Privacy Policy

GuestBook · Last updated 21 June 2026

GuestBook is a private management app for short-term, mid-term, and long-term rental hosts. It is built to be a secure home for your properties, guests, bookings, and team. This policy explains what we collect, what we do not, and the choices you have. In plain terms: your records live on your device, and if you turn on sync, your guest details are encrypted before they ever leave it.

The short version

• By default, everything you add stays on your device.
• Your guest details, notes, and photos are encrypted at rest.
• If you enable cloud sync, your guest data is encrypted on your device before upload. We store only encrypted data and cannot read your guests, notes, or photos.
• We do not sell your data.
• Face ID / Touch ID happens entirely on your device and is never sent to us.

Information you create

GuestBook lets you store properties, guests, stays and bookings, cleaning and service schedules, supply inventory, payments, maintenance logs, and photos. This content is yours. It is stored locally on your device, and the sensitive parts (guest details, notes, and photos) are encrypted at rest. If you do not enable cloud sync, this content is never transmitted to us or anyone else.

Information we process to run the service

• Email address — if you create an account for cloud sync, we use your email to send you a one-time sign-in code. We do not use it for marketing.
• Encrypted sync data — if you enable cloud sync, an encrypted copy of your guest records is stored so you can access them across devices. It is encrypted with a key derived from your password, which we never receive in usable form. We cannot decrypt this content.
• Payment information — if you subscribe, payments are handled by the App Store, Google Play, or our payment processor. We do not store your full card details.

Sharing with your team (cohosts and cleaners)

If you invite a cohost or a cleaner, GuestBook shares a limited, scoped set of information with the person you invite, so they can do their job:

• Cohosts share your workspace and see the records you grant them.
• Cleaners receive only what they need for a turnover — the cleaning schedule, property access notes you choose to share, and their own pay summary. Because a cleaner does not hold your encryption key, the items you share with them are stored as readable (non-encrypted) data limited to that scope. Sensitive guest details remain encrypted and are never shared with cleaners.

You control who is invited and can revoke access at any time from Settings.

Service providers

We use a small number of trusted providers strictly to operate the app:

• Supabase — encrypted data storage and authentication.
• Resend — delivery of one-time sign-in code emails.
• Apple / Google in-app purchase & RevenueCat — processing and managing subscriptions in the app.
• Stripe — subscription payments on the web.
• Vercel — hosting of the web app and the calendar sync proxy.

These providers process data only to provide their service to us, and cannot read your encrypted records.

Calendar sync

If you add an Airbnb, VRBO, or other calendar link to a property, GuestBook fetches that public calendar through our proxy to show your occupancy and upcoming turnovers. These calendar feeds contain booking dates only — they do not include guest names or personal details, and we do not store the feed beyond the cached availability your app needs.

Device features we use

• Face ID / Touch ID / biometrics — used only to unlock the app on your device. The biometric check is performed by your device's operating system. We never receive your biometric data.
• Photos you add — stored within the app, encrypted at rest. We do not access your wider photo library.
• Notifications — reminders are generated locally on your device.

What we do not do

• We do not sell or rent your personal information.
• We do not use your guest data for advertising.
• We do not read your guests, notes, or photos.

Your choices and rights

• Delete everything — the app includes a "Wipe all data" option that permanently removes your local data.
• Delete your account — you may delete your account and any encrypted synced data at any time from within the app (account menu → Delete account), or by contacting us.
• Depending on where you live, you may have additional rights to access or delete your personal information. Contact us to exercise them.

Data retention

Local data remains until you delete it or uninstall the app. Encrypted sync data is retained while your account is active and deleted on request or after account closure.

Children

GuestBook is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their information.

Changes to this policy

We may update this policy as the app evolves. We will revise the date at the top when we do.

Contact

Questions or requests about your privacy: privacy@thebook.ltd

---

GuestBook is a personal property-management tool and is not a background-check or consumer-reporting service. Please use it responsibly and in line with the laws that apply to you and your guests.