Privacy Policy

Booking Buddy is a small tool for planning pickleball with friends. We collect the account and scheduling info the app needs to work, we don't sell or share it with advertisers, and the one feature that touches your email ("Sync from Email") only ever reads booking notifications from CourtReserve, only when you ask it to, and only after you've reviewed and approved what it found.

Signing in creates an account via Supabase Auth, which stores your email address and handles authentication. Your profile also holds a username (shown to friends instead of your email), an optional display name, and an optional self-reported gender used only to compute Slot capacity for gendered formats.

Facilities, bookings, Slots, availability windows, and friend connections/groups you create are stored so the app can show your calendar and let you coordinate with the people you've connected with. This data is visible only to you and to the friends you've explicitly connected with or shared a Slot Link with — it is never public and never shared outside Booking Buddy. A friend you connect with sees your games and availability by default; you can limit that for one friend or for everyone from the Friends page.

Your personal invite link carries a random token tied to your account. Anyone who has the link can see your name and username on its landing page and, once they sign up, sends you a friend request you still have to accept. Resetting the link from your Friends page makes the old one stop working.

If you turn on push notifications, your browser registers a subscription we use solely to send you the booking-window and reminder notifications you've opted into. Turning them off removes that subscription.

We don't sell your data or share it with advertisers. Supabase hosts our database and handles authentication on our behalf, under its own security practices. If you use Sync from Email, your mailbox provider (Google or Microsoft) is necessarily involved for that one feature; nobody else is.

Every table is scoped with Row Level Security so you can only ever read or write your own data (and whatever friends have explicitly shared with you). Sensitive credentials, including the mailbox refresh token above, are encrypted at rest. All traffic to the app is served over HTTPS.

We keep your account and scheduling data for as long as your account exists. There's no self-serve "delete my account" button yet — if you'd like your data deleted, or have any question about this policy, reach out from the Contact page and we'll take care of it.

If how Booking Buddy handles your data changes in a meaningful way, we'll update this page. Since this app is still actively being built for a small group of friends, check back occasionally rather than expecting a change-notification email.