Privacy Policy

Last updated: 14 April 2026

1. Who we are

Lunchlog is operated by Syfo (Ireland).

2. Controller vs Processor

Schools/providers are typically data controllers. Syfo acts as a processor.

3. Account creation

Accounts may be created by users or pre-created by schools.

4. Data sources

• user input
• school data
• system usage

5. Data processed

• account data
• pupil data
• meal data
• allergen data
• technical data

6. Special category data

Allergen data may be health-related.

7. Use of data

To operate the platform.

8. Legal basis

• contract
• legitimate interests
• legal obligations

9. Sharing

Shared with schools/providers.

10. Retention

Only as necessary.

11. Security

Appropriate measures applied.

12. Rights

GDPR rights apply.

13. Contact

support@lunchlog.ie

See Terms