Bukéame

Privacy Policy

Version 2.0 (draft) · Last updated: June 2026

DRAFT — must be reviewed by an attorney licensed in Puerto Rico / the U.S. before publication. This document is a professional draft prepared to guide the final version, but it does not constitute legal advice and we do not warrant its compliance with any law, regulation, or with the requirements of the Apple App Store or Google Play. Before publishing it or submitting the app to the stores, it must be reviewed and approved by a licensed attorney. This is the English version; a Spanish version is also available.

At Bukéame (operated by Wifnix LLC, Puerto Rico) we respect your privacy. Here we explain, clearly, what information we collect, what we use it for, whom we share it with, how long we keep it, and what control you have over it, including your right to delete your account and your data.

1. Who we are

Bukéame is an appointment scheduling, booking, and online-store platform for service businesses (barbershops, salons, spas, aesthetic studios, and similar) and their customers, available as a website and as a mobile app. Bukéame is operated by Wifnix LLC, an entity organized in Puerto Rico. When this policy says "Bukéame", "we", or "our", it refers to Wifnix LLC.

This policy applies to two types of users: the businesses that use Bukéame to manage their operation, and the customers who book appointments, buy products, or gift cards through the platform. Where a point applies to only one of the two, we indicate it.

2. Information we collect

We collect the following types of information, depending on how you use Bukéame:

a) Account and authentication data

Full name, email address, and phone number.
Password, which is always stored encrypted (with a hashing algorithm) and never in plain text.
The verification status of your email.
A session identifier (token) and your role (business or customer), stored in the local storage of your device or browser.

b) Business data (if you have a business account)

Business name, category, description, physical address, phone, and WhatsApp.
Town or municipality (in Puerto Rico), hours, days off, and blocks.
Services, prices, deposits, products, variants, inventory, and business policies.
Team or staff (name, specialty, avatar).
Images: logo, banner, portfolio, and product photos.
Map location (latitude and longitude coordinates) that you set voluntarily.
Information to connect your payment methods (for example, ATH Móvil number, PayPal handle). We do not store private payment credentials (see section 5).

c) Business's customer data

When a customer books an appointment, buys a product or a gift card, or joins a waitlist, we collect what that person provides: name, WhatsApp or phone, email (optional), and notes. The business may also add internal notes and mark a customer as blocked. This data belongs to the business that collects it; Bukéame processes it on its behalf (see section 7).

d) Appointment, booking, and purchase data

Selected services, professional, date and time, confirmation code, and appointment status.
Payment method used, tip, and deposits.
Reviews and ratings (from 1 to 5 stars) and comments, along with the business's replies.
Store orders: items, totals, delivery type (pickup or shipping), and history.
Gift cards: amount, purchaser and recipient name, message, and code.

e) Location data

Business: the coordinates it sets when placing its pin on the map.
Customer: if you authorize it, your browser or device shares your approximate location (latitude and longitude) to show you nearby businesses and the distance in kilometers. This is optional; if you do not authorize it, you can still use search without geolocation.

f) Payment data

Bukéame does not hold the money between the business and its customers, nor does it store full card numbers. Payments are processed by third parties (ATH Móvil, Stripe, PayPal). We only store configuration data (such as the business's ATH Móvil number or its PayPal handle) and transaction references or statuses necessary to display the result (see section 5).

g) Communications data

To send reminders, confirmations, waitlist notices, and notifications, we process the recipient's WhatsApp and/or email, as well as the content of those service messages.

h) Technical and usage data

Basic technical information necessary to operate and protect the service (for example, activity logs, device or browser type, and session data). We do not use advertising tracking cookies (see section 9).

3. How we use your information

To operate the platform: create and manage accounts, schedule and manage appointments, process bookings, orders, gift cards, and waitlists.
To send reminders, confirmations, and notifications via WhatsApp and/or email.
To display businesses in search, calculate distances (if you share your location), and show reviews and ratings.
To facilitate charges and deposits through the payment processors that each business connects.
To communicate important notices about your account, your plan, or the service, and to verify your email.
To provide support, prevent fraud and abuse, and maintain the security of the platform.
To comply with applicable legal, tax, and accounting obligations in Puerto Rico and the U.S.
To improve and develop new Bukéame features.

4. Communications via WhatsApp and email

Bukéame sends service messages (appointment reminders and confirmations, waitlist notices, account and gift card notifications) via WhatsApp and/or email, according to the business's configuration. To do so we use external messaging and email providers (see section 5). These messages are part of the functioning of the service. You can adjust the notification preferences available on the platform; some essential account or security notices may not be optional.

5. Whom we share your information with

We do not sell your personal information nor do we disclose it to third parties for their marketing. We share data only with providers that help us operate the service ("data processors"), and only as necessary for the function they perform. These include:

Provider	Purpose	What it receives (the minimum necessary)
ATH Móvil (Evertec)	Charges and deposits via ATH Móvil	Transaction data and business configuration (phone, public token)
Stripe	Card payment processing	Transaction data and the business's connected account data
PayPal	Payments via PayPal.me / email	Amount and business handle/email (redirect to paypal.com)
Resend	Email delivery (notices, verification, gift cards)	Email and message content
Evolution / WhatsApp	Reminders and notifications via WhatsApp	WhatsApp number and service message content
Hosting provider	Service infrastructure	Securely stored data
OpenStreetMap / Leaflet	Maps	Coordinates to display the map
Google Fonts	Interface typography	Technical request from the browser

The use of ATH Móvil, Stripe, PayPal, Resend, Evolution/WhatsApp, OpenStreetMap, and Google Fonts is also subject to the privacy policies of each of those providers. When a business connects its payment account, payments and deposits go directly to the business's account; the business's subscription to Bukéame is charged separately.

