Controller and contact
This policy applies to Frango.pt. Configured operator identification and contact details appear on this page. Privacy requests can also be submitted through account support. The controller’s legal identity must be confirmed before public launch.
Account data and contributions
We process email, account ID, public name, language, favourites, shopping lists, reviews, photos, recipes, ownership claims and support messages. Approved contributions and their public author name may appear publicly. Do not publish private information about others.
Purposes and lawful grounds
Information necessary to provide an account and requested services supports performance of that service. Security, abuse prevention, moderation and maintenance rely on the platform’s legitimate interests, subject to your rights. Marketing requires a voluntary choice that can be withdrawn. Billing records may need retention under legal obligations.
Location and navigation
Precise location is requested only when you choose nearby search. It is used for that search and is not stored in your profile. Campaign links may count visits in aggregate without storing precise location or building an advertising profile.
AI and service providers
Assistant questions may be processed by OpenAI; avoid sensitive information. Support drafts use public site information; private support messages are not sent to the AI provider. Supabase provides authentication, data and photos; active payments use Stripe; email uses the operator’s SMTP server; external storage uses its configured provider. Map and radio services receive necessary connection requests. Providers may operate outside the EEA; the operator must review applicable transfer safeguards and contracts.
Retention and deletion
We retain information while needed for the explained purposes. Account deletion removes associated personal data, uploaded photos and authored recipes. Public restaurant information remains without its ownership link. Cancel paid subscriptions and remove external files first. Minimal security records, accounting obligations, provider records and backup copies follow the operator’s retention policy.
Your rights
You can request access, correction, deletion, restriction, portability or object where applicable. Your account supports data export and profile changes. Withdraw marketing consent at any time without affecting prior processing. You can complain to a competent data-protection authority, including Portugal’s CNPD.
Security and updates
We apply access controls, moderation and proportionate technical measures. No system removes all risk. This policy will be updated when services or practices change; the review date appears here.