Privacy Policy

Last updated: August 2026

This policy describes how Keyed Systems ("Keyed", "we", "us") handles information in connection with the Miseline platform — the website, web application, mobile applications, boards, and APIs (the "Service").

Two roles, two kinds of data

• Data we control: information about visitors to this website and the account information of people who sign up (names, work email addresses, organization details).
• Data we process for customers: the operational data organizations put into the Service — recipes, menus, inventory, schedules, audit results, and records about their own staff and diners. The customer organization controls this data; we process it on their behalf to provide the Service.

What we collect

• Account information: name, email address, role, and organization when you register or are invited.
• Operational content: the data your organization enters or uploads — including recipes, menus, production and inventory records, documents, photos, and audio recordings made deliberately through features such as huddle or interview capture.
• Usage and device information: logs, approximate location from IP, browser and device type — used for security, debugging, and service improvement.
• Support communications: messages you send through the support form or by email.

How we use it

• To provide, secure, and improve the Service.
• To operate optional AI-assisted features: content you submit to those features (for example a photographed recipe, or a huddle recording for transcription) is processed by machine-learning services to produce the requested draft. Organizations may operate these features with their own AI provider keys, and every AI feature can be left unconfigured.
• To communicate with you about the Service — transactional messages, security notices, and support replies.
• We do not sell personal information, and we do not use customer operational content to advertise to anyone.

Sharing

We share information only with service providers necessary to run the Service (such as hosting, email delivery, SMS delivery, and AI model providers for the features described above), under agreements limiting their use of it; with the customer organization that controls your account; or when required by law.

Health-related information

Some modules allow customer organizations in care settings to record dining-relevant information about their residents or patients (such as diet orders and meal intake). That data is controlled by the customer organization, processed by us solely to provide the Service, and protected with tenant isolation and access controls. Organizations subject to healthcare privacy regulation should contact us to put appropriate agreements in place before storing regulated data.

Security and retention

Data is protected with encryption in transit, tenant isolation, role-based access control, and audit logging. We retain personal data for as long as the account or customer relationship is active and as needed for legal obligations, then delete or de-identify it. Customers may request export or deletion of their organization's data.

Your choices

• Account holders can access and correct their profile information in the app.
• Staff and diner users should direct requests about their data to their organization, which controls it; we support customers in honoring such requests.
• You can contact us about any privacy question or request through the support page.

Children

The Service is a workplace and dining tool, not directed to children. Where a customer (for example a school program) records information about minors as diners, the customer is responsible for the required consents.

Changes

We may update this policy; material changes will be communicated through the Service or by email. This policy is subject to [applicable data-protection law provisions to be confirmed by counsel].