ExpatWatchdog

Privacy Policy

Last updated: April 2026

1. Who we are

Expat Watchdog is operated by Upfixe Lda. ("we", "us"). We provide a compliance tracking and information service for expats in Portugal.

2. What data we collect

  • Account information: email address, password (encrypted)
  • Profile data you provide during onboarding: citizenship, visa type, housing status, income type, health coverage, car ownership
  • Subscription and payment data (processed by Paddle as merchant of record — we do not store payment card details)
  • Device tokens for push notifications (FCM)
  • Usage data: pages visited, features used, anonymized analytics

3. Sensitive data (NIF)

We do NOT collect or store your NIF (tax identification number), NISS, or any government login credentials. Our onboarding only asks whether you have these documents (yes/no), not the numbers themselves.

4. How we use your data

  • To personalize your settlement checklist and compliance alerts
  • To send push notifications and email alerts about upcoming deadlines
  • To provide AI-assisted answers to your bureaucracy questions
  • To improve our service through anonymized usage analytics

5. AI chat data

Questions you ask the AI assistant are processed by Google (Gemini API) to generate answers. We send your question along with your profile type (visa type, citizenship) for context. We do not send your email, name, or any identifying information to the AI provider. Chat history is not permanently stored.

6. Data sharing

We do not sell your data. We share data only with:
  • Supabase (database hosting, EU region)
  • Paddle (payment processing, merchant of record)
  • Resend (transactional email delivery)
  • Google (Gemini API for AI chat, Analytics)
  • Firebase (push notification delivery)
  • Vercel (website hosting)

7. Data storage and security

Your data is stored in Supabase (PostgreSQL) in the EU-West-1 region (Ireland). All data is encrypted in transit (TLS) and at rest. Row-level security ensures you can only access your own data.

8. Your rights (GDPR)

You have the right to:
  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data in a portable format
  • Withdraw consent for marketing communications
To exercise these rights, email hello@expatwatchdog.com.

9. Cookies

We use essential cookies for authentication. We use Google Analytics with anonymized IP addresses for usage tracking. You can opt out via the cookie consent banner.

10. Children

Our service is not intended for anyone under 18.

11. Changes

We may update this policy. Significant changes will be notified via email or in-app notification.

12. Contact

Email: hello@expatwatchdog.com