Privacy Policy
Bookie is a bookkeeping app that lets a small business and its team record every sale, expense and cash movement in one shared place. This policy explains what information we keep, why, who it goes to, and the choices you have.
The short version
- We keep what you and your team type into Bookie, plus what we need to sign you in and run your subscription.
- We don't show ads, we don't track you across apps, and we don't sell your information.
- Only if you say yes, the phone app shares usage and crash reports that aren't linked to your account, never what is in your books.
- Your data is stored in the European Union (Frankfurt, Germany).
- Card details are handled by Apple or Google. We never see them.
- You can export your records at any time, and delete your account from the app.
- Who we are
- What we collect
- How we use it
- Legal bases
- Who in your business can see it
- Companies that help us
- Where it is stored
- How long we keep it
- Your rights and choices
- If you own a business on Bookie
- Security
- Children
- Changes to this policy
- Contact us
1. Who we are
Bookie is provided by Abdulaziz Alawwad, based in Kuwait ("Bookie", "we", "us"). For the information described in this policy about you as a Bookie user, we are the data controller. You can reach us at support@usebookie.co.
2. What we collect
Your account
- Email address, used to sign in with a one-time code.
- If you choose Sign in with Apple or Google, the name and email address that service shares with us. With Apple you can choose to hide your email address.
- Your name, and optionally a phone number.
Your business records
Everything you and your team enter, including:
- Business details: name, type, currency, time zone, tax number (optional) and logo (optional).
- Branches: name, address, opening hours and opening cash float.
- Team members: name, role, the branches they work in, how they are paid (fixed or commission) and their commission percentage.
- Service cards, prices and expense categories.
- Entries: amounts, labels, payment method (cash or card), date and time, notes, who entered them, commissions, and the reason if an entry is voided.
- An edit history of each entry (what changed, when, by whom and from which device), and day closes.
- Invite codes. We store only a scrambled (hashed) form of each code.
Your devices
For each device you sign in on, we keep an identifier that the app creates, the device's name and type, and when it last synced. We use this to keep your devices in step and to enforce the limit of three devices per person. We don't collect advertising identifiers.
Your subscription
Your plan, whether it came from the App Store or Google Play, trial and renewal dates, and the plan's limits. Payments are made to Apple or Google. We receive the subscription status, never your card or bank details.
Messages you send us
If you email support, we keep your message and our reply so we can help you.
Technical information
Like any online service, our servers and our hosting provider record basic request logs (such as IP address, time and the request made) to keep the service running and secure. We do not use these for advertising or profiling.
What we don't collect
We don't use advertising or tracking tools, and this website sets no cookies. The Bookie web app keeps your sign-in in your browser's storage, which it needs to work, and nothing else. We don't access your contacts, your device's location or the microphone. The photo library is used only when you choose to add your business logo, and the camera only when you scan a code to set up a shop register. Reminders, such as the close-the-day reminder, are scheduled on your device; we don't send push notifications.
Usage and crash data (optional)
If you choose "Share anonymous usage" in the Bookie iPhone or Android app, it sends Google (Firebase Analytics and Crashlytics):
- which screens and features are used, as fixed names;
- your role (such as owner or staff), your plan, your business's currency, and counts in ranges, such as team size "6-15";
- your device type, operating system and app version, and a random identifier for this installation of the app;
- reports of crashes and errors.
Google also works out your approximate country or region from your network address; Google Analytics doesn't keep the address itself.
It never sends what is in your books: no amounts, notes, names, emails, phone numbers, business or branch names, or anything you type. This data is not linked to your account, your name or your email, and is not used for advertising or tracking. Usage data is kept for up to 14 months and crash reports for up to 90 days. It is off until you say yes on that device, and you can turn it off at any time in More → Settings → Share anonymous usage, which also deletes crash reports not yet sent. The web app doesn't use it.
Shop registers
If a business uses a shop register, we keep each team member's 4-digit PIN in a scrambled (hashed) form only, and the register tablet's own device record. So that PINs can still be checked when the connection drops, the register keeps the names of the people at its shop and their scrambled PINs. Wrong PIN tries are counted to lock a PIN after too many.
3. How we use it
- To provide Bookie: store your records, sync them between your team's devices, and produce your totals, insights and reports.
- To sign you in and keep your account secure, including sending one-time sign-in codes by email.
- To run your subscription: check your plan, apply its limits and handle trials, upgrades, downgrades and failed renewals.
