Privacy Policy

Last updated: 4 October 2026

This Privacy Policy explains how Bookoraa (“Bookoraa”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you use the Bookoraa mobile app and the website at tickoff.org (together, the “Service”). Bookoraa is an appointment-booking marketplace that connects customers with local businesses such as salons, clinics, and studios.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide

  • Account information: your name, email address, phone number (optional), chosen username, password (stored only in hashed form), time zone, and account type (customer or business).
  • Business profile (business accounts only): business name, description, address, city and country, approximate location (latitude and longitude), opening hours, holidays, photos, the services you offer, your staff list, and your cancellation policy.
  • Booking and activity data: appointments you make or receive, the service and time slot booked, booking status, any notes you add, reviews and ratings you leave, businesses you save as favourites, waitlist entries, appointment invitations, and any accounts you block.
  • Images: photos that business accounts upload for their listings.

Information collected automatically

  • Device and push data: if you enable notifications, we store a device push token so we can deliver reminders and updates.
  • Technical and log data: standard server logs such as IP address, device/browser type, and timestamps, used to operate and secure the Service.

2. How we use your information

  • To create and manage your account and authenticate you.
  • To provide the core Service: searching for businesses, making and managing appointments, reviews, favourites, and invitations.
  • To send transactional messages you need, such as email verification, password-reset codes, appointment invitations, and push notifications about your bookings.
  • To show businesses relevant to a location you choose or provide (based on business addresses and coordinates).
  • To maintain the security, integrity, and reliability of the Service.
  • To comply with legal obligations and enforce our terms.

3. How we share your information

We do not sell your personal information. We share it only as needed to run the Service:

  • Between users to complete a booking: when you book an appointment, the relevant business sees the details needed to serve you (such as your name and the booking details), and business profile information is shown to customers.
  • Service providers (sub-processors) who process data on our behalf under appropriate safeguards:
    • Google Firebase Cloud Messaging — to deliver push notifications.
    • Cloudinary — to store and serve business listing images.
    • Our email delivery provider — to send verification, password-reset, and invitation emails.
    • Our hosting provider — to host the application and database infrastructure.
  • Legal reasons: when required by law, regulation, legal process, or to protect the rights, safety, and security of our users or the public.

4. Payments

Bookoraa currently supports paying the business in person at the time of your appointment (“pay at venue”). We do not collect, process, or store card numbers or other payment-card details through the Service. If we introduce online payments in the future, we will update this policy and rely on a dedicated payment processor to handle card data securely.

5. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. You can delete your account at any time. Deleted accounts are scheduled for permanent removal and are purged from our active systems after a 30-day grace period, except where we must retain certain information to meet legal or security obligations.

6. Security

We take reasonable technical and organisational measures to protect your data. Passwords are stored only as salted hashes, data in transit is protected with TLS encryption, and access to accounts is controlled with signed authentication tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights and choices

  • Access and update: you can view and edit your profile information from within the Service.
  • Deactivate or delete: you can deactivate your account or delete it entirely from your account settings.
  • Notifications: you can turn push notifications off at any time in your device settings.
  • Other requests: depending on your location, you may have rights to access, correct, export, or erase your personal data. Contact us using the details below to make a request.

8. Children's privacy

The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. International users

Your information may be stored and processed on servers located in countries other than your own. By using the Service, you consent to the transfer of your information to those locations, which may have different data-protection rules than your jurisdiction.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you through the Service. Your continued use of the Service after a change takes effect means you accept the updated policy.

11. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at support@tickoff.org.