Privacy Policy

Account. Name, email address, and a hashed password (we never store your password in readable form).

Profile & marketplace activity. Bookings you make or receive, services, prices, reviews and ratings, favorites, messages with the other side of a booking, and — for professionals — the studio profile you publish (name, craft, city, bio, service menu, working hours, license number you provide for verification).

Live location (optional). If you turn on location sharing during an active booking, we process your device's GPS position to show it to the other participant of that booking. See section 3.

Payments. Payments are being rolled out with Stripe. Card details will be collected directly by Stripe and never touch our servers; we will see transaction metadata (amount, status, last four digits).

Device & logs. Standard technical logs (IP address, browser type, timestamps) used for security — for example rate-limiting sign-in attempts.

To run the marketplace: match customers with professionals, process bookings, deliver messages and notifications, display reviews, calculate professional earnings, and verify professional licenses. To keep the platform safe: fraud prevention, rate limiting, content moderation, and enforcing our Terms. To comply with law and respond to lawful requests.

We do not sell or share your personal information for advertising, and we do not use third-party advertising trackers.

Location sharing is off by default and only available while a booking is active (confirmed, on the way, or arrived). When you enable it, your position is visible to exactly one person: the other participant of that booking. Positions update while sharing is on and are stored only as your latest position.

All location data for a booking is permanently deleted the moment the booking is completed or cancelled, and you can stop sharing at any time with one tap. We never use location data for advertising or profiling.

Between users. Customers and professionals see what the marketplace requires: names, profile details, booking details, messages they exchange, reviews, and — when enabled — live location during an active booking.

Service providers. We use a small set of processors to run the service: hosting and database infrastructure, Stripe (payments, at launch), a transactional email provider (account emails), and identity/background-check providers for professional verification (at launch). Processors act under contract and only on our instructions.

Legal. We may disclose information when required by law, to protect users' safety, or in a business transfer (you'd be notified).

We keep account data while your account is active. Live location data is deleted at booking completion (section 3). Password-reset tokens expire after 15 minutes and are single-use. Security logs are retained briefly for abuse prevention.

Delete your account yourself in the app: Profile → Account settings → Delete my account. Your personal information is erased and your name is removed from historical records; anonymized booking records are retained where required for professionals' financial and tax history.

Regardless of where you live, you can: access and export everything we hold about you (Account settings → Download my data — instant JSON export), correct your details, delete your account, and end all sessions ("Sign out everywhere"). If you're in a jurisdiction with specific privacy rights (GDPR, UK GDPR, state laws), these tools plus the contact below are how you exercise them. We respond to requests at help@boujeebook.app within 30 days.

We do not sell your personal information and have not done so in the preceding 12 months; we do not share it for cross-context behavioral advertising. Categories collected are described in section 1; purposes in section 2. California residents may exercise access, deletion, and correction rights via the in-app tools above or help@boujeebook.app. We do not discriminate against you for exercising your rights. Authorized agents may submit requests by email.

We use a single strictly-necessary cookie: your session (so you stay signed in). It is httpOnly and never used for tracking or advertising. Because we use no analytics or advertising cookies, no cookie consent banner is required.

Passwords are hashed with scrypt. Sessions are httpOnly cookies with server-side revocation. All privileged administrative actions are recorded in an audit log. Sign-in, password reset, messaging, and booking endpoints are rate-limited. Data in transit is encrypted with TLS in production. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law. Report security issues to security@boujeebook.app.

Boujee Book is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18; if you believe a minor has an account, contact us and we will delete it.

If we materially change this policy, we'll notify you in-app or by email before the change takes effect. Questions and requests: help@boujeebook.app · Boujee Book Technologies, Inc., 68 Jay Street, Brooklyn, NY 11201.