Expo App Privacy Policy
Last updated: 8 October 2026
This Privacy Policy explains how Fun Expo Games Ltd (“Expo”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you use the Expo mobile application (the “App”). Please read it carefully before using the App.
Fun Expo Games Ltd is the data controller for the personal data described in this policy. This means we decide how and why your personal data is processed.
Data controller
Fun Expo Games Ltd
Email: info@funexpo.ie
Address: Omni Park Shopping Centre, Santry, Dublin 9, Ireland
1. Personal data we collect
We collect the following categories of personal data when you register for and use the App.
| Category of data | Details | Purpose |
|---|---|---|
| Account credentials | Email address and password. Passwords are handled by Google Firebase Authentication; we never see or store your password in readable form. | To create your account and sign you in |
| Mobile phone number | Your mobile number | To send the SMS code used for two-factor authentication, and to identify your account |
| Identity details | First name, surname and nationality | To set up and verify your membership |
| Identity verification images | A photo of your face and a photo of your identification document | To verify your identity and age when you register |
| Venue preference | Your preferred venue | To show you the relevant vouchers and notifications |
| Preferences and consents | Your choices on notifications, timeouts, self-exclusion and acceptance of our terms | To apply your preferences and meet our legal and regulatory obligations |
| Loyalty and voucher activity | Vouchers issued or redeemed, and when you tap in at a venue | To run the loyalty programme and prevent misuse |
| Device and technical data | Device and app identifiers (including a push notification token), and basic app usage and diagnostic data | To deliver notifications, keep the App secure and fix problems |
Biometric unlock.If you choose to use fingerprint or face unlock to open the App, this is handled entirely by your device's operating system. We do not receive, access or store your biometric data.
2. How we use your data and our legal basis
We use your personal data only for the purposes below, and we rely on a lawful basis under the GDPR for each one.
| Purpose | Legal basis |
|---|---|
| Providing your account, membership, vouchers and loyalty rewards | Performance of our contract with you |
| Verifying your identity and age | Legal obligations (including licensing requirements) |
| Securing your account with two-factor authentication | Performance of our contract; legitimate interests in security |
| Sending notifications you have opted in to, such as voucher, timeout and promotional messages | Your consent |
| Applying timeout and self-exclusion choices | Legal obligations; performance of our contract |
| Preventing fraud and abuse | Legitimate interests in security and fraud prevention |
| Meeting legal and licensing obligations | Legal obligations |
Withdrawing consent. Where we rely on your consent, such as for promotional notifications, you can withdraw it at any time in the App settings. This does not affect processing carried out before you withdrew it.
3. Who we share your data with
We do not sell your personal data. We share it only with the recipients below, and only to the extent necessary.
| Recipient | Data shared | Reason |
|---|---|---|
| Google (Firebase and Google Play services) | Account, phone, device and usage data | Authentication, SMS verification, push notifications, app integrity checks and analytics |
| Our server and hosting providers | Data stored in the App's systems | To store your data securely on our behalf |
| The licensed venue you use the App with | Your name, mobile number, email address, age, photo identification and notification preferences | To manage your membership and meet the venue's licensing obligations |
| Regulators or law enforcement | Data required by law | Where we are legally required to disclose it |
Our service providers act on our instructions and are bound by contractual obligations to protect your data.
International transfers
Some of your data may be processed outside the European Economic Area (EEA), for example by Google. Where this happens, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses, to ensure your data receives an equivalent level of protection.
4. How long we keep your data
| Situation | Retention period |
|---|---|
| While your account is active | We keep your data for as long as your account remains active |
| After you delete your account | All of your personal data is deleted within 60 days, as required |
| After the 60-day period | We keep only a record that your account existed, and any other data that is required for GDPR or legal purposes |
5. How we protect your data
We take appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit: all data sent between the App and our servers is encrypted using HTTPS.
- Access controls: access to personal data is restricted to authorised staff and systems that need it.
- Secure authentication: passwords are managed by Google Firebase Authentication, and accounts are protected by SMS two-factor authentication.
6. Your rights
Depending on where you live, including under the GDPR, you have the following rights over your personal data:
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data |
| Restriction | Ask us to limit how we use your data |
| Objection | Object to our use of your data, including where we rely on legitimate interests |
| Portability | Receive a copy of your data in a portable format |
| Withdraw consent | Withdraw consent at any time where we rely on it |
How to exercise your rights:
- Delete your account directly in the App (see our account deletion page).
- For any other request, email info@funexpo.ie.
- To make a complaint, contact your local data protection authority. In Ireland, this is the Data Protection Commission (dataprotection.ie).
7. Children
The App is intended for adults only. It is age-restricted on the Google Play Store and cannot be downloaded by anyone under the age of 18. We verify age at registration and do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will delete it promptly.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will also notify you in the App.
Contact us
If you have any questions about this policy or how we handle your personal data, please contact Fun Expo Games Ltd at info@funexpo.ie.