Privacy Policy
Applies to the BookNaKo mobile application and this website.
BookNaKo is a booking app for sports venues. You use it to reserve courts and spaces, order food and equipment at the venue, join open play sessions, and share photos with other members of the venue you belong to. This policy explains exactly what information the app collects, why, who it is shared with, and the control you have over it.
1. Who we are
BookNaKo (“BookNaKo”, “we”, “us”, “our”)
provides the BookNaKo mobile application, published on Google Play and the Apple App
Store. The Android package name and the iOS bundle identifier are both
com.booknako.app. We are the data controller for the information described
in this policy.
Each sports venue on BookNaKo operates its own membership. When you join a venue, that venue’s operator and their staff can see the information described in section 6 in order to manage your bookings and orders. The venue acts as an independent controller for how it uses that information in running its business.
Every venue operator must accept our Venue Data Sharing Agreement before it is given access to member information. That agreement sets out what the venue may see, what it may use it for, how long it may keep it, and the security and breach-reporting obligations it takes on. It also bars the venue from disclosing your information to anyone else or contacting you for anything unrelated to your bookings and orders. You can request a copy by emailing support@booknako.com; commercial terms and security configuration details are redacted.
Contact us at support@booknako.com.
2. Information we collect
2.1 Information you give us
| Data | Why we collect it | Required? |
|---|---|---|
| Mobile phone number | This is your sign-in identifier and how a venue contacts you about a booking | Required |
| Password | Securing your account. Stored only as a cryptographic hash, never in readable form. | Required |
| Display name (nickname) | Shown publicly to other members of your venue on your profile, posts and the members list | Required |
| First name and last name | Identity verification by venue staff. Never shown to other members. | Required |
| Home address | Identity verification by venue staff. Never shown to other members. | Optional |
| Recovery email address | Sending you a password reset link if you forget your password | Optional |
| Profile photo | Shown on your profile and next to your posts | Optional |
| Skill level | Balancing teams in open play sessions. It never affects your place in a queue. | Optional |
| Photos and captions you post | Sharing moments with other members of your venue | Optional |
| Notes on a booking or order | Passing a request to venue staff | Optional |
| Content reports you file | Reviewing posts that may break venue rules | Optional |
2.2 Information generated as you use the app
- Booking records covering the court or space, date, time, duration, price and status.
- Order records for food and equipment, including items, quantity and amount.
- Open play participation, including sessions joined and game results.
- Social connections, meaning which members you follow and who follows you.
- Blocks you create, so we can keep you and the blocked member hidden from each other.
- Hearts and reactions you give to posts.
- Venue membership records, including which venues you belong to and your status at each.
2.3 Information collected automatically
- Account identifier. A randomly generated internal ID that links your records together. It is not derived from your device or your phone number.
- Push notification token. An identifier issued by Google or Apple for your device, collected only if you allow notifications. It lets us send booking reminders and status updates, and it is deleted when you delete your account.
- Approximate location. Collected only when you tap the location button on the registration form. See section 3.
- Diagnostic information. Technical logs generated when the app encounters an error, used to identify and fix faults.
2.4 What we do not collect
- We do not collect precise or background location, and we never track your location while the app is closed.
- We do not collect payment card details, bank details or financial account numbers. There are no purchases inside the app.
- We do not collect your contacts, calendar, call logs, SMS messages, browsing history or installed app list.
- We do not collect biometric data, health data or government identification numbers.
- We do not record audio or video. The app captures still photographs only, and it does not request microphone access.
- We do not use advertising identifiers and we do not run any advertising or analytics tracking network in the app.
