2026 Last updated: 27 May 2026.
The short version (TL;DR)
We collect only what we need to run mise
Your compliance records are retained for compliance purposes — we never sell them or share them for advertising
We use cookies on our website for analytics and advertising — not inside the app
You can request your data or ask us to close your account any time
We use a small number of trusted third-party services to run the app — listed below
mise does not replace professional food safety advice — you remain responsible for your own compliance
We'll always be straight with you about what we do with your information
1. Who we are
mise is a food safety compliance app built and operated by The Form Lab, an Australian business.
Contact: Email: support@miseapp.com.au Website: miseapp.com.au Governing law: New South Wales, Australia
2. What information we collect
When you create an account:
Your name and email address
Your business name, ABN (optional), location, and state or territory
Your chosen password (stored securely — we never see it in plain text)
When you use the app:
Daily compliance task completions, including timestamps and recorded values
Corrective actions and notes you enter
Photos you choose to attach to records
Supplier details you add to your register
Staff profile information including food training details
Staff health log entries
Permit and certification details you add
When you visit our website:
Pages you visit and actions you take (via Google Analytics)
Whether you came from an ad and what you did after (via Meta Pixel)
Your approximate location and device type
Cookies — see Section 7
We do not collect:
Payment card details (handled entirely by Stripe — we never see your card number)
Any data from your device beyond what's needed to run the app
Location data beyond your nominated state or territory
3. How we use your information
To run the app:
Create and maintain your account
Display your daily tasks and record completions
Generate your compliance exports and PDF records
Send you permit and certification expiry reminders
Provide Pro features including record insights and handover notes
To communicate with you:
Send account-related emails (invitations, subscription updates, support responses)
Send marketing emails if you have opted in (see Section 4)
Send reminders you've opted into
To improve mise:
Understand how the app is used in general terms
Fix bugs and improve performance
We do not:
Sell your data to anyone
Use your app data for advertising
Share your compliance records with third parties except as described in Section 4
Use your data to train AI models beyond what's described in Section 4
4. Third parties we work with
We use a small number of trusted services to run mise. We share only the minimum data necessary for each service to function.
Supabase — database, authentication, and file storage: Your account data, compliance records, and uploaded photos are stored on Supabase infrastructure hosted in the Asia-Pacific region. Supabase is SOC 2 compliant. supabase.com/privacy
Stripe — payment processing: When you subscribe via our website, Stripe handles your payment details. We never see or store your card number. Stripe is PCI-DSS compliant. stripe.com/privacy
RevenueCat — subscription and in-app purchase management: If you subscribe via the App Store or Google Play, RevenueCat manages your purchase and subscription status on our behalf. RevenueCat does not have access to your payment card details. revenuecat.com/privacy
Resend — transactional email: We use Resend to send account emails such as team invitations and subscription notifications. Your email address is passed to Resend for this purpose only. resend.com/privacy
Vercel — web hosting: Our invite acceptance page is hosted on Vercel infrastructure. vercel.com/legal/privacy-policy
Anthropic — record insights (Pro plan only): Pro plan users receive record intelligence insights. To generate these, compliance data from your records — task names, dates, statuses, and whether a corrective action was recorded — is sent to Anthropic's API. We do not send the contents of your notes, your business name, location details, staff names, or photos. anthropic.com/privacy
Google Analytics — website analytics: We use Google Analytics to understand how visitors use miseapp.com.au. This data is collected via cookies on the website only and is not linked to your app account. policies.google.com/privacy
Meta Pixel — website advertising: We use Meta Pixel on miseapp.com.au to measure the effectiveness of our advertising and to show relevant ads to people who have visited our site. This data relates to website visitor behaviour only and is never linked to your app data or compliance records. facebook.com/privacy/explanation
Klaviyo — marketing communications: If you opt in to marketing emails, your name and email address are passed to our marketing email provider for this purpose only. You can unsubscribe at any time using the link in any marketing email.
5. Your compliance records
You can export your compliance records at any time while your account is active
If you close your account, your compliance records are retained on our servers for compliance purposes — they are not immediately deleted
Once records are no longer required for compliance retention purposes, we take reasonable steps to securely delete or de-identify them
Closing your account is permanent — your login is removed and cannot be used to sign back in
If you need access to records from a closed account, contact us at support@miseapp.com.au
Retained records are never used for any purpose other than compliance retention
6. Important limitation of liability
mise is a compliance record-keeping tool. It is designed to help food business operators maintain structured, audit-ready records in accordance with FSANZ Standard 3.2.2A.
mise does not:
Guarantee that your business is compliant with all applicable food safety laws
Replace the advice of a qualified food safety professional
Account for local council requirements beyond the FSANZ framework
Accept liability for any regulatory action, fine, or enforcement outcome
The operator remains solely responsible for ensuring their practices meet all applicable local, state, territory, and national requirements. If you are unsure about your obligations, contact your local council or a qualified food safety consultant.
By using mise you acknowledge and accept these limitations.
7. Data security
We take reasonable steps to protect your information:
All data is transmitted over encrypted connections (HTTPS/TLS)
Passwords are hashed and never stored in plain text
Database access is protected by row-level security — users can only access their own organisation's data
Photos are stored in access-controlled storage buckets
We use Supabase infrastructure hosted in Sydney, Australia
No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@miseapp.com.au.
To the maximum extent permitted by law, The Form Lab's liability for any data breach or security incident is limited to the amount you paid for mise in the 12 months preceding the incident.
8. Cookies
On our website (miseapp.com.au): We use cookies for analytics (Google Analytics) and advertising (Meta Pixel). When you first visit our site you will be asked to accept or decline non-essential cookies.
Essential cookies — required for the site to function. Cannot be declined.
Analytics cookies — help us understand how visitors use our site.
Advertising cookies — used to measure ad effectiveness and show relevant ads.
You can withdraw your cookie consent at any time by clearing your browser cookies or using the cookie settings link in our footer.
In the mise app: The app does not use cookies.
9. Your rights
You have the right to:
Access your personal information — email us at support@miseapp.com.au and we will provide a summary of the personal information we hold about you within 30 days
Correct inaccurate information — update most details directly in the app under Settings, or contact us
Export your compliance records at any time from within the app
Unsubscribe from marketing emails at any time using the unsubscribe link in any email
Close your account — delete your account directly in the app under Settings → Account. If you're part of a team, this removes your own access only — the organisation and other team members' access continue unaffected. If you're the sole remaining member of your organisation, deleting your account closes the business entirely. Either way, deletion is immediate and permanent: your login is removed right away and cannot be reversed. Your compliance records are retained as described in Section 5.
Complain — if you believe we've handled your data incorrectly, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
We will respond to all privacy requests within 30 days.
10. Children
mise is intended for use by food business operators and their staff. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use mise. If you are between 13 and 18, you should have permission from a parent or guardian before creating an account.
11. Changes to this policy
We may update this policy from time to time. If we make material changes we will notify you by email or through the app before the changes take effect. The effective date at the top of this document will always reflect the most recent version.
Continued use of mise after changes are notified constitutes acceptance of the updated policy.
12. Contact us
For any privacy questions, data requests, or account closure:
The Form Lab support@miseapp.com.au miseapp.com.au
We aim to respond to all privacy queries within 30 days
This policy is governed by the laws of New South Wales, Australia and the Australian Privacy Act 1988 (Cth). Nothing in this policy limits any rights you may have under applicable consumer protection laws including the Australian Consumer Law.
