1. Who we are
Bouki.ai operates Bouki. Questions and privacy requests can be sent to hello@bouki.ai.
2. Information we process
Account and profile
Name, email address, date of birth, account identifier and authentication records. Accounts registered with a mobile phone number, as every account was before sign-in by email, Google or Apple and as older versions of the app still register them, also hold that number.
Signing in
In the current version of the app, you sign in with an email address, with Google or, on iPhone, with Apple, and a new account does not need a phone number.
- Email. Bouki collects the address you enter and emails a six-digit code to it.
- Google or Apple. That company tells Bouki its own identifier for your account and, when it provides them, your name and your email address, and Bouki links that identifier to your Bouki account. Bouki never receives your Google or Apple password. Apple sends your name only the first time you sign in to Bouki with it, and may send no email address at all.
- Hiding your email with Apple. Sign in with Apple lets you hide your email address. Apple then gives Bouki either an address it creates, which forwards to yours, or no address at all, and Apple does not tell Bouki your real address. When Apple gives Bouki a forwarding address, Bouki keeps it with the Apple account linked to yours. If you give Bouki your real address yourself, for example by signing in or confirming with it by email, Bouki keeps that address with your account as well. When you sign in with Apple, Bouki never uses a hidden address to sign you in to an existing account and never emails a code to it.
- Older accounts. An account created with a phone number keeps it. Bouki may ask for that number to confirm an older account is yours, and versions of the app that sign in by phone still send a code by SMS.
- Codes. Bouki stores an emailed code only as a keyed digest, never the code itself, records whether it was delivered, and removes these records after the code has expired, no later than the day after it was sent. A code sent by SMS to an older account is stored as the code itself, and kept until it is used or replaced by a new one; signing in by phone is being retired.
Cards and programmes
The cards and loyalty programmes you choose to add. Depending on the programme, this can include a card number, expiry date and a free-form provider or card name. Bouki does not ask for your PIN, CVV or one-time verification code.
Location and search
Precise coordinates when you grant location permission and request nearby offers; approximate region for analytics; merchant search text sent when you search offers; and the questions you type into Ask Bouki.
App use, notifications and diagnostics
Product interactions, an app-instance identifier, push-subscription identifier, device and operating-system information, performance measurements and crash or diagnostic data. Bouki links analytics and push identifiers to your account where needed to operate the service.
Support
Information you choose to include when contacting support. Do not send passwords, full card details, or a code from a Bouki sign-in or deletion message by email; the only code to send us is a support code we sent you to check the account is yours.
3. Information we do not collect
Bouki does not collect your address book, browsing history, health data, audio, or purchase history. Card photos selected or captured for recognition are processed on your device; the photos themselves are not uploaded. Bouki does not process card payments.
4. How we use information
- Create, authenticate and support your account, including emailing you the codes you ask for to sign in, confirm an email address or delete your account, and a notice when a sign-in method is added to your account. These emails are never marketing.
- Show cards, programmes, search results and optional nearby offers.
- Deliver service and first-party app notifications.
- Measure product use, diagnose failures, protect the service and improve reliability.
- Comply with legal obligations and respond to valid rights requests.
Ask Bouki
Ask Bouki lets you type a question, such as “dinner for two near Marina”, and shows you matching offers.
- Understanding your question. To work out what you are looking for, Bouki may send the words of your question to Anthropic, an AI service provider. Only the words you typed are sent. Bouki does not add your name, account, saved cards or your phone’s location. Long numbers and email addresses are removed first.
- The answer comes from Bouki. The AI only helps read the question. The offers you see are picked by Bouki from its own catalogue.
- How long we keep it. Bouki keeps your questions for about 30 days, to handle follow-ups and to make answers better, and then deletes them. If you delete your account, your questions are deleted with it; if that step fails, the 30-day clean-up removes them.
- A simple tip. You never need to put personal details, such as your name, phone or card number, in a question, so please leave them out.
5. Service providers
Bouki uses service providers acting on its behalf: Firebase Analytics; Firebase Performance on Android; OneSignal for push notifications and related product events; Sentry for crash and performance diagnostics; Google Maps on Android; Apple MapKit on iOS; Anthropic, which helps understand the questions you type into Ask Bouki; Resend, Inc., which delivers the emails Bouki sends: sign-in, confirmation and deletion codes, and account notices; and D7 Networks, which delivers the codes Bouki sends by SMS to accounts registered with a phone number. Resend receives your email address and the message in order to deliver it, sends it from Bouki's address at account.bouki.ai through its Ireland (EU) region, and tells Bouki whether it was delivered or bounced. Bouki does not use Resend for marketing. These providers may process app, device, diagnostic, interaction, identifier, email, location or question information according to their role. Bouki does not sell personal information.
If you choose to sign in with Google or Apple, that company handles the sign-in on its side under its own privacy policy, and gives Bouki only the information described in section 2.
6. Tracking and advertising
Bouki does not use your information to track you across other companies’ apps or websites. Current release candidates do not request Apple’s App Tracking Transparency permission and have advertising-identifier collection disabled. Older installed versions may contain third-party components that have since been removed; use the latest available version.
7. Retention and deletion
We keep personal information only for as long as needed for the purposes above, including account operation, security, dispute handling and applicable legal obligations. Deleting your account removes or de-identifies associated information unless a limited record must be retained for a lawful reason. When you delete your account, we keep a record of its internal account number and the dates it was created and deleted for up to 100 days, so that the deletion can be repeated if we ever need to restore data from a backup. This record contains no name, email address, phone number or other contact details. Ask Bouki questions are kept for about 30 days (section 4). Copies in backups can remain a little longer, until those backups expire.
You can delete selected data while keeping your account. To delete the entire account, use Menu → Delete Account in the app. If you cannot access the app, follow the web instructions or email hello@bouki.ai.
8. Your choices and rights
You can update profile information in the app, change location and notification permissions in device settings, and request access, correction, deletion, restriction or an end to certain processing where applicable. We may need to verify your identity before completing a request.
9. International processing
Some service providers may process information outside the UAE. Where required, Bouki uses appropriate safeguards for cross-border processing.
10. Security
Bouki uses technical and organisational measures designed to protect information, including encrypted transport, restricted service access and controls intended to keep sensitive values out of diagnostic reports. No system can guarantee absolute security.
11. Children
Bouki is intended for people aged 18 or older. Do not create an account if you are under 18.
12. Changes and contact
We may update this policy as the service or legal requirements change. We will publish the updated date and provide additional notice when appropriate. Contact hello@bouki.ai with questions or requests.