We may also disclose information if required by law (for example, in response to a court order or a request from a competent authority) or when necessary to protect the rights, safety, or property of Bukéame, our users, or the public. If Wifnix LLC participates in a merger, acquisition, or sale of assets, your information could be transferred as part of that transaction, subject to this policy.

6. Payments: an important clarification

Bukéame is not a payment processor and does not hold funds between a business and its customers. Each business connects its own account (ATH Móvil, Stripe, PayPal, or cash) and deposits and charges go directly to that account. We do not store the full number or the sensitive data of your card; that data is handled by the corresponding payment processor. For ATH Móvil in automatic mode we only use the "Public Token" (which is not secret); you should never enter the "Private Token" in Bukéame. Refunds and disputes between a business and its customer are handled through the processor and the business itself.

7. Business's customer data

The data that a customer provides when booking, buying, or joining a waitlist belongs to the business that collects it. Bukéame acts as a processor that handles that data on behalf of the business to make the booking, the purchase, and the communication possible. Each business is responsible for using its own customers' data appropriately and in accordance with the law. If you are a customer and want to exercise rights over data that a business keeps about you, you can contact the business directly or write to us to help route the request.

8. Security

We take reasonable measures to protect your information. Your password is stored encrypted with a secure hashing algorithm; we never store it in plain text and no one at Bukéame can see it. We use TLS encryption to protect data in transit and apply access controls to our systems. However, no method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a breach affecting your information were to occur, we will act in accordance with applicable law.

9. Cookies and local storage

Bukéame does not use advertising or third-party tracking cookies for marketing purposes. We use your browser's or device's local storage to store your session token, your role (business or customer), and your theme preference (light or dark). This is necessary for you to maintain your session and for the app to work. Some third-party resources (Google Fonts, Leaflet/OpenStreetMap maps, the ATH Móvil widget, and redirects to PayPal or Stripe) are loaded from their own servers and may receive technical requests from your browser.

10. Data retention

We keep your information for as long as your account is active and for as long as necessary to provide the service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account, we erase or anonymize your data as described in section 11. Transaction records are retained in anonymized form due to tax requirements of Puerto Rico and the U.S., even after the account is deleted.

11. Right to delete your account and your data

You can delete your account and the associated personal data directly from the app, without needing to contact us:

If you are a business: go to My account → Danger zone → Delete account, confirm by typing "BORRAR MI CUENTA", and complete the process. Before deleting, we offer you the option to download your bookkeeping.
If you are a customer: go to your account and, in My account → Delete account, confirm by typing "BORRAR MI CUENTA" and complete the process. Deletion is permanent and removes your personal data.

When you delete your account we erase your personal data and, in the case of businesses, the customer data we hold on their behalf. Transaction records are retained in anonymized form (without identifying you) as a tax requirement of Puerto Rico and the U.S. Deletion is permanent and cannot be undone. If you prefer not to use the in-app option, you may also request deletion by writing to Bukéame's official channels.

12. Your rights

Under applicable law, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete data.
Request the deletion of your information (see section 11).
Obtain a copy of your data in a portable format where applicable.
Object to or limit certain uses, or withdraw a consent you have given (for example, geolocation).

California residents (CCPA / CPRA)

If you reside in California, the CCPA and CPRA laws grant you additional rights, including: to know what categories of personal information we collect and for what purposes, to request access or deletion, to correct inaccurate information, and to limit the use of certain sensitive information. Bukéame does not sell or share your personal information within the meaning of those laws for behavioral advertising. We will not discriminate against you for exercising your rights. To exercise them, write to us through the official channels; we may ask you to verify your identity before responding.

13. Information transfers

Bukéame operates from Puerto Rico (U.S.). Some of our providers may process or store information on servers located in the U.S. or other jurisdictions. By using Bukéame, you understand that your information may be handled in those places in accordance with this policy and applicable law.

14. Children's privacy

Bukéame is not directed to minors. Business accounts require you to be at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a minor has provided us information without the corresponding authorization, contact us and we will delete it in accordance with applicable law.

15. Changes to this policy

We may update this policy to reflect changes in the service or in the law. If there are significant changes, we will notify you through the platform and update the "Last updated" date at the top. Continued use of Bukéame after a change means that you accept the updated policy.

16. Disclaimer

This policy is provided "as is", for informational purposes, and does not constitute legal advice. Bukéame and Wifnix LLC do not warrant that the service or this policy comply with all laws or regulations that may apply to you. To the extent permitted by law, Wifnix LLC will not be liable for indirect, incidental, or consequential damages arising from the use of the platform or from the processing of data by third parties (payment processors, messaging, maps, or other providers), whose practices are governed by their own policies. This policy is construed in accordance with the laws of Puerto Rico and the applicable federal laws of the U.S.

17. Contact

If you have questions about your privacy or want to exercise your rights, contact us through Bukéame's official channels. Operated by Wifnix LLC, Puerto Rico.