Privacy Policy

BookiApp

Email: admin@bookiapp.com

Web: https://bookiapp.com

For all questions regarding personal data protection, you can contact us at the email address above.

We collect the following types of data:

Account Data:

- Email address

- First and last name

- Phone number (optional)

Property Data:

- Property names and descriptions

- Addresses and locations

- Accommodation photos

Booking Data:

- Guest names

- Stay dates

- Guest contact information

Technical Data:

- IP address

- Browser type

- Device information

Guest Portal Activity:

- Time of first and last visit to the portal

- Push notification subscription status

- Message read status

This data is visible only to the host of your booking and is used solely so the host knows whether they can effectively reach you through the app or should use another communication channel (phone, email).

We process personal data based on:

- Contractual obligation: Processing necessary for service provision

- Legitimate interest: Service improvement and security

- Consent: For marketing communications (you can withdraw at any time)

We use your data to:

- Provide and maintain our service

- Enable communication between hosts and guests

- Send service-related notifications

- Track Guest Portal activity so the host knows whether the guest has opened the portal and can effectively be reached through the app (legitimate interest, GDPR Art. 6(1)(f))

- Improve user experience

- Protect against fraud and abuse

We only share your data with:

- Service providers: Clerk (authentication), Supabase (database), Stripe (payments), Sentry (error tracking), Google Gemini (AI translation of messages and content, AI assistants), Google Analytics (public-page statistics, only with consent)

- Guests: Only information necessary for their stay

- Legal authorities: When legally required

We never sell your personal data to third parties.

As an EU resident, you have the right to:

- Access: Request a copy of your data

- Rectification: Correct inaccurate data

- Erasure: Request data deletion ("right to be forgotten")

- Restriction: Limit how we use your data

- Portability: Download data in machine-readable format

- Object: Object to processing in certain situations

To exercise your rights, contact us at admin@bookiapp.com.

We implement technical and organizational measures to protect data:

- Data encryption in transit (HTTPS/TLS)

- Secure password storage

- Regular security audits

- Limited data access

Smart Inbox is an optional feature: you connect your Gmail and reply to guest inquiries directly from BookiApp. If you connect it, the following rules apply:

Access permissions (OAuth scopes):

- gmail.readonly — read your incoming emails so we can recognise guest inquiries

- gmail.send — send replies to guests on your behalf, only when you click "Send"

- userinfo.email and userinfo.profile — link your Gmail account to your BookiApp profile

- We do not ask for permission to change or delete messages — BookiApp never marks, moves or deletes anything in your Gmail

What we store:

- Incoming emails from your mailbox (sender, reply-to address, subject, text and date) — except mail in Gmail's Promotions, Social and Forums tabs and newsletters or other bulk mail marked as such; we do not store those

- Your sent replies, only in conversations we already store (so you see the whole conversation)

- We do not keep mail older than 12 months

- Replies you send from BookiApp and the AI analysis of an inquiry (dates, number of guests, availability, suggested reply)

- Gmail access tokens — kept on the server only, never sent to the browser

How we process them:

- AI (Google Gemini) processes an email's content only on demand — when you open an inquiry or click "Analyze" — to recognise the inquiry, the dates and number of guests, and to suggest a reply

- When you ask for a translation, the text of your reply is sent to Gemini to translate it into the guest's language

- When you click "Learn from Gmail", the text of your last 20 sent emails is sent to Gemini once to suggest reply rules; those emails are not stored

- Nothing is sent to a guest automatically — a reply goes out only when you click "Send"

What we do NOT do with your Gmail data:

- We do not sell your Gmail data to third parties

- We do not use your Gmail data for advertising

- We do not use your Gmail data to train AI models (Gemini API does not train on our requests)

- We do not share your Gmail data with other BookiApp users

- Humans do not read your emails except for security, troubleshooting, or when legally required

Google API Services User Data Policy:

BookiApp's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Deletion:

- When you disconnect a mailbox in Smart Inbox settings, we immediately delete every email of that mailbox stored in BookiApp (received emails, your replies and AI analyses) and revoke access at Google

- When you ask us to delete your BookiApp account, we disconnect the mailbox right away, delete every stored email and revoke access at Google; the Smart Inbox settings are deleted with the account, which is permanently deleted 30 days after the request (until then you can restore it)

- Stored emails older than 12 months are deleted automatically

- Emails stored before October 23, 2026 that are no longer linked to any connected mailbox (left over from earlier disconnections) are not deleted by disconnecting; they are deleted with your account, and at the latest 12 months after they were received

- You can also revoke access yourself at myaccount.google.com/permissions

Outlook:

Connecting a Microsoft Outlook account is in preparation. When it becomes available the same rules will apply, and we will update this policy.

We retain data while:

- You have an active account with us

- Necessary for service provision

- Legal retention obligation exists

After account deletion, data is deleted within 30 days, unless law requires longer retention.

We use cookies for service functionality. For more information, see our Cookie Policy.

We may update this privacy policy. We will notify you of significant changes via email or in-app notification.

For privacy questions:

Email: admin@bookiapp.com

You have the right to file a complaint with the data protection supervisory authority in your country.