Legal
Privacy Policy
Food foo-foo is a restaurant discovery, reviews and reservations platform, available as a website and mobile application. This Privacy Policy explains how Thousand Pty Ltd (ACN 697 349 465) (“Food foo-foo”, “we”, “our”, “us”) collects, uses, shares and protects your personal information when you use our website at foodfoofoo.com, our mobile applications, and related services (the “Service”).
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”). By using our Service, you consent to the collection and use of your information as described in this policy.
1. Personal information we collect
We collect personal information that you provide to us directly, as well as information generated through your use of the Service.
Account information
- Your name
- Email address (used for sign-in and account communications)
- Password (stored in encrypted form)
- Profile photo (optional)
Information generated through your use of the Service
- Restaurants and bars you save as favourites or add to “want to go” lists
- Lists you create and places you add to them
- People you follow and who follow you
- “Mingles” (plans) you create or are invited to, including guest lists and event details
- Booking intentions — the date, time and party size you enter when using the Booking Assistant. We use these details to pre-fill the booking link we send you to, but we do not transmit them to the restaurant on your behalf.
- Reviews, ratings or comments you submit (if applicable)
Location information
If you grant permission, we collect your device’s location to show you nearby restaurants and bars, and to power map-based features. We request approximate location only — we do not track a continuous location history, and we do not collect your location in the background when the app is closed. You can disable location access at any time in your device settings. The Service will still work without location access, but some features (like “nearby”) will be limited.
Contact information (phone contacts)
If you grant permission, we read your device’s contacts only on your device and only when you open the “Add Guests” screen in Mingle, so we can show you names and photos to pick from. We do not upload your contact list to our servers or share it with any third party. If you invite someone by email, only the email address of the person you explicitly select is sent to our servers (so we can deliver the invitation). You can revoke contacts permission at any time in your device settings.
Device and usage information
- Device type, operating system and version
- App version
- IP address
- General usage data (pages viewed, features used, time spent)
- Diagnostic information to help us identify and fix issues
Communications
If you contact us (for example, by email), we’ll keep a record of that correspondence.
2. How we collect your information
We collect information:
- Directly from you when you create an account, update your profile, save places, use the Booking Assistant, or contact us
- Automatically when you use the Service (through cookies, our map provider’s telemetry, and similar technologies — see Section 5)
3. How we use your information
We use your personal information to:
- Create and manage your account
- Provide the core features of the Service — showing restaurants and reviews, saving places, helping you find availability across venues, connecting with friends, organising Mingles
- Pre-fill booking links with the date, time and party size you’ve entered, so you can complete your reservation on the restaurant’s booking page more quickly
- Send you transactional messages — including email verification links when you sign up, password reset emails when you request one, security alerts, and other essential account notices
- Send you product updates and marketing communications (only where you’ve opted in, and you can unsubscribe at any time)
- Respond to your questions and support requests
- Improve the Service, including analysing usage patterns and fixing bugs
- Protect against fraud, abuse and misuse of the Service
- Comply with our legal obligations
We do not sell your personal information.
4. How we share your information
We share your personal information only in the following circumstances:
With restaurants and booking platforms (via links you follow)
Food foo-foo does not make reservations on your behalf. When you use the Booking Assistant, we generate a link to the restaurant’s own booking page (or the third-party booking platform the restaurant uses, such as SevenRooms, ResDiary or OpenTable) with the date, time and party size pre-filled in the URL. When you follow that link, you leave the Food foo-foo Service and interact directly with the restaurant or booking platform. Any personal information you provide on their page (such as your name, phone number or special requests) is collected by them under their own privacy policies, not by us.
With other users, based on your privacy settings
Food foo-foo has social features. Depending on your settings, other users may see your profile, the places you’ve saved, lists you’ve created, Mingles you’ve created or been invited to, and who you follow. You control what is visible and can adjust your privacy preferences at any time in the app.
With our service providers (sub-processors)
We use the following trusted third parties to run the Service. These providers only process your information on our instructions and under contract, and may be located outside Australia.
- Supabase Inc. (United States / Singapore) — hosts our database and handles authentication. Your account information, profile, saved places, follows, Mingles and related content are stored on Supabase infrastructure.
- Mapbox, Inc. (United States) — provides the interactive map. When you use the map, Mapbox automatically receives technical telemetry (including IP address, device type, and approximate map-view location) to render tiles and improve its service. This is governed by the Mapbox Privacy Policy.
- Resend (Resend.com, Inc.) (United States) — delivers transactional emails such as sign-up verification, password resets and Mingle invitations. Resend receives the recipient email address and the email content.
- Hostinger — static web hosting for our marketing website and web app bundle.
- Apple Inc. (when you use our iOS app) and Google LLC (when you use our Android app) — app distribution platforms. They may collect basic install and crash data as described in their own policies.
We do not currently use third-party advertising networks, marketing analytics, or behavioural tracking tools. If we adopt any such tools in the future, we will update this policy and notify you before doing so.
When required by law
We may disclose your information if required by law, court order, or a valid government request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
In connection with a business transaction
If Thousand Pty Ltd is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We’ll notify you before your information becomes subject to a different privacy policy.
5. Cookies and similar technologies
Our website and app use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used so we can improve performance. We do not use advertising cookies, cross-site tracking cookies, or cookies that build a profile of you across other websites. You can control cookies through your browser settings. Blocking some cookies may affect how the Service works for you.
6. Links to third-party websites
The Service contains links to restaurants’ own websites and to third-party booking platforms. When you click one of these links, you leave the Food foo-foo Service. We don’t control those websites and aren’t responsible for their content or privacy practices. We recommend reading the privacy policy of any site you visit.
7. Overseas disclosure
Some of our service providers are located outside Australia (including in the United States and Singapore — see Section 4). When we share your information with them, we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.
8. How we protect your information
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include encryption in transit (HTTPS/TLS), access controls, row-level security on our database, and secure cloud infrastructure. No system is perfectly secure, however, and we can’t guarantee absolute security.
9. How long we keep your information
We keep your personal information for as long as you have an account with us, and for a reasonable period afterwards to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymise it.
10. Your rights and choices
Under Australian privacy law, you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate, incomplete or out of date
- Delete your account and associated personal information (subject to some legal exceptions)
- Object to or restrict certain uses of your information
- Withdraw consent for marketing communications at any time
You can exercise most of these rights directly in the app (through your profile and privacy settings) or by contacting us at the address below.
Deleting your account
You can delete your Food foo-foo account at any time from within the app. Go to Profile → Settings → Delete Account and follow the prompts. No email to us is required.
When you delete your account, we remove your profile and associated personal data from our active systems within 30 days. Residual copies may persist in encrypted backups for up to 90 days, after which they are overwritten. We may retain a limited subset of information where we are legally required to do so (for example, financial records required by tax law).
11. Children
Food foo-foo is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we’ll delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we’ll let you know through the app, by email, or by posting a notice on our website. The “Last updated” date at the top shows when this policy was most recently changed.
13. Contact us and complaints
If you have questions about this policy, want to exercise your privacy rights, or wish to make a privacy complaint, please contact us:
Thousand Pty Ltd
ACN 697 349 465
Email: privacy@foodfoofoo.com
Postal address: PO Box 663, Waverley NSW 2024, Australia
We’ll acknowledge your complaint within a reasonable time and respond within 30 days.
If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992