Your data, in your words.

If you're a business: your email, name, business name, and street address (which we geocode into lat/lng so the map shows you in the right spot).

If you're a consumer: a phone number and an optional name + short note when you send a booking request. That's it.

If you use the companion mobile app: your Expo device token so we can send push notifications, and (optionally) the businesses you choose to follow.

We do not collect: your location in the background, your contacts, your payment details, or anything else you don't type into the app yourself.

Businesses: your address becomes a pin on the map so consumers can find you. Your business name shows up next to your openings.

Consumers: the business you request sees your phone + name + note so they can confirm. No one else sees it — not us for marketing, not other businesses.

Notifications: we send push alerts for things you'd want to know (booking approved, opening filled, followed business posted a new slot). Nothing promotional.

Nobody, unless we say so here or the law forces us to. Specifically:

• Businesses see the phone, name, and note on requests sent to them.
• Consumers see the business's public info (name, address, hours, reviews) — never other consumers' details.
• Our service providers (map tiles, push notifications, hosting) process data on our behalf under standard confidentiality terms. We don't sell or share data with anyone else.

Booking requests are kept for 12 months so you have a history. Openings that are cancelled or expired are auto-cleared within 24 hours. Your account and reviews stay until you ask us to delete them.

You can ask us at any time to:

• Show you what data we hold about you.
• Correct anything that's wrong.
• Delete your account and all associated data.
• Export your data (openings, requests, reviews) as JSON.

Email hello@bookaway.com.au and we'll act on it within 7 days.

We use a login cookie to keep you signed in, and browser local storage to remember tiny UI preferences (like "you dismissed the Install App banner"). No tracking cookies, no third-party ad pixels.

Passwords are hashed with bcrypt — we never see them in plain text. Data in transit is HTTPS-encrypted. We store data in professionally-managed cloud infrastructure with standard access controls.

No system is 100% secure. If we ever discover a breach affecting you, we'll tell you within 72 hours.

Book Away is for people 16 and older. If you're a parent and think your child made an account, email us and we'll delete it.

If we change this policy, we'll bump the "Last updated" date and notify you on your dashboard before the change takes effect. For material changes (like sharing data with new third parties), we'll ask for your consent — not just assume it.