Privacy Policy

1. Who we are

[Company name] operates Boozie and is responsible for your personal data. Address: [Registered address]. Email: privacy@[domain].

2. Data we collect

Data you give us:

• Account details: your name, username, email address, phone number, birth date and password.
• Profile photo, if you choose one. The app only uses the picture you pick.
• Bookings: the venue, table, date and session, party size, any note you add for the venue, and the booking's status.
• Messages you send to venues in chat, and their replies.
• Your favourite venues and your notification settings.

Data we collect when you use Boozie:

• Kept bottles: the records venues add about bottles they keep for you, such as the label, photos and expiry date.
• Location, only if you allow it: while you use Boozie, the app reads your device's position and sends it with venue searches, so that we can show venues near you and how far away they are. Boozie does not track your location in the background. Without location, Boozie still works and simply shows no distances.
• Push notifications (iOS and Android): your device's push token and your Boozie user ID are registered with our push provider, OneSignal, together with basic device information such as the device type, operating system and language.
• Technical data: our servers record your IP address, the time of each request, your app language and similar technical details, to keep Boozie running and secure.
• Usage analytics: which screens and pages you open and what you do in Boozie (for example viewing a venue, searching, starting a booking or sending a request), with basic device and browser details. We collect this through our analytics provider, PostHog, to understand which features people use and to improve Boozie. When you're signed in, these events are linked to your Boozie user ID, never to your name, email or phone number. The Boozie website collects the same kind of data without linking it to an account.
• Error reports: when something goes wrong in the app, on the website or on our servers, a report is sent to our error-monitoring provider, Sentry, so that we can fix it. It says what failed, the screen or page where it happened (without search terms or the codes in shared links), the app version and basic device and browser details. We don't add your name, email, phone number or Boozie user ID to error reports.
• Requests and suggestions you send us: when you ask Boozie to book a venue for you, the venue, date, time, party size, note and the phone number you give; when you suggest a venue or contact us through a form, what you write and the contact details you give.

Data from Telegram and WeChat, when you use Boozie there:

• Telegram: Telegram passes us your Telegram user ID, name, username, profile photo and language. We use them to sign you in and, when you start a new account, to fill in your name and photo. If you allow the Boozie bot to message you, we send your notifications through Telegram.
• WeChat: WeChat gives us an identifier for your WeChat account (OpenID), which we use to sign you in.

Your name, username, email address, phone number, birth date and password (or a Telegram or WeChat sign-in) are needed to create an account and book. Without them we can't provide the service. Everything else is optional.

3. How we use your data

• To create your account, sign you in and confirm your email address with a code.
• To check that you are at least 21 years old, at sign-up and before you book.
• To send your booking requests to venues, show you their answers and let you manage your bookings.
• To show the bottles venues keep for you and remind you before they expire.
• To deliver your messages to venues and theirs to you.
• To send the notifications you choose (bookings, messages, bottles and promotions from venues you favourite) in the app, as push notifications or through Telegram.
• To show venues near you.
• To handle your requests: when you ask Boozie to book a venue that isn't bookable in the app, our team calls the venue with your booking details and lets you know the answer.
• To understand how Boozie is used and improve it (usage analytics).
• To keep Boozie secure, prevent misuse and fix problems.
• To meet our legal obligations.

We don't use your data for advertising and we don't sell it.

4. Who we share it with

• Venues: when you ask Boozie to book a venue for you, our team gives the venue your name, the booking details and, if needed, your phone number. When you request a booking, the venue sees your name, phone number and the booking details, including your note. When you chat with a venue, it sees your messages and your profile name and photo. Each venue is responsible for how it uses the data it receives.
• Service providers that run parts of Boozie for us: server hosting and photo storage (Railway), push notifications (OneSignal), usage analytics (PostHog), error reports (Sentry) and email delivery for sign-up and password codes. They may only use your data to provide their service to us.
• Telegram and WeChat, when you use Boozie inside them, under their own privacy policies.
• Authorities, when the law requires it, or to protect the rights and safety of our users, venues or others.
• A buyer or successor, if Boozie's business is sold or reorganised, under the same protections.

We don't sell personal data. Boozie contains no advertising and no advertising trackers. Our only third-party analytics is PostHog, which we use for the purposes above and not for advertising.

5. Data outside Malaysia

Our service providers may store or process data outside Malaysia. When they do, we take reasonable steps to make sure your data is protected to a standard comparable to the PDPA.

6. On your device

Boozie keeps your sign-in session on your device: in the Keychain or Keystore on phones, and in the browser's local storage in the Mini App. If you turn on Face ID or fingerprint sign-in, the phone also keeps a sign-in key there that only your face or fingerprint unlocks; the check happens on your phone, and Boozie never receives your face or fingerprint. Boozie also stores a few settings there, and, when analytics is on, an anonymous identifier for PostHog (in local storage on the web, not in a cookie). Boozie doesn't use cookies for advertising or tracking.

7. How long we keep it

We keep your data while you have an account. Technical logs are kept for a limited time.

You can delete your account in the app at any time: Profile → Delete account. Deleting your account:

• cancels your upcoming bookings;
• removes your profile, favourites and notifications;
• unlinks Telegram if it is linked;
• can't be undone.

Venues keep their records of your past bookings and kept bottles, without your name or contact details. Messages you exchanged with a venue may remain in that venue's conversation history. We may also keep some records for longer when the law requires it or to resolve disputes.

You can also ask us to delete your account by emailing privacy@[domain].

8. Your rights

Under the PDPA you can:

• ask for access to the personal data we hold about you;
• ask us to correct data that is inaccurate, incomplete or out of date (you can change most of it yourself in Profile → Edit profile);
• withdraw your consent or limit how we use your data, for example by turning off notifications or location, unlinking Telegram, or deleting your account;
• ask us questions or make a complaint about how we handle your data.

Send requests to privacy@[domain]. We may need to confirm your identity first, and we answer within the time the PDPA allows (21 days for access and correction requests). If you are not satisfied with our answer, you can contact Malaysia's Personal Data Protection Commissioner.

Withdrawing consent may mean we can no longer provide some or all of Boozie, for example bookings.

9. Age limit

Boozie is about bars, clubs and alcohol, and is only for people aged 21 or older. We check your birth date when you sign up and before you book. If we learn that someone under 21 is using Boozie, we close the account.

10. Security

Boozie only talks to our servers over encrypted connections (HTTPS), and we limit who can access personal data. No system is completely secure, so please keep your password to yourself and tell us at privacy@[domain] if you think your account has been misused.

11. Changes to this policy

We may update this policy as Boozie changes. We will change the "Last updated" date above and, for significant changes, let you know in the app.

This policy is available in English and Chinese. If they differ, the English version applies.

12. Contact us

Questions or requests about your personal data: privacy@[domain]. [Company name], [Registered address].