Privacy Policy

Data controller: Slamships Ltd (trading as Coriva)
Contact: info@coriva.co.uk

Depending on how you use Coriva, we may collect the following categories of personal data:

• Account details: name, email address, phone number, user ID and account preferences
• Business and profile information: kitchen or business name, company details, venue address, engineer profile information, profile photos, trade badges, qualifications, certifications and insurance documents uploaded by engineers
• Job and platform activity: repair requests, equipment details, urgency, photos, messages, applications, bookings, job history, reviews and ratings
• Location data: approximate or precise location used to match kitchens with nearby engineers and show relevant jobs, where you enable location permissions
• Subscription and purchase data: subscription status, trial status, product identifiers and purchase history received from Apple, Google or RevenueCat. We do not receive or store your payment card details.
• Communications: messages sent through the platform and correspondence with our support team
• Technical and usage data: app version, device type, operating system, IP address, log data, crash reports, performance data and product interaction data used to operate and improve the service
• Website form data: information you submit through our contact form, waitlist or Android launch notification forms on coriva.co.uk

We use personal data to:

• Provide and operate the Coriva platform
• Create and manage user accounts
• Match commercial kitchens with suitable catering engineers
• Facilitate messaging, bookings and job management
• Manage engineer subscriptions, trials and paywall access
• Display profiles, reviews and job information to other users
• Investigate reports, maintain platform safety and prevent misuse
• Provide customer support and respond to enquiries
• Send service-related communications and, where permitted, product updates
• Monitor performance, diagnose technical issues and improve our services
• Comply with legal obligations

We process personal data on the following bases:

• Contract: to provide the Coriva service you sign up for, including account access, job matching and subscription features
• Legitimate interests: to operate, secure, analyse and improve the platform, prevent fraud and protect users
• Consent: where required, such as for optional marketing communications or certain device permissions
• Legal obligation: where we must retain or disclose data by law

Engineer subscriptions are purchased through the Apple App Store (and Google Play when available). Payment card and billing details are processed by Apple or Google under their own privacy policies. Coriva does not store payment card numbers or bank details.

We receive subscription status, trial status, product identifiers and related purchase information from Apple, Google and RevenueCat so we can provide access to paid features in the app.

Repair payments between kitchens and engineers are arranged directly between users. Coriva does not currently process those payments.

We share personal data with trusted service providers who help us run Coriva, including:

• Supabase: authentication, database, storage and related infrastructure
• RevenueCat: subscription management, paywall and purchase status
• Apple: app distribution and in-app subscription billing on iOS
• Google: app distribution and in-app subscription billing on Android, when available
• Expo: app build, delivery and related development infrastructure
• Resend: delivery of emails sent through our website contact and notification forms
• Plausible Analytics: privacy-friendly website analytics for coriva.co.uk

These providers process data on our instructions and only as needed to provide their services. Some providers may process data outside the UK. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or equivalent protections required by UK data protection law.

We do not sell your personal data. We may disclose data if required by law, to respond to lawful requests, or to protect the rights, safety and security of users and the platform.

We keep personal data only for as long as needed for the purposes described in this policy, including:

• Active accounts: while your account remains open and you use Coriva
• Deleted accounts: we aim to delete or anonymise personal data within a reasonable period after a confirmed deletion request, except where retention is required by law or for legitimate purposes such as fraud prevention, dispute resolution or enforcement of our terms
• Messages, jobs and reviews: may be retained for a period after account closure where needed for safety, dispute handling or legal compliance
• Backups: deleted data may persist in backups for a limited time before being overwritten
• Support enquiries: retained as long as needed to resolve the enquiry and maintain support records

We use appropriate technical and organisational measures to protect personal data, including secure authentication, access controls, encryption in transit and provider security controls through Supabase and other infrastructure partners. No method of transmission or storage is completely secure, but we work to safeguard your information.

Under UK data protection law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent

To make a request, email info@coriva.co.uk. We will respond within one month in most cases.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we have handled your data unlawfully. Visit ico.org.uk for more information.

You can request deletion of your Coriva account and associated personal data by emailing info@coriva.co.uk with the subject line “Account deletion request”. We will confirm your request and process it within a reasonable period, subject to any data we are required to retain by law or for legitimate safety and fraud-prevention purposes.

Deleting your Coriva account does not automatically cancel an active engineer subscription purchased through Apple or Google. You must manage subscriptions through your app store account settings.

The Coriva website uses Plausible Analytics, a privacy-friendly analytics service, to understand how visitors use our site. Plausible does not use advertising cookies and does not track you across other websites. Analytics data is aggregated and used to improve the website.

We may also use essential cookies required for basic functionality and security. We do not use advertising or third-party tracking cookies on this website.

The Coriva mobile app does not use the same website cookie setup. App permissions, such as location or push notifications, are managed through your device settings and the permissions requested in the app.

Coriva is not intended for users under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Where changes are material, we may also notify users through the app or by email where appropriate.

This Privacy Policy is governed by the laws of England and Wales. For support information, see our Support page.