Your cards.
Your information.

Who is responsible

Boukee is operated by Pilatus General Trading & Contracting Company, Al Nassar Tower, Fahad Al Salem Street, Block 14, Plot 17, Floor 6, Office 8, Qibla, Kuwait City, Al Asimah, Kuwait. This privacy policy covers the Boukee mobile app, its account and synchronisation services, and boukee.app. For privacy questions or requests, contact info@pilatus.com.kw or call +965 99450697.

Information we process

• Account details: your name, email address, email-verification status, account identifier and sign-in information. Our identity service manages credentials, sessions and account security.
• Social sign-in: when you choose an available provider such as Google or Facebook, we receive an identifier and the basic profile details you authorise, such as your name and email. We do not receive your Google or Facebook password.
• Your cards: titles, barcode or QR content, card types, colours, selected images, and creation/update timestamps. A code can contain personal information, contact details, links or Wi-Fi credentials; choose carefully what you save or share.
• Device storage and permissions: the app stores session information and app preferences on your device. Camera and photo/file access support scanning codes and importing images you choose; granting a permission does not give us a copy of your entire photo library.
• Technical records: requests to our services can generate IP-address, request, timestamp, device/browser and error records needed to operate and secure the service.
• Support: information you include when you contact us, including correspondence needed to handle a privacy or deletion request.

If wallet-export or paid features are offered and you use them, related pass identifiers, device registrations, purchase identifiers and entitlement status may also be processed. Payment credentials are handled by the relevant payment or app-store provider, not entered into this website.

How we use it

We use information to create and secure your account, synchronise and display your cards, provide features you request, resolve problems and answer support requests. Where applicable, processing is necessary to provide the service you request, to pursue legitimate interests in service security and reliability, or to meet legal obligations. Optional permissions and provider authorisations are controlled by you and can be withdrawn through your device or provider settings.

Withdrawing a permission may prevent the related feature from working. It does not automatically delete information already saved to your account.

Providers and sharing

Information is processed by the operator and service providers needed for hosting, identity, email delivery and support. A social sign-in provider processes your sign-in under its own privacy policy. App-store or wallet providers process information when you use their features. We may disclose information when required by law or necessary to address fraud, abuse or a security incident.

Cards, QR codes and images you share can be read or retained by their recipients. Copies exported to a device wallet or another service are also subject to that service’s controls. Services may process information in different countries; contact us for information about the providers and safeguards relevant to your request.

Keeping and deleting information

Account and card information is kept while needed to provide your account and the features you use. You can remove individual cards in the app or request deletion of your account and associated data. We assess remaining records against their operational purpose and applicable legal requirements; security, purchase, dispute or legal records may need to be retained for those purposes.

Deletion from active systems does not necessarily remove every backup copy immediately. Residual backup records are handled through the backup lifecycle and are not used to restore an account you asked us to delete. We will explain any applicable retention exception when handling your request.

Read the account and data deletion instructions →

Cookies and local storage

When you select a language on these public pages, we store a functional cookie named boukee_language for one year to remember your choice. We do not use browser local storage, third-party analytics, or embedded advertising. Fonts and images are served from boukee.app. Our servers still receive the technical information necessary to deliver a page. Separate sign-in pages use the session and security mechanisms needed for authentication; Google or Facebook may also use their own cookies when you visit their services.

Your choices and rights

You can ask us about access, correction, deletion, portability or restrictions on the use of your personal information, and object to processing where applicable law provides that right. If processing relies on consent, you can withdraw that consent. You may also have the right to complain to your local data-protection authority.

Send requests to info@pilatus.com.kw, preferably from the email associated with your Boukee account. We may need proportionate information to verify your identity and protect your account. Do not send passwords, login codes or payment-card details. We respond within the time limits required by applicable law.

Changes to this policy

We may update this policy when the service or its data handling changes. The date at the top identifies the current version. Where required, we will provide additional notice of significant changes.