3. Device permissions we request
Every permission below is requested only at the moment the related feature is used, and the app remains usable if you decline. You can change any of these at any time in your device settings.
| Permission | What it is used for | If you decline |
|---|---|---|
| Camera | Taking a still photo to post as a memory, and setting a profile picture. Images are captured only when you press the shutter. The app does not record video or audio, and the camera is never accessed in the background. | You can still choose an existing photo from your library, or skip photos entirely. |
| Photo library | Choosing an existing photo for your profile or a post, and saving a venue QR code image to your device. | You can still take a new photo with the camera instead. |
| Approximate location (while using the app) | A single, one-time low-accuracy reading taken only when you tap the location button, so we can fill in your city and area for you. It is converted to a place name at that moment and is not stored as coordinates. The app does not request precise location. | You type your city and area manually. Nothing else changes. |
| Notifications | Sending booking confirmations, reminders, order updates and venue announcements. | You still see every update inside the app. Only the device alert is skipped. |
4. How we use your information
- Creating your account and signing you in.
- Letting a venue verify who you are before approving your membership.
- Processing court and space bookings, open play sessions, and food and equipment orders.
- Showing your nickname and profile photo on your posts, your profile and the members list of your venue.
- Contacting you about a booking, an order or your account.
- Calculating membership status such as VIP, and applying venue settings including pricing, opening hours and availability.
- Sending notifications you have opted into.
- Enforcing venue rules, reviewing reported content, and applying blocks between members.
- Detecting, preventing and investigating fraud, abuse and security incidents.
- Diagnosing faults and improving the reliability of the app.
- Meeting our legal, accounting and tax obligations.
We do not use your information for automated decisions that produce legal or similarly significant effects on you, and we do not build advertising or marketing profiles.
5. Legal bases for processing
BookNaKo is operated from the Philippines for venues in the Philippines, and we process personal information under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules. Where a legal basis is required, we rely on the following.
| Purpose | Legal basis |
|---|---|
| Creating your account, processing bookings and orders | Performance of a contract with you |
| Camera, photo library, location and notifications | Your consent, given through the device permission prompt and withdrawable at any time |
| Security, fraud prevention and enforcing venue rules | Our legitimate interests in operating a safe service |
| Retaining transaction records | Compliance with a legal obligation, including tax and accounting law |
6. Who can see your information
6.1 Other members of your venue
Members of a venue you belong to can see only the following.
- Your display name (nickname)
- Your profile photo, if you set one
- Your skill level, if you set one
- Posts you publish, and your hearts and follows
Other members never see your phone number, your legal first or last name, your address, your recovery email, or your booking and order history. If you prefer, you can use a nickname rather than your real name.
6.2 Venue operators and staff
The operator and staff of a venue you have joined can see your legal name, phone number, address if you provided one, and your booking and order history at their venue. They need this to verify your membership and manage your reservations. Staff working an order counter see an abbreviated form of your name rather than your full details.
A venue can only ever see the information of its own members. Venues cannot see each other’s members, bookings, orders or posts. This separation is enforced by server-side access rules, not merely by what the app chooses to display.
6.3 BookNaKo
Our own technical staff can access data where strictly necessary to operate the platform, investigate a fault, respond to a support request, or comply with the law. Administrative actions are recorded in an internal audit trail.
7. Service providers and international transfers
We do not sell, rent or trade your personal information. We share it only with the providers that run the infrastructure behind the app, each of which processes data solely on our instructions under a contract.
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Google LLC) | Authentication, database, server functions | Account details, bookings, orders, posts, memberships |
| Cloudflare R2 (Cloudflare, Inc.) | Image storage and delivery | Profile photos and posted images |
| Expo (650 Industries, Inc.) | Delivering push notifications | Push notification token and message content |
| Resend (Plus Five Five, Inc.) | Sending password reset emails | Recovery email address |
| Google Play and Apple | App distribution and delivery of push notifications to your device | Device push token |
These providers operate data centres outside the Philippines, including in the United States, so your information is transferred and stored internationally. As required by the Data Privacy Act, we remain accountable for information transferred to a processor, and we use each provider under its standard data processing terms, which oblige it to process data only on our instructions and to apply appropriate security measures.
