"Booksy operates a high-risk business model that collects extensive personal data including precise location, appointment history, and behavioral patterns, then shares this data with advertising networks and mobile attribution partners using an opt-out-by-default approach. Cross-site behavioral tracking through cookies, pixels, and device fingerprinting enables remarketing, with opt-out preferences not persisting across device/browser changes. Data retention policies lack specificity for fraud prevention and operational purposes, and transparency mechanisms are fragmented across multiple contact points with no guaranteed policy update notifications."
Take Action
5 Privacy Improvements Available
booksy Privacy Concerns & Scorecard
Data shared with advertising networks (Google, Meta, TikTok), mobile attribution partners (AppsFlyer, Adjust, Branch), and potentially sold under CCPA/CPRA definitions. Hashed email/phone shared with Google and Meta for remarketing, enabling user re-identification. Default opt-out model means sharing occurs unless user explicitly declines.
Booksy collects extensive personal data including sensitive categories like precise geolocation, health/appointment history, financial transaction records, and behavioral inferences. Device fingerprinting and cross-device tracking enabled through device IDs (IDFA, Android ID).
Extensive cross-site behavioral tracking through cookies, pixels, SDKs, and device fingerprinting. Data used to create behavioral inferences and show personalized ads across the internet. No persistent opt-out mechanism—preferences reset after cookie clearing or device switching.
Limited transparency on data collection scope ('depends on how you use our services'). Policy updates may occur without guaranteed notification. Opt-out mechanisms fragmented across multiple contact methods. No explicit data portability commitment stated in provided segments.
Data retained for extended periods with vague legal justifications. Booking history and account information retained indefinitely while account is active. Fraud prevention data retained with no specified deletion timeline. Support tickets retained up to 3 years.
Marketing email unsubscribe
- 1Open a marketing or newsletter email from Booksy or one of its service providers.
- 2Click the Unsubscribe link found within the email.
- 3If you have booked with multiple providers, repeat the unsubscribe process for each individual provider's emails.
- 4If you continue receiving emails after unsubscribing, contact the service provider directly to request removal of your data from their mailing list.
Third party data sharing opt out
- 1Booksy shares personal data with third-party advertisers and marketing partners (including Google and Meta) by default, but users can opt out of this sharing for direct marketing purposes. Under CCPA/CPRA, some of this sharing may constitute a 'sale' or 'sharing' of personal information and users have the right to opt out. Opt-out requests can be submitted to ccpa@booksy.com or by calling +1 206-735-3553.
Data deletion
- 1Option A (email): Send a deletion request to privacy@booksy.com from the email address registered with your Booksy account.
- 2Option B (iOS app): Open the Booksy app, go to Profile, then Account Details, and follow the Account deletion process.
- 3Option B (Android app): Open the Booksy app, go to Profile, then Account & Settings, then Account Details, and follow the Account deletion process.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, service delivery, communication, verification
Service localization, appointment booking, fraud detection
Service personalization, appointment management, behavioral analysis
Payment processing, fraud prevention, transaction tracking
Cross-device tracking, ad attribution, analytics
User experience personalization, analytics, ad targeting, session replay
Service management, community features, marketing
Cross-Platform Tracking
Booksy tracks users across multiple platforms and devices using device identifiers (IDFA/Android ID), digital fingerprinting, cookies, and pixels managed by Google, Meta, TikTok, AppsFlyer, Adjust, and Branch. Hashed email/phone is shared with Google and Meta's ad networks, enabling cross-platform ad targeting and remarketing when users visit other websites/apps.
Tracking Methods:
Cookies
First-party and third-party cookies from ad networks (Google, Meta, TikTok) and analytics partners track user behavior on Booksy and across other websites
Tracking Pixels
Pixels from Google Ads, Meta, TikTok embedded in Booksy to track conversions and enable remarketing with hashed contact info
Device Fingerprinting
Digital fingerprinting combines device type, OS, browser, IP address, and other signals to track users across devices and contexts
Mobile SDKs and Attribution Tools
AppsFlyer, Adjust, and Branch SDKs in the Booksy app collect device ID, IP address, and interaction data to track ad effectiveness and campaign attribution
Session Replay
Session replay tools record user interactions including clicks, scrolls, mouse movements, and navigation within Booksy (personal information fields masked)
AI & Data Training
booksy does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed booksy
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.