Privacy Policy

Effective Jul 5, 2026

Foona (“we”, “us”) operates foona.app, a platform for booking heritage stays in old Damascus. This policy explains what information we collect, why, and what we do with it. The short version: we collect only what a booking platform needs to work, we don't sell your data, and your card details never touch our servers.

What we collect

Account data — your name, email address, and a securely hashed password when you create an account.
Booking data — the stays you book: dates, guest counts, and amounts paid.
Payment data — payments are processed by Stripe. Your card number goes directly to Stripe and is never stored on or transmitted through our servers. We keep only a payment reference and the amounts involved.
Messages — messages you exchange with a host are stored so your conversation persists. Hotel staff see the messages on their side of the thread; our team can review a message only when it is reported.
Technical data — standard server logs (IP address, request paths, timestamps) kept briefly for security and debugging. We do not use advertising trackers or analytics cookies. Your login session is stored in your own browser's storage.

How we use it

To operate your account and process your bookings.
To send transactional email: booking confirmations, cancellation notices, and password resets. We do not send marketing email.
To share necessary details with your host — the host of a stay you book sees your name, email, and booking details so they can welcome you.
To let you and your host coordinate your stay, and to review reported messages to keep foona safe.
To prevent fraud and abuse, and to comply with legal obligations.

Who we share it with

Service providers that make the platform run, each receiving only what their function requires: Stripe (payments), Amazon Web Services and Neon (hosting and database), Resend (transactional email), and Mapbox (maps; loading a map shares your IP address with Mapbox). We do not sell or rent personal information to anyone.

Retention & your rights

We keep account and booking records while your account is active and as required for financial record-keeping. You can ask us to access, correct, export, or delete your personal data by emailing support@foona.app. Deletion requests are honoured except where we must retain records (e.g. completed payment records) by law.

Changes

If this policy changes materially we will update the effective date above and, for significant changes, notify you by email. Questions? Write to support@foona.app.