Privacy Policy
Last updated: May 2026
Overview
Bookerup ("we", "us") is a salon and barbershop management platform offered as both a website (bookerup.com) and a mobile app. This policy describes what information we collect, how we use it, who we share it with, and your rights under GDPR, UK GDPR, and similar privacy laws.
Information We Collect
Account data: name, email address, phone number, password (hashed). Salon data you provide: business name, address, services, pricing, staff profiles, photos, and operating hours. Booking data: appointment date/time, service, assigned staff, customer name and contact, payment method, amount paid. Usage data: pages visited, features used, device type, IP address (for rate limiting and abuse prevention). When you sign in with Google or Apple, we receive your name, email, and profile photo from those providers.
How We Use Your Information
To create and manage your account, process bookings, send appointment confirmations and reminders, calculate staff payouts and loyalty rewards, provide customer support, prevent fraud, and improve the service. We do not sell your personal data to third parties.
Service Providers
We use the following sub-processors to deliver the service: Supabase (database and authentication — EU region), Vercel (web hosting — global edge), Resend (transactional emails — bookerup.com domain), Google reCAPTCHA (booking abuse prevention), Expo Push Notifications (mobile push delivery), Stripe (payment processing — once subscriptions launch), Sentry (error monitoring), and Google/Apple (sign-in providers, only when you choose them). Each sub-processor receives only the data needed to perform its function.
Camera, Photo, and Notification Access
The Bookerup mobile app may request access to your device camera and photo library solely so you can upload a profile photo or salon images. We do not use the camera for any other purpose. No images are collected without your explicit action. Push notifications are used to remind you of upcoming appointments or inform you of booking updates; you can disable them in your device settings.
Cookies and Tracking
On the website we use only essential cookies for authentication (Supabase auth session) and CSRF protection. We do not use third-party advertising cookies or cross-site trackers. The mobile app stores authentication tokens in local secure storage on your device.
Data Storage and Retention
Your data is stored on Supabase's EU (Ireland) infrastructure, which runs on AWS data centers in the European Union. We retain your data for as long as your account is active. If you delete your account, all personal data is removed from active databases within 30 days; encrypted backups are deleted within 90 days. Appointment records and financial information may be retained longer if required by tax or accounting law in your jurisdiction.
Your Rights (GDPR / UK GDPR)
You have the right to: (a) access the personal data we hold about you, (b) request correction of inaccurate data, (c) request deletion of your account and personal data, (d) export your data in a portable format, (e) restrict or object to certain processing, and (f) lodge a complaint with a supervisory authority (in Ireland, the Data Protection Commission — dataprotection.ie). To exercise any of these rights, email hello@onoirstudio.com — we will respond within 30 days.
Children
Bookerup is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us and we will remove it.
International Transfers
Our primary data location is the European Union. Some sub-processors (Sentry, Vercel edge functions) may transfer data outside the EU; in those cases data is protected by Standard Contractual Clauses or equivalent safeguards.
Changes to This Policy
We may update this policy from time to time. Material changes will be notified to you by email and shown on this page with an updated "Last updated" date.
Contact
For privacy-related questions or to exercise your rights, contact us at hello@onoirstudio.com.