Privacy Policy

Last updated: 1 July 2026

1. Who we are

Bebenames is a baby-name picker for couples ("the app"). The data controller is Leonard Starzer ("we" / "us"). You can reach us at leonard@starzer.me.

2. Data we collect

• Device identifier. A randomly-generated UUID stored in your device's secure keychain so we can recognize your install across app launches. This identifier is never tied to your phone number, address book, or location.
• Sign-in data. If you sign up with Apple or Google, we receive a verifiable identity token from the provider and store the resulting provider user ID and, if you share it, your display name. We never receive or store your password.
• Push token. To deliver match and partner notifications, we register your device's Firebase Cloud Messaging token.
• Your activity in the app. The names you swipe (yes or no), the names you mark as favorites, your selected baby-gender preference, your selected trait filters, and the partner you've paired with.
• Pairing events. When you or your partner take an action that affects the other (changing the baby gender, removing a match, deleting an account), we record a small event log so the affected partner sees what happened.
• Product usage analytics. Aggregate-level events about how you move through the app — screens viewed and actions taken (for example completing onboarding, swiping, or creating and redeeming an invite) — tied to your app-scoped user ID so we can understand and improve the app. This does not include your name, email, or the specific names you swipe, and is never linked to an advertising identifier.

We do not collect: contact lists, location, photos, microphone audio, advertising identifiers, or your real name unless you give it to us via Apple or Google sign-in.

3. Why we collect it

• Device identifier and sign-in data — to maintain your account across launches and let you recover it on a new device.
• Push token — to deliver in-app notifications about your matches and your partner's activity.
• Swipes, favorites, pairing, traits, gender preference — to power the app's core feature: surfacing names you and your partner both like.
• Pairing events — to keep both partners informed when one of you takes an action that affects the other.
• Product usage analytics — to see which flows work and where people get stuck, so we can improve the app.

4. Who we share data with

We use the following third-party processors strictly to operate the app:

• Heroku (Salesforce) — application hosting and Postgres database, hosted in the European Union.
• Firebase Cloud Messaging (Google) — push notification delivery.
• Apple — verifies your Apple identity token when you Sign in with Apple.
• Google — verifies your Google identity token when you Sign in with Google.
• Sentry — anonymized error and crash reporting. We strip auth tokens, device UUIDs, and other identifying fields before sending events.
• PostHog (EU cloud) — product usage analytics, hosted in the European Union. Used only to understand in-app behavior; not used for advertising and not shared for any third party's own purposes.

We do not sell your data. We do not share it with advertisers.

5. Retention and deletion

You can delete your account at any time from inside the app: Profile → Account → Delete account. When you delete:

• Your user record, swipes, favorites, device tokens, trait preferences, and pairing membership are permanently removed from our database.
• If you were paired with a partner at the time, your partner keeps their account but sees an in-app notice that you left, and reverts to a solo state where they can pair with someone new. Their swipes and any shared matches stay with them; your data is gone.
• Deletion is immediate and irreversible. We don't retain a tombstone, soft-delete flag, or recoverable backup of your account for marketing.

If you only sign out (without deleting), your data remains on our servers tied to your account so you can sign back in later.

6. Your rights

If you are in the European Economic Area, the United Kingdom, or California, you have rights under the GDPR, UK GDPR, or CCPA, respectively:

• Access — ask us what data we hold about you.
• Rectification — ask us to correct it.
• Deletion — use the in-app delete, or email us.
• Portability — ask us for an export of your data.
• Complaint — lodge a complaint with your local data-protection authority.

Email leonard@starzer.me to exercise any of these rights.

7. Children

The app is intended for adults who are pregnant or planning a child. We do not knowingly collect data from users under 13.

8. International transfers

Our database and application servers are located in the European Union. Firebase Cloud Messaging and Sentry process some data outside the EU; we rely on the European Commission's standard contractual clauses for those transfers.

9. Updates to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. Material changes will be notified in-app.

10. Contact

leonard@starzer.me