Privacy Policy

frunt is a service operated by MGKCodes Ltd (the “service”, “we”, “us”), a company registered in England and Wales (company number 17035502) with registered office at 96 High Street, Reigate, RH2 9AP. ICO data-protection registration number: ZC173549.

We provide a preparation system for restaurant teams — onboarding, training, compliance documentation, operational briefs, scheduling, and a chat surface where staff can ask questions about their workplace's documents.

If you have questions, write to us at privacy@frunthospitality.com (or our postal address above).

This matters for your rights (below). Where your employer is the controller, the fastest route for access, correction, or deletion is usually through them — they can action most of it directly in the product. We help fulfil those requests on their behalf.

Data you give us directly:

Staff operational data your employer asks us to hold:

Compliance evidence (special handling):

Your employer may store right-to-work evidence and certificates (food hygiene, allergen, personal/alcohol licence, first aid) against your record. These files are kept in a private, encrypted store, segregated per restaurant. They are never sent to any AI model and are never read by our chat or retrieval systems. A manager labels them by hand; we store them and track their expiry, nothing more.

Data we generate automatically:

• Activity timestamps (last sign-in, when you acknowledged a brief, when you completed a course) — for service operation and to help your employer manage the team.
• Mobile push-notification token — so the app can deliver alerts about briefs, shift changes, and training due. Stored against your device; stale tokens are removed automatically.
• IP address and basic device/request information — short-lived, for security and to operate the service.
• Session cookies — essential only, to keep you signed in.
• Product-analytics events in the signed-in dashboard (which pages and features you use, tied to your account id) — to understand what's useful and improve the product. Our public website uses only cookieless, aggregate visitor counts; neither includes your name or your message content.

What we do NOT do:

• We do not use advertising, marketing, or cross-site tracking cookies. Our public website sets no analytics cookies at all (visitor analytics there are cookieless); the signed-in dashboard stores a product-analytics identifier, disclosed above and covered by this policy.
• We do not sell your data, ever.
• We do not use your restaurant's content to train AI models. AI processing happens only to serve that same restaurant, within its own data.
• We do not collect your date of birth, national insurance number, or home address.

frunt uses AI (large language models) as infrastructure, not as a place your data is exposed. Specifically:

• Document content you upload is sent to our AI providers to extract, structure, and classify it, to answer questions (in the app and on WhatsApp), and to generate personalised training from your own menus and policies.
• Document text is sent to an embeddings provider to build the private search index used to answer questions.
• Operational briefs are deliberately kept out of the AI knowledge base — they are short-lived comms, not queryable knowledge.
• Pay rates, certificate files and right-to-work evidence are never sent to any AI model.
• When a manager uses the rota's AI features (describing a change in plain words, or drafting a week) or imports past training records from a spreadsheet or export, staff go to Anthropic as codes that mean nothing outside that one request, with only the work details the job needs (role, hours, availability, leave, shift times). Names are put back on our side. Two exceptions: a photo or scan of a paper rota or training record is read as an image, names included; and anything we can't recognise as one of your team's names (a misspelling, or someone who isn't on your team), or any name inside your documents, is read along with the rest.

AI helps managers prepare their team. Final decisions about training, employment, or compliance are always made by people — we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

We do not process personal data for marketing without your separate consent.

We use the sub-processors below. Each is contractually bound to data-protection terms at least as protective as ours and only processes data on our instructions. We notify account-holding restaurants before adding or replacing a production sub-processor.

We do not share your personal data with any other third party, except when required by law, to protect rights or safety, or in connection with a corporate transaction (we would notify affected restaurants beforehand).

Some sub-processors (Anthropic, OpenAI, Inngest, Stripe, Resend, Google, Meta) are based in or route through the United States. Those transfers rely on the UK International Data Transfer Agreement (IDTA) and EU Standard Contractual Clauses, with data encrypted in transit and at rest.

When you leave a restaurant, your access is revoked immediately. Your records are archived, not deleted — they remain in that restaurant's compliance history per the schedule above, until full erasure is requested.

You have the following rights under UK GDPR. Because your employer is usually the controller of your work data, the quickest route is often to ask them — they can action most requests directly in the product. You can also contact us and we will help fulfil the request.

We respond to verified requests within one calendar month (extendable by two months for complex requests, and we'll tell you). There is no fee unless a request is manifestly unfounded or excessive.

• All data in transit is encrypted (TLS 1.2+).
• All data at rest is encrypted at the database and storage layers.
• Each restaurant's data is isolated by row-level security on every table, so one restaurant can never see another's.
• Compliance evidence and staff PII sit in a private store that AI systems never read.
• Access to production systems is restricted and logged.

If a personal-data breach occurs, we will notify affected restaurants without undue delay and within 72 hours where Article 33 requires it.

frunt is a workplace service for adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us.

We update this policy when our practices change; the “last updated” date above shows when. Material changes are notified to account-holding restaurants by email and in the product.

Privacy questions: privacy@frunthospitality.com. You can also contact the UK Information Commissioner's Office at ico.org.uk or 0303 123 1113.

See also our Terms & Conditions.