Privacy Policy

Last updated: 12 October 2026

1. Who we are

CLVROPS (the app, and the web pages at app.clvrsolutions.uk) is provided by Mahmoud Hobloss, Dubai, United Arab Emirates ("we", "us"). You can reach us at privacy@clvrsolutions.uk for anything about your personal data, and at support@clvrsolutions.uk for anything else.

2. Two kinds of data, two roles

Your organisation's workspace. CLVROPS is used by hospitality businesses ("organisations") to run their venues. Everything an organisation records in its workspace — its staff list and rotas, reports, guest notes, photos, documents and so on — is that organisation's data. For that data the organisation is the controller: it decides what is recorded, who in its team can see it and how long it is kept. We act as its processor: we store and process it only to provide CLVROPS to that organisation, under our agreement with it. If you work for an organisation that uses CLVROPS (or you are its guest), questions about what it records about you are best sent to that organisation; we will help it answer them.

Your account and the running of the service. For your sign-in details, the technical data needed to run and protect the service, and the crash reports you allow, we are the controller.

3. What we collect

3.1 Your account

• Your name and email address, and a password (stored only as a one-way hash). If you use Sign in with Apple, we receive an Apple account identifier and the name and email you choose to share — which may be a private relay address.
• The workspaces you belong to, your role at each venue and what you are allowed to do.
• Your choices in the app, such as notification settings and the language your device uses.

3.2 What you and your team record in a workspace

What a workspace holds depends on what the organisation uses. It can include:

• About staff (including staff who have no account): name, position, department, start date, employee number, contracted hours, notes; shift rotas and leave, including leave types such as sick or emergency leave; tips per person; training, induction, quiz and attendance records; documents such as certificates or health cards; names on reports, checklists and approvals.
• About guests: names of VIP and notable guests (and a photo, if one is added), booking names, feedback and complaints, special requests, complimentary items and vouchers, and amounts owed, deposits and payment links.
• About suppliers and contractors: contact names, phone numbers, email addresses and addresses.
• Operations and money: venues, stock, menus, costs, revenue, cash-ups, expenses, budgets and similar business records.
• Photos and files: photos and PDFs attached to records — for example bills, receipts, delivery notes, stock items, repairs, documents, training and SOP material.
• Free text: notes, comments, reasons and messages, including announcements and tasks.

Some of this can be sensitive — for example, a record of sick leave, or a dietary need noted in a special request. The organisation decides whether to record it, and should record only what it needs (see the Terms).

3.3 Notifications and emails

• If you allow notifications, a push token for your device (it identifies the app on that device), plus the app version and your device's language so alerts reach you in the right language.
• Records of which announcements you have opened or acknowledged (the sender and administrators see this), and which alerts and reminders were sent to you.
• The email addresses an organisation adds to its report email lists, and a log of the emails sent to them.

3.4 Technical and security data

• The app version, so we can tell you when an update is required.
• An audit log of actions taken in a workspace (who changed what, and when).
• Fake-account protection: when you create an account with email, the app proves to our server, with Apple's App Attest, that it is the genuine CLVROPS app on a real Apple device. Our server keeps the public part of a key created on your device and a counter — not linked to you.
• Crash reports, only if you allow them when asked (you can change this at any time in Account & data): Apple's MetricKit reports when the app crashes, freezes or runs slowly — the app and iOS versions, the device model and technical details. They never include your name, your workspace, anything you typed or your location, and they are not linked to you.
• The guide inside the app: the guide's text and pictures (how to use CLVROPS) are downloaded from our website. These requests carry nothing about you, your workspace or your venue, and no cookie; like any web request they reach our website's host with your device's IP address.
• Our hosting provider keeps standard server logs, such as IP addresses and the time of requests, for a short period, to keep the service secure.

3.5 Questions you ask CLVROPS (Search & Ask)

If your organisation has switched Ask on for you, you can ask CLVROPS questions about your figures. To understand a question and write a written answer, CLVROPS uses Apple's models — first Apple's Private Cloud Compute, and the model on your device if that is not available. What is sent is the question you typed or said, the names of your venues and of the kinds of figures you can see, and — for a written answer — the figures that question needs, exactly as you can see them on their own screens. These can include staff and guest names where they appear in those figures; never phone numbers, email addresses, photos or files. Apple uses it only to answer that request and does not keep it.

If your organisation's administrator connects the organisation's own AI account (OpenAI, Anthropic or Google), the same question and figures may instead be sent, through our server, to that provider to write the answer — only after you have agreed in the app, and under the organisation's own agreement with that provider. We do not keep your questions or answers: our server keeps only counts of requests and the amount of text processed, for about 13 months. Your last five questions stay on your device, and are removed when you sign out.

If you use Siri with CLVROPS, what you say is processed by Apple under Apple's own privacy policy.

