Privacy Policy

1. Who we are

BookrGo is a sports court booking platform operated from Spain. You can contact us at hola@bookrgo.app.

2. What data we collect

We collect the following personal data when you use our service:

• Account information: name, email address, and encrypted password.
• Booking history: records of court reservations you make or participate in.
• Device tokens: for sending push notifications (only with your consent).
• Location data: approximate location used to find nearby courts (only when you grant permission).
• Usage data: interactions within the app to improve the service (analytics).
• Payment data: processed securely by Stripe; we never store card details.

3. How we use your data

We use your personal data to:

• Provide and maintain the court booking service.
• Send relevant notifications about your bookings, matches, and communities.
• Improve and personalize your experience within the app.
• Process payments for subscriptions.
• Ensure the security and integrity of the platform.

4. Legal basis for processing

We process your data under the following legal bases:

• Consent: for push notifications, location access, and analytics cookies.
• Contract performance: to provide the booking service you signed up for.
• Legitimate interest: to improve the platform, prevent fraud, and ensure security.

5. Data sharing

We share your data only with the following third-party processors, strictly to provide the service:

• Stripe: payment processing (PCI DSS compliant).
• Firebase (Google): push notifications, analytics, and crash reporting.
• Resend: transactional email delivery.

We do not sell, rent, or trade your personal data to third parties.

6. Data retention

We retain your personal data for as long as your account is active. If you delete your account, your data is soft-deleted and permanently removed after 30 days. You may request immediate deletion by contacting us.

7. Your rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion of your data ("right to be forgotten").
• Data export: download your data in a portable format.
• Object: object to data processing based on legitimate interest.
• Withdraw consent: at any time, without affecting prior processing.

You can exercise these rights from the app (Account > Settings) or by emailing hola@bookrgo.app.

8. Cookies

We use the following types of cookies:

• Essential: authentication tokens required for the service to function.
• Analytics: with your consent, to understand usage patterns (Google Analytics).
• Advertising: with your consent, to display relevant ads.

9. Children

BookrGo is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Data security

We implement industry-standard security measures to protect your data:

• All communications over HTTPS/TLS encryption.
• Passwords hashed with bcrypt (never stored in plain text).
• Authentication via JWT tokens with expiration.
• Rate limiting and brute-force protection.
• Regular security reviews.

11. International transfers

Your data is stored on servers in the European Union (Hetzner, Germany). We do not transfer your data outside the EU except through third-party processors (Stripe, Firebase, Resend) that comply with EU data transfer regulations and maintain adequate safeguards.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hola@bookrgo.app.