Your privacy.

Information we collect

For accounts, we store your email address, account identifier, booking name, and profile information supplied through sign-in. Email and password authentication is handled by Supabase. If you choose Google or Apple sign-in, we receive the account information that provider shares with us.

For events, we store the event name, organiser name, location name and address, latitude and longitude when supplied, dates and times, participant limit, remarks, and participant visibility setting. Joining an event requires a name and email address. We also store your booking or waitlist status and a private submission identifier. Without the required information, we cannot create your account or process your booking.

How we use your information

We use this information to sign you in, create and manage events, record attendance and waitlists, show your event history, and let you view or cancel submissions. When email delivery is configured, we send creators an event confirmation with event details and a sharing link, and participants a booking confirmation with event details and their private submission link. We also process sign-in security information to help prevent abuse.

Saved defaults

Clicking “Save for next time” stores that field in your account profile for future events. Saved locations include the name, address, latitude, and longitude when available. The “Show participants” preference is saved automatically after an event is created. Dates and times are stored for each event, but never as reusable account defaults. Editing a field alone does not update its saved default.

Who can see booking information

Anyone with an event link or booking code can view its event details, including the organiser name, location, and remarks. When “Show participants” is enabled, they can also see participant names and attendance status. Participant email addresses are not included in the public participant list. Organisers can manage participant names and booking or waitlist statuses.

Your private submission link gives access to your submission and its cancellation controls. Keep it private: anyone with the link can use it. Information copied into shared messages, email, or calendar apps is also held outside One-click.

Services that process information

We use Supabase for accounts and data storage. Google or Apple processes sign-in when you choose that option. Location searches are sent to Apple Maps when you use the location search feature. When enabled, Resend processes the recipient email address and booking confirmation content to deliver email. Hosting providers process requests needed to serve the app and may keep operational and security logs. Processing locations depend on the providers and service configuration and may be outside your country.

Cookies and security

One-click uses secure, HTTP-only cookies to keep you signed in and complete external sign-in. The session cookie lasts up to 30 days; the temporary sign-in cookie lasts up to one day. Signing out clears the session cookie. Blocking these cookies may prevent account features from working.

Sign-in protection uses hashed email and network-address identifiers to limit repeated attempts. Account-only actions require authentication. Shared booking codes and private submission links still need to be handled carefully by the people using them.

Retention and your choices

Account details and saved defaults remain associated with your account until changed or the account is deleted. You can replace a saved default by entering a new value and saving it again. You can delete your account from the account menu.

Deleting your account removes the account and its saved defaults, but does not delete existing event records, organiser details, or participant and submission records. Cancelling a submission changes attendance; it does not erase all records of the submission. Our daily cleanup permanently deletes events one calendar month after their end time, together with their participant, waitlist, and submission records. Their booking and private submission links then stop working. Copies in emails and external calendars are unaffected. Deleting your One-click account does not delete your Google or Apple account.

Use your private submission link to review or cancel a booking. For changes to an event or its participant list, contact the event organiser. Depending on applicable law, you may also have rights to request access to or correction of your personal information.

Contact us

For privacy questions or requests to access, correct, or delete personal information, email help@bookway.app. Include enough information to identify your account or booking, but do not send passwords or private submission links. We may need to verify your identity before handling a request.

Changes to this policy

We may update this page as the service changes. The date above identifies the latest version.