Privacy Policy

Last updated: February 26, 2026

1. Introduction

Booki ("we," "our," or "us") operates the Booki platform (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Authentication credentials (securely hashed passwords or Apple Sign-In tokens)
  • Account role (organizer or member)

Usage Data

When you use the App, we automatically collect:

  • Pick and activity records you create within the App
  • Ledger entries and balance information
  • Device information (device type, operating system version)
  • App usage patterns (features accessed, timestamps)

Payment Information

If you subscribe to Booki Pro, payment processing is handled entirely by Stripe. We do not collect, store, or have access to your full credit card number, bank account details, or other sensitive financial information. We receive from Stripe only:

  • A Stripe customer identifier (for managing your subscription)
  • Subscription status (active, canceled, etc.)
  • The email address associated with your Stripe account

For details on how Stripe handles your payment data, see Stripe's Privacy Policy.

Information We Do Not Collect

  • We do not collect location data
  • We do not access your contacts, photos, or other device data
  • We do not directly collect or store credit card numbers, bank account details, or other sensitive financial information (payment processing is handled by Stripe)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the App
  • Authenticate your identity and manage your account
  • Process and manage your subscription (if applicable)
  • Sync your data across your devices
  • Send important notifications about your account, subscription status, or the service
  • Respond to your inquiries and support requests
  • Detect, prevent, and address technical issues

4. Data Storage and Security

Your data is stored in our cloud infrastructure powered by Supabase (hosted on AWS). We implement industry-standard security measures including:

  • End-to-end encryption for data in transit (TLS 1.2+)
  • Encryption at rest for stored data
  • Row-level security ensuring each organizer's data is completely isolated
  • JWT-based authentication for all API requests
  • Idempotency keys to prevent duplicate operations

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Within your group: Organizers can see the activity and balances of members in their group. Members can only see their own data.
  • Service providers: We use Supabase for cloud infrastructure and authentication. Their privacy policy governs their handling of data.
  • Legal requirements: We may disclose information if required by law, regulation, or legal process.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized, aggregated data may be retained indefinitely for analytics.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data (available via the Export Data feature in Settings)
  • Withdraw consent for data processing

To exercise any of these rights, contact us at the email below.

8. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

9. Third-Party Services

The App integrates with the following third-party services:

  • Supabase: Cloud database, authentication, and real-time sync
  • Stripe: Payment processing for Booki Pro subscriptions. Stripe receives your payment details directly — we never see or store your full card number. See Stripe's Privacy Policy.
  • The Odds API: Sports data and scores (no personal data is shared)
  • Apple Sign-In: Optional authentication method

Each third-party service has its own privacy policy governing its use of data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the App and updating the "Last updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: