We are committed to protecting your privacy. This policy explains what we collect, why we collect it, and how we keep it safe.
Name and email address — collected when you sign in with Google OAuth.
Phone number — collected when you verify your identity via WhatsApp OTP.
Booking details — client names, phone numbers, event dates, event types, guest counts, and booking status.
Financial data — hall rent amounts, advance payments, pending balances, payment histories, and itemised charge breakdowns (Labour, Electricity, Catering, etc.).
Business details — your venue/hall name, address, owner name, and contact number provided in Settings.
Manager accounts — phone numbers and names of managers you invite through the app.
To display your bookings, calendar, and upcoming events inside the app.
To generate PDF invoices, booking receipts, and financial reports for your hall.
To send WhatsApp payment reminders to clients with pending balances.
To provide Manager Access so your staff can view and create bookings on your behalf.
To authenticate your identity securely via Google OAuth and WhatsApp OTP.
Database — all data is stored in a MongoDB database hosted in a secure cloud environment.
Authentication — Google OAuth is handled by Emergent Auth. Phone OTP is delivered via Fast2SMS WhatsApp. We never store passwords.
Sessions — your login session is protected by a secure bearer token (7-day expiry), stored using Expo SecureStore on mobile.
Transport — all API calls are encrypted in transit over HTTPS/TLS.
Isolation — each owner's data is fully isolated. No cross-account access is possible by design.
Google OAuth is used solely for authentication — Google does not receive your booking or financial data.
Fast2SMS is used solely to deliver OTP messages — it receives only your phone number.
No advertising SDKs, tracking pixels, or analytics services are embedded in the app.
Managers you invite can view all bookings and create new bookings on your behalf.
Managers cannot access financial reports, revenue data, P&L statements, or business settings.
Manager access can be revoked at any time from Settings → Manager Access.
Managers authenticate with their own phone number or email, not yours.
Your data is retained for as long as your account is active.
You can delete your account from within the app via Settings → Delete Account.
You can also submit a deletion request at the /delete-account page using your registered email address.
On deletion: all bookings, financial records, session tokens, manager links, and account data are immediately and permanently removed.
Deleted data cannot be recovered.
Access: You can view all your data at any time within the app.
Correction: You can update your hall name, address, and contact details in Settings.
Deletion: You can permanently delete all your data at any time (see Section 6).
Portability: PDF reports of your bookings and finances can be downloaded from the app.
BookMyEvents is designed for business owners and their staff. It is not directed at individuals under 18 years of age.
We do not knowingly collect personal data from children under 18.
We may update this Privacy Policy from time to time. The effective date at the top will be updated accordingly.
Continued use of the app after changes are posted constitutes acceptance of the updated policy.