Privacy Policy
Last updated 13 July 2026 · Terms of Service are here
The short version
- We collect what we need to run your account and pass your booking to the operator you choose — your name, contact details, booking details, and any travel documents you add.
- We never see or hold your payment. You pay operators directly by bank transfer, so we don't store card or bank-account numbers.
- Your passport and licence photos are stored privately and encrypted. An operator only sees a document when you attach it to a booking request.
- You can delete your account and personal data at any time from your account page. Operators keep their own records of past bookings, with your name and contact details removed.
1. Who we are
The BukNau platform (buknau.com and related apps and services, “BukNau”, “we”, “us”) is operated by BukNau Holdings Limited, a company registered in Hong Kong. For the personal information described here, BukNau Holdings Limited is the data controller.
This policy explains what personal information we collect when you use BukNau as a traveller, why we collect it, who we share it with, and the choices and rights you have. It sits alongside our Terms of Service.
2. Information we collect
Account information: your name, email address, phone number, and the password or sign-in method you use. If you sign in with Google, we receive your name, email address, and profile picture from Google — not your Google password.
Profile information: details you add to speed up booking, such as a display name, date of birth, nationality, emergency contact, and marketing preferences.
Travel documents: if you choose to add them, your passport and/or driver’s licence details (number, issuing country, expiry) and a photo of the document. These are optional and are stored privately.
Booking information: the requests and bookings you make — dates, party size, guest names where you provide them, pick-up and drop-off locations, notes to the operator, your payment reference, and any proof-of-payment image you upload.
Messages: messages you exchange with operators through BukNau.
Usage and device information: basic technical data such as a hashed record of your IP address, device and browser type, and how you use the app, collected to keep the service secure and working. We use privacy-preserving analytics to measure performance and usage.
Location search: when you search for a place, your search text is sent to Google Maps Platform to return suggestions. We do not track your device’s background location.
Work accounts: if you use BukNau for work, we also process your organisation membership and any approval details your organisation sets up.
3. How we use your information
To create and manage your account and keep you signed in.
To send your booking requests to the operator you choose and to let you and the operator communicate and complete the booking. The details necessary for a booking — including any document you attach to it — are shared with that operator.
To show you your trips, saved items, and booking history.
To send you service messages (such as email verification, booking updates, and payment reminders) and, only if you opt in, occasional marketing.
To keep BukNau secure — preventing fraud, abuse, and misuse — and to comply with our legal obligations.
To understand and improve how the product performs.
4. Who we share it with
Operators: when you make a booking request or booking, we share the information that operator needs to provide the service. An operator only receives a travel document when you attach it to a request, and only ever through a short-lived secure link — never by browsing. Once you share booking details with an operator, the operator handles that information under its own practices.
Service providers who process data on our behalf under contract: Supabase (database, authentication, and encrypted file storage), Vercel (application hosting and privacy-preserving analytics), Google Maps Platform (location search and maps), and Resend (delivery of our emails). They may only use the data to provide their service to us.
Payments: none. Payments are made directly from you to the operator by bank transfer. BukNau does not process, hold, or store your card or bank-account numbers.
Legal and safety: we may disclose information where required by law, or to protect the rights, safety, or property of travellers, operators, the public, or BukNau.
We do not sell your personal information.
5. Where your information is processed
BukNau is a global platform and our service providers may store and process your information on servers outside Papua New Guinea and Solomon Islands, including in Singapore and other countries. Wherever it is processed, we require appropriate safeguards to protect it consistent with this policy.
6. How long we keep it, and deleting your account
We keep your personal information for as long as your account is active or as needed to provide the service, and afterwards only as required for legitimate business, legal, tax, or dispute-resolution purposes.
You can delete your account at any time from your account page (Account → Delete account), or by contacting us at the address below. When you delete your account we permanently remove your profile, saved travel documents, saved items, trips, and messages. For bookings you have already made, operators keep their own commercial record of the transaction for their tax and legal obligations — we remove your name and contact details from the copy held on our platform so that record no longer identifies you.
If you have an upcoming or in-progress booking, or you are the administrator of a work organisation, we may ask you to resolve that first so operators and colleagues are not left without a contact.
7. Your choices and rights
You can review and update your account and profile information at any time from your account page, and opt out of marketing messages at any time.
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, or to object to certain processing. You can exercise the main ones directly in the app; for anything else, contact us using the details below and we will respond as required by applicable law.
8. Security
We use technical and organisational measures to protect your information, including encryption in transit, encrypted storage for travel documents, and access controls that limit who can see your data. Documents leave storage only through short-lived signed links scoped to a booking you control. No system is perfectly secure, but we work to protect your information and to respond promptly to any issue.
9. Children
BukNau is for adults. You must be at least 18 to hold an account. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will change the “last updated” date above and, for material changes, take reasonable steps to let you know. Continuing to use BukNau after an update means you accept the revised policy.
11. Contact us
For any privacy question or request, contact us at privacy@buknau.com. We read and respond to every message.