3.6 Pages you can open without an account

• Menu quiz by QR code: you type your first and last name and answer the questions; the venue's managers see your name, answers and score. The page sets no cookies; it keeps an unfinished quiz in that browser only, so it can be picked up again.
• Rota links: a manager can share a week's rota as a web link, which shows staff names, positions and shifts (leave is shown only as "Leave") to anyone who has the link, until it expires 7 days after that week or is withdrawn. You can also add your own shifts to your calendar with a private calendar link; it keeps working until you or a manager replace or withdraw it.

3.7 What stays on your device

• Reading text from photos (bills, slips, reports, notes, documents) is done on your device. The photo is only uploaded if you attach it to a record.
• Drafts you haven't saved, files you share into CLVROPS (kept for up to 7 days), the figures your widgets show, and your sign-in session (in your device's keychain) stay on your device and are cleared when you sign out.
• Before any photo is uploaded, the app removes its hidden metadata — such as where and when it was taken and which device took it.
• If you add expected bills to your calendar or Reminders, CLVROPS only adds the items you choose; it never reads your calendar.
• Which pages of the guide you have opened, so the guide can show what changed since, stays on your device. A link to a guide chapter that you send to someone names the chapter and nothing else.

We do not use analytics, advertising or tracking tools, we do not track you across other apps or websites, and we do not use your device's location.

4. Why we use it, and on what basis

• To provide CLVROPS to you and your organisation — accounts, workspaces, every feature, the notifications and emails your organisation sets up (performance of our contract with your organisation and with you).
• To keep it secure and working — sign-in, keeping each workspace separate, the audit log, fake-account protection, preventing abuse and fixing faults (our legitimate interest in a secure, reliable service).
• Crash reports, and sending questions to your organisation's own AI provider — only with your consent, which you can withdraw in the app at any time.
• To comply with the law — where we are legally required to keep or disclose information.

For workspace data (section 3.2), the legal basis is the organisation's, as controller — for example, managing its employees and running its business.

5. Who can see it

• People in your organisation, according to the roles and permissions its administrators set. Money figures, for example, are hidden from people not allowed to see them.
• People your organisation chooses to send reports to, by email, and anyone it gives a rota or quiz link to.
• Our service providers, listed in section 6, only to run CLVROPS.
• Authorities, only where the law requires it.

We do not sell personal data, share it for advertising, or use workspace data for any purpose of our own.

6. Service providers and where data is processed

What notifications show. A notification passes through Apple and can appear on your lock screen. Depending on the alerts your organisation turns on, it can include an announcement's text, a task and the reason it was sent back, rota changes, training reminders, permit expiry dates, and — for managers who may see them — figures such as revenue and covers. You can choose which alerts you receive in the app, and turn notifications off in your device's Settings.

Links in training material. If an organisation links a video (for example on YouTube or Google Drive) in a training or SOP, it opens from that website, whose own privacy policy applies.

International transfers. Some providers are outside the UAE and outside the EU/UK. Where data is transferred, we rely on the provider's contractual commitments, such as standard contractual clauses, and on providers that protect data to a high standard.

7. How long we keep it

8. Deleting your data

Your account. Delete it in the app: Account & data → Delete my account. This removes your sign-in and your name, and your devices stop receiving notifications. If you used Sign in with Apple, we also revoke CLVROPS's access to your Apple account. Records you made in a workspace stay with the organisation but are no longer linked to you; your organisation's own records about you — for example your entry in its staff list or its rotas — are the organisation's, and it decides whether to keep or delete them. If you are the only administrator of a workspace, the app asks you to hand over first.

A workspace. An administrator can delete it in the app. It is kept for 7 days in case of mistakes, then permanently deleted with all its records and files.

9. Your rights

Depending on where you are and the law that applies — including the UAE Personal Data Protection Law, and the EU or UK GDPR and Turkey's Personal Data Protection Law (KVKK) where they apply — you can ask to access your personal data, correct it, delete it, restrict or object to how it is used, receive a copy in a portable format, and withdraw any consent you gave. You also have the right to complain to your data protection authority.

To use these rights, email privacy@clvrsolutions.uk. For data your organisation holds about you as its employee or guest, we will pass your request to the organisation and help it respond. We may need to confirm your identity first. We reply within one month, and do not charge for reasonable requests.

10. Security

All data is encrypted in transit. Each workspace's data is kept separate by rules enforced in the database itself, and each person sees only what their role allows. Files are stored privately and opened through short-lived links. Your sign-in session is stored only on your device. Secrets such as an organisation's AI key are stored encrypted on our server and never sent to devices. No method is perfectly secure, but if a breach affects your personal data we will tell the organisation concerned, and you where the law requires it, without undue delay.

11. Children

CLVROPS is a workplace tool. It is not directed at children, and we do not knowingly collect personal data from children.

12. Changes to this policy

We will update this policy when the app or the law changes, and change the "last updated" date above. For significant changes we will tell you in the app or by email before they take effect.

13. Contact

Mahmoud Hobloss, Dubai, United Arab Emirates — privacy@clvrsolutions.uk.