- To answer your questions and support requests.
- To find and fix problems, and to protect Bookie and its users from abuse.
- To meet legal obligations, such as tax and accounting rules that apply to us.
We don't sell your information, use it for advertising, or use your business records to train AI models. Bookie's Assistant runs on your device and does not send your questions anywhere.
4. Legal bases
Where data protection laws such as the GDPR apply, we rely on:
- Contract: to provide the service you signed up for.
- Legitimate interests: to keep Bookie secure, prevent abuse and improve reliability, in ways that don't override your rights.
- Legal obligation: where the law requires us to keep or share information.
- Consent: for anonymous usage and crash data, and for camera and photo access, which you can withdraw at any time in the app or your device settings.
5. Who in your business can see it
Bookie is shared by a team, so the records in a business are visible to its members according to their role:
- The owner and executive managers see the whole business.
- Branch managers see the branches they are assigned to.
- Staff see their own entries and totals.
- A shop register shows the names of the people at its shop and today's entries there.
Your name, and the entries you record, are visible to the people who can see that branch.
6. Companies that help us
We use a small number of service providers to run Bookie. They process information only on our instructions and under contracts that protect it.
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | Everything stored in Bookie (hosted in Frankfurt, Germany) |
| RevenueCat | Keeps track of subscription status from the stores | An account identifier and your purchase history with Bookie |
| Apple and Google | App stores, payments, and optional sign-in | Purchase details, under their own privacy policies |
| Resend | Sends sign-in code emails | Your email address and the code |
| ImprovMX | Forwards emails sent to our support address | Your email to us |
| Google (Gmail) | The inbox where we read and answer support emails | Your email to us and our reply |
| Google (Firebase) | Anonymous usage and crash reports, only if you say yes | Screen and feature counts, device type, app version, crash reports; never your records |
| Cloudflare | Hosts this website and its domain name records (DNS) | Standard request logs |
We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.
7. Where it is stored
Bookie's database and files are hosted in the European Union (Frankfurt, Germany). Some providers, such as RevenueCat, Resend, ImprovMX, Cloudflare, Apple and Google, may process information in other countries, including the United States. Where that happens we rely on safeguards such as the European Commission's Standard Contractual Clauses.
The app also keeps an encrypted copy of your recent records on your device so it opens quickly. Signing out removes it.
8. How long we keep it
- Your account and businesses you own: for as long as your account is open.
- When you delete your account: it is scheduled for deletion 30 days later, and you can change your mind by signing back in before then. After 30 days we erase your sign-in, your profile, the businesses you own with all their records and files, and your memberships in other businesses. How to delete your account.
- Entries you recorded in someone else's business are part of that business's books, so they stay with that business under its owner's control, together with the name shown on them.
- Your subscription record at RevenueCat: we ask RevenueCat to delete it when your account is erased. Apple and Google keep their own purchase records under their policies.
- Usage and crash data (only if you said yes): up to 14 months for usage, up to 90 days for crash reports. It isn't linked to your account, so it can't be found and deleted with it.
- Backups are overwritten on a rolling basis and deleted data may remain in them for up to 30 days.
- Support emails: as long as needed to help you, and no longer than 2 years.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your information, to object to or restrict how we use it, and to withdraw consent. Many of these you can do yourself in the app:
- Correct your name and phone: in More, tap your name at the top.
- Export your records in More → Export (owners and managers).
- Withdraw consent for usage and crash data in More → Settings → Share anonymous usage.
- Delete your account: in More, tap your name, then Delete account. Or email us, which also works when you have no running plan. See Delete your account.
For anything else, email support@usebookie.co. We will answer within one month. You can also complain to your local data protection authority.
California residents: we don't sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information for purposes other than providing the service.
10. If you own a business on Bookie
When you add team members, you decide what to record about them and their work. For that information you are responsible for having a lawful reason to keep it and for telling your team how it is used, and we process it on your behalf. If a team member asks us about their data in your business, we may refer them to you.
11. Security
Information is encrypted in transit and at rest. Access inside each business is enforced on our servers, not only in the app. Sign-in uses one-time codes, so there is no password to steal, and each person can use at most three devices and sign any of them out. No system is perfectly secure, so please tell us at once if you think your account has been misused.
12. Children
Bookie is a tool for running a business and is not meant for anyone under 16. We don't knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.
13. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant, we will also tell you in the app or by email before it takes effect.
14. Contact us
Email support@usebookie.co.