Privacy policy

Fuego Members and the membership system of Fuego Bistro Seychelles (Angel Fish Ltd). Last updated 11 November 2026.

Who we are

The membership programme, its data and this app are run for Fuego Bistro Seychelles (Angel Fish Ltd), the data controller. The app is built and operated by Urban Media (www.urbanmedia.io), the developer shown on Google Play and the App Store. For anything about your data, including access, correction or deletion, email jean-luc@urbanmedia.io or speak to the team at the venue.

What we collect

Membership details: your name, member number, VIP or Member grade, membership and card dates, and the contact details you or the team enter: email address, phone number and date of birth.
Your photo, if the team takes one: it is shown to door staff when your card is scanned and is never shown in public.
Preferences you or the team add: favourite drinks, usual table and allergies (so your table can be ready and served safely).
Visits: when your card was scanned at the door, and by which staff account.
Loyalty: points, rewards you redeemed, friends you referred, and card renewal requests.
Bookings: table bookings, pre-orders, orders from the table, the friends and guests you add, and messages such as "running late".
Spend: the bill total staff record after a night (staff only, not shown in the app).
Your app login: your email address and password. The password is stored only as a salted scrypt hash, never in plain text.
Notes the team writes on your membership.

We do not collect your location, contacts, photos from your phone, advertising identifiers or browsing activity. The app has no advertising and no analytics or tracking tools.

How the app uses your phone

Camera: only when you tap to scan the QR code on your table. On Android the scan is done by Google Play services on your phone; on iPhone by the app itself. The picture is not stored or sent anywhere, only the table code.
Notifications: booking and card-expiry reminders are scheduled on your phone itself. They are not sent through our server.
Wallet: if you choose "Add to Apple Wallet" or "Add to Google Wallet", your name, member number, card dates and card QR code are put in a pass that Apple or Google keeps on your account, under their own privacy policies.

How we use it

Only to run your membership: checking your card at the door, your points and rewards, birthday and referral points, table bookings and orders, splitting the bill, reminding you about bookings and renewals, and looking after you at the venue. We never sell your data or use it for advertising.

Who sees it

The venue team, each according to their role (for example, door staff see your photo and whether your card is valid).
Friends at your table see the names of the people on a booking they are part of, and the shared bill.
Our hosting provider (Contabo GmbH) stores the data on our server. Apple and Google deliver wallet passes and staff notifications. We share nothing else with anyone, unless the law requires it.

One account for both venues

The Beer Garden and Fuego Bistro are both run by Angel Fish Ltd. One account works in both venues' apps (TBG Members and Fuego Members): your email address, your password (stored only as a hash), your name, phone number and date of birth are kept in one place so you can sign in at either venue with the same details. Everything else (your membership, card, wallet balance, vouchers, loyalty points, visits, bookings and orders) is kept separately by each venue, and each app shows only its own venue. Deleting your account in one app deletes that venue's data and the shared sign-in; your membership at the other venue is kept until you delete it there too.

How we keep it safe

All connections use HTTPS encryption. Passwords are hashed. Staff accounts are personal, protected by passwords and limited by role, and changes are logged. The server is kept up to date and backed up every night.

How long we keep it, and deleting it

We keep your data while you are a member. You can delete your account at any time, in the app (Profile › Delete my account) or on our account deletion page. You can also ask the team, or email us.

Deleting your account removes your membership and your personal data straight away: your details, photo, preferences, card, points, rewards, bookings and recorded spend. Your card stops working. We keep only records that no longer identify you: door entry counts and payment amounts needed for the venue's accounts. Nightly backups are kept for 30 days, after which the deleted data is gone from them too.

Your rights

You can ask to see, correct or delete your data, or object to how it is used, by emailing jean-luc@urbanmedia.io. We will reply within 30 days.

Fuego Staff, the team's app

Fuego Staff is used only by the venue team; accounts are created by the venue's admins, not in the app. It keeps the staff member's name, username and role, a hashed password, which staff account scanned each card or checked in each guest, and, for roles that handle bookings, the phone's notification token so booking alerts reach that phone. The camera is used only to scan membership cards; pictures are not stored. Staff accounts are removed by the venue's admins when someone leaves.

Children

Fuego is for adults aged 18 and over. The app is not meant for children, and we don't knowingly collect data about them.

Changes

If this policy changes, we update it here and change the date at the top.