BookedUp — Privacy Policy

Last updated: September 2026

1. What this covers

This policy explains what BookedUp collects, why, and what you can do about it.

2. What we collect

• Account data: your email address or phone number, and the name you choose to display. This comes from you, or from Apple or Google if you sign in with them.
• Business data you enter: your services, prices, working hours and the appointments and client contact details you record.
• Booking data from your clients: the name, contact detail and any note a client gives when they book with you. You are the one asking for it; we store it so you can see it.
• Usage data: anonymous product analytics (screens opened, actions taken) so we can see which parts of the app work and which do not.

3. What we do NOT do

We do not sell your data. We do not use it for advertising, and we do not track you across other apps or websites. The app declares no tracking domains.

4. Why we can use it

We process account and business data to provide the service you asked for, usage data on the basis of our legitimate interest in improving the app, and anything else only with your consent.

5. Who else sees it

• Supabase hosts our database and authentication.
• Stripe processes deposits, where a provider collects one, and receives only what it needs to take the payment.
• RevenueCat and Apple handle subscription purchases and receipts.
• PostHog receives anonymous product analytics.

Each is a processor acting on our instructions. Nobody else receives your data unless the law requires it.

6. How long we keep it

Account and business data is kept while your account exists. Deleting your account from Settings removes your account record and the data attached to it. Backups roll off on their own schedule within 30 days. Anonymous analytics is not linked back to you and is retained in aggregate.

7. Your rights

You can ask for a copy of your data, ask us to correct it, or delete your account outright from Settings. Where the law gives you the right to object to processing or to data portability, you have it. Write to us and we will act within 30 days.

8. Children

BookedUp is not intended for children under 13, and we do not knowingly collect their data.

9. Security

Data is transmitted over TLS and stored on managed infrastructure with access controls. Session tokens are held in the device keychain, not in plain storage.

10. Changes

If this policy changes materially, we will tell you in the app before the change takes effect.

11. Contact

Privacy questions, or to exercise any right above: admin@agenticfactory.app