We may also disclose information where required by law, a court order or a valid request from a public authority, or where necessary to protect the rights, safety or property of our members, our staff or the public.
8. Multiple venues
You can belong to more than one venue. Your account is shared, but your membership, posts, bookings, orders and social connections are separate at each venue and are never visible across them. Leaving one venue does not affect your membership at another. You manage this in Settings → Manage venues.
9. How long we keep your information
| Data | Retention period |
|---|---|
| Account and profile information | While your account is active, then deleted when you delete your account |
| Posted memories and their images | Automatically deleted 30 days after posting |
| Push notification token | While notifications are enabled, then deleted on account deletion |
| Booking and order records | Retained for accounting and tax purposes, and anonymized when you delete your account |
| Diagnostic logs | Typically 90 days |
10. Deleting your account
You can delete your account at any time from Settings → Delete account inside the app. Deletion is immediate and permanent, and it removes you from every venue at once.
If you manage or work at a venue, you cannot delete your own account through this route, because doing so could leave the venue without an operator. Email support@booknako.com and we will arrange a handover first.
If you have uninstalled the app or cannot sign in, you can request deletion by email. Full instructions, including exactly what is deleted and what is retained, are on our account deletion page.
Booking and order records are the one exception to full deletion. They are retained because the venue must keep transaction records for its accounting and tax obligations, and they are anonymized so they can no longer be connected to you. Your name is replaced with a placeholder, your photo is removed, and a random reference code takes the place of your identity.
11. Your rights and choices
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete. Most of it is editable directly in Settings.
- Delete your account and personal information, as described above.
- Object to the processing of your personal information, in the circumstances allowed by law.
- Withdraw consent for camera, photo library, location or notifications at any time in your device settings, without affecting processing carried out before you withdrew it.
- Obtain a copy of the personal information you gave us, in an electronic format, so you can keep it or move it elsewhere.
- Be informed of a personal data breach affecting your information, as required by law.
- Lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).
To exercise any of these rights, email support@booknako.com. We acknowledge your request within 5 business days and respond within 30 days. We verify your identity before acting on a request, so that nobody can access or delete your information by pretending to be you.
11.1 Blocking and reporting
You can block any member from their profile or from any of their posts. Blocking is mutual. You stop seeing their posts and they stop seeing yours, and any follow between you is undone in both directions. You can review and lift your blocks at any time in Settings → Blocked players.
You can also report any post you believe breaks the rules, choosing a reason and adding detail. Reports are acted on within 24 hours. Reports go to the venue's operators, who are on site daily and normally act the same day, and who can remove the post or suspend the member. If a report is not resolved by your venue, or concerns the venue itself, email us and BookNaKo will act on it within 24 hours. Content that sexualises a minor is acted on immediately at any hour, with no window.
12. Security
- All data is transmitted over encrypted HTTPS connections, and is encrypted at rest by our infrastructure providers.
- Passwords are stored only as cryptographic hashes and are never readable by us.
- Access between venues is separated by server-side security rules, so one venue cannot read another venue’s data even if the app were modified.
- Administrative and staff functions are restricted by role, and sensitive actions are recorded in an audit trail.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant supervisory authority as required by law.
13. Children’s privacy
BookNaKo is intended for people aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has given us information, email support@booknako.com and we will delete the account and the information promptly.
14. No sale of personal information, no advertising
We do not sell your personal information, and we do not share it with anyone for advertising or marketing purposes. The app contains no advertising, no third-party advertising software and no advertising trackers. The app also contains no in-app purchases and no subscriptions.
15. Changes to this policy
We may update this policy from time to time. When we do, we revise the “last updated” date above. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect. Continuing to use BookNaKo after a change takes effect means you accept the updated policy.
16. Contact us
Email: support@booknako.com
Terms of Service: booknako.com/terms
Account deletion: booknako.com/delete-account