Privacy Policy

Last updated: January 22, 2026

Your Privacy is Our Priority

Choosing your baby's name is deeply personal. We never sell your data, never share your choices with third parties, and give you complete control over your information.

What We Collect

Account Information

Email address (for login and important notifications)
Display name (optional, shown to your partner)
Password (encrypted with bcrypt, we never see your actual password)

Name Voting Data

Names you vote on (yes/no/maybe)
Your shortlist of favorite names
Notes and comments you add to names
Comparison preferences and rankings

Household Data

Partner interactions (only visible within your household)
Shared shortlist and voting patterns
Final name choice and ceremony data
Baby information (if you choose to add it)

Baby Tracking Data (Optional)

Sleep, feeding, and diaper logs (if you use these features)
Growth measurements (if you track them)
Photos and journal entries (if you create them)
All tracking data belongs to your household only

Usage Analytics

Pages you visit and features you use (anonymous)
Time spent on different screens (to improve UX)
Device type and browser (for compatibility)
General location (country level, for localization)

What We DON'T Collect

✓We never sell your data - Your information is never sold to third parties, advertisers, or data brokers
✓No social media tracking - We don't use Facebook Pixel, Google remarketing, or similar tracking pixels
✓No cross-site tracking - We don't track you across other websites
✓No sensitive data sharing - Your baby's name, voting patterns, and household data are private
✓No unnecessary permissions - We only access features you explicitly grant (camera for photos, etc.)

How We Use Your Data

To provide the service: Your voting data, shortlist, and household information are used to power the BabyTime name selection experience. We analyze your preferences to suggest names you might like.

To enable collaboration: If you invite a partner, we share your household data (votes, shortlist, final choice) with them. This is essential for making decisions together.

To improve the product: Anonymous usage analytics help us understand which features are popular, where users get stuck, and how to make BabyTime better.

To send important notifications: We'll email you about account security, partner invitations, and critical product updates. You can control marketing emails in Settings.

To provide customer support: If you contact us for help, we'll access your account data to troubleshoot issues.

Data Retention & Deletion

Active Accounts

Your data is kept indefinitely while your account is active. We believe your naming journey is a precious memory worth preserving.

Inactive Accounts

If you don't log in for 90 days, we'll send you an email asking if you want to keep your account. If you don't respond within 30 days, we'll assume you're done and archive your data.

Deleted Accounts

When you delete your account, we immediately remove all personally identifiable information. Some anonymized analytics data may remain for statistical purposes, but it cannot be linked back to you. Full deletion is completed within 30 days.

Legal Requirements

In rare cases, we may be required to retain certain data for legal compliance (e.g., financial records for tax purposes). We'll notify you if this applies.

Your Rights (GDPR & CCPA)

Right to Access & Export

Download all your data in JSON or CSV format anytime from Settings → Privacy.

Go to Privacy Settings

Right to be Forgotten

Delete your account and all associated data permanently. This action cannot be undone.

Delete My Account

Right to Restrict Processing

Control how we use your data. Opt out of analytics, marketing emails, and partner activity visibility.

Manage Privacy Settings

Right to Data Portability

Take your data to another service. Export your votes, shortlist, and choices in a standard format.

How We Protect Your Data

✓Encryption: All data is encrypted in transit (HTTPS) and at rest (AES-256)
✓Password security: Passwords are hashed with bcrypt (12 rounds), never stored in plain text
✓Access controls: Only authorized personnel can access production systems, with full audit logs
✓Regular security audits: We run automated security scans and manual code reviews
✓Secure hosting: Data is hosted on Supabase (SOC 2 Type II certified) and Vercel (ISO 27001 certified)

Children's Privacy

BabyTime is designed for expectant parents, not for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Note: Information about your baby (name, birthdate, tracking data) is considered your parental data, not the child's data, until they reach the age of digital consent.

Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you via:

Email notification (at least 30 days before changes take effect)
In-app banner when you next log in
Update to “Last updated” date at the top of this page

Continued use of BabyTime after changes take effect constitutes acceptance of the new policy.

Questions or Concerns?

We're here to help. If you have questions about your privacy, want to exercise your rights, or report a data concern:

Email: privacy@babytime.app

Privacy Settings: Manage your data

Data Protection Officer: Available for EU/UK residents