Birdieres Privacy Policy

• Account and profile information: email address, name, password hash or Google sign-in identifier, profile photo, bio, phone number, playing preferences, notification settings, and optional Venmo profile details.
• Booking and social activity: reservations, venues, dates and times, participants, waitlists, friend connections, groups, invitations, booking history, payment-request amounts and statuses, and Pokémon rewards earned through the service. Birdieres does not collect credit-card numbers.
• Booking emails: when you forward a reservation email or enable the optional Gmail connection, Birdieres stores the sender, recipient, subject, message identifiers, full message body, and booking details parsed from that message. The Gmail connection uses read-only access and filters for supported booking providers; Birdieres cannot send, change, or delete messages in your mailbox.
• Connected-service information: encrypted OAuth tokens and account identifiers for features you choose to connect, including Gmail and Google Calendar. Calendar access is limited to events that the app creates or owns.
• Device and usage information: session tokens, browser and device type, IP address, approximate city or region, pages and features used, performance measurements, and push-notification tokens. Birdieres uses cookies and local storage for sign-in and app preferences.

We use this information to:

• create and secure accounts and authenticated sessions;
• organize bookings, events, groups, invitations, and waitlists;
• import booking details and synchronize connected calendars;
• send service email and push notifications;
• support payment-request coordination through Venmo;
• provide support, troubleshoot failures, prevent abuse, and improve reliability; and
• comply with law and enforce our terms.

Birdieres shares only what is needed to operate the service: profile and participation details with people in your bookings or social connections; data with hosting, analytics, email, and notification providers; and data with Google, Venmo, or another integration when you choose that feature. We may also disclose information to comply with law, protect users, or in a business transfer. Birdieres does not sell personal information or share it for cross-context behavioral advertising.

Current service providers include Vercel for web hosting, performance, and analytics; Google for optional sign-in, Gmail, and Calendar connections; and Firebase Cloud Messaging for app notifications. Those providers process data under their own terms and privacy policies.

We generally keep account, booking, social, email-submission, and connected- service data while your account is active so the features you request continue to work. You can disconnect Gmail or Google Calendar to remove the corresponding access tokens without deleting your account.

When you delete your account, Birdieres removes your account and active sessions, owned bookings and groups, booking-email submissions, connected- service tokens, device tokens, notifications, preferences, friendships, and Pokémon collection from active systems. Your user link is removed from shared bookings and audit entries that other users or Birdieres still need for booking integrity, dispute resolution, security, or legal compliance. Limited records may remain in routine backups until those backups are overwritten.

See the public account-deletion instructions for the in-app steps and an email-request option.

You can update profile and notification choices in Settings, disconnect optional Google integrations, and delete your account in Settings → Account Details. Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of personal information, or object to certain processing.

To make a privacy request, email privacy@birdieres.com from the address associated with your account. We may ask for information needed to verify that the account belongs to you.

We use safeguards intended to protect personal information, including access controls, encrypted connections, and encryption for connected-service tokens. No storage or transmission method is completely secure.

Birdieres is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child under 13 has provided information to Birdieres.

Birdieres is operated in the United States. If you use it elsewhere, information may be processed in the United States and in locations where our service providers operate. We will update the effective date above when this policy changes and will provide additional notice when required by law.

Questions and privacy requests can be sent to Birdieres at privacy@birdieres.com.