Privacy Policy

Effective Date: February 12, 2026 · Last Updated: February 12, 2026

Bookd ("we," "us," or "our") operates the Bookd mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account using Sign in with Apple or Sign in with Google, we collect:

Name — your full name as provided by Apple or Google
Email address — used for account identification and communication

You may also voluntarily provide:

Phone number — for contact between renters and hosts
Profile photo — uploaded from your device's photo library

1.2 Location Data

We collect your device's approximate location only while the App is in use (with your permission) to:

Show nearby available vehicles
Calculate distances to listed cars
Help hosts set accurate pickup locations

We use "When In Use" location access only. We do not track your location in the background.

1.3 Payment & Financial Information

Payment processing is handled entirely by Stripe, Inc. When you:

Rent a car (renter): Stripe collects your payment card details. We receive a tokenized reference and transaction metadata (amount, booking ID) but never your full card number.
List a car (host): Stripe Connect collects your identity verification, bank account, and tax information directly. We receive your Stripe account ID and payout status but do not store your bank details, Social Security Number, or government-issued ID.

For more information, see Stripe's Privacy Policy.

1.4 Messaging Data

In-app messaging between renters and hosts is powered by Stream Chat (GetStream.io). Messages are transmitted and stored on Stream's infrastructure. We use your user ID to authenticate you with the chat service. For more information, see Stream's Privacy Policy.

1.5 Car Listing Data

If you list a vehicle, we collect:

Vehicle details (make, model, year, features, daily rate)
Vehicle photos (uploaded from your photo library)
Pickup location (city, address)

1.6 Booking Data

We store booking records including dates, pricing, payment status, and the identities of the renter and host to facilitate the rental transaction and provide customer support.

1.7 Device & Technical Data

Push notification tokens — to send you booking updates and messages
Device type and OS version — for compatibility and debugging

We do not use third-party analytics, advertising SDKs, or tracking frameworks. We do not collect IDFA (Identifier for Advertisers).

2. How We Use Your Information

We use the information we collect to:

Create and manage your account
Facilitate car rental transactions between renters and hosts
Process payments and payouts through Stripe
Enable in-app messaging between transaction parties
Send push notifications about bookings, messages, and account activity
Show nearby vehicles based on your location
Provide customer support and resolve disputes
Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

Between renters and hosts: Your name, profile photo, and phone number (if provided) are shared with the other party in a booking to facilitate the rental.
Stripe: Payment and identity verification data as described above.
Stream Chat: User ID and messaging data for in-app communication.
Supabase: Our backend infrastructure provider. Data is stored on Supabase's servers.
Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or to protect rights, safety, or property.

4. Data Storage & Security

Your data is stored on servers operated by Supabase (database and file storage) and secured with industry-standard encryption. Payment data is handled by Stripe's PCI-compliant infrastructure. Chat data is stored by Stream.

We use encryption in transit (TLS/HTTPS) for all communications. Access to backend systems is restricted using role-based access controls and service role keys.

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. Booking records and transaction history are retained for a minimum of 3 years for legal and tax compliance purposes. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Data Portability: Request your data in a portable format.
Opt-Out: You can disable push notifications and revoke location access at any time through your device settings.

To exercise any of these rights, contact us at the email address below.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information is collected, used, and shared.
The right to delete personal information held by us.
The right to opt-out of the sale of personal information. We do not sell personal information.
The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at the email address below. We will verify your identity before processing your request.

8. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

9. Third-Party Services

Our App integrates with the following third-party services, each with their own privacy policies:

Stripe — Payment processing and identity verification
Stream (GetStream.io) — In-app messaging
Supabase — Backend infrastructure and data storage
Google — Sign in with Google authentication
Apple — Sign in with Apple authentication

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@bookdapp.com