Privacy Policy

Effective: August 17, 2025 · Last Updated: August 17, 2025

Welcome to Baby Namer (the “App”). This Privacy Policy explains how Rob Tasker ("we," "us," or "our") collects, uses, and shares information when you use Baby Namer and our website at www.robtasker.com (collectively, the “Services”).

We are committed to protecting your privacy and handling your information responsibly. If you have questions, contact us at rob@robtasker.com.

1) Who We Are & Scope

Controller: Rob Tasker, with registered address Reykjavik, Iceland. If you reside in the European Economic Area (EEA) or the United Kingdom (UK), we are the controller of your personal data under applicable data protection laws.

This Policy covers our processing of personal data through the App and our website. It does not apply to third‑party websites, services, or apps that we do not control.

2) Information We Collect

A. Information you provide

• Account & Login: Email address and password (managed via our authentication provider; we do not store plain‑text passwords).
• Profile & Preferences: Gender/all‑genders selection, nationality/origin filters, app language, and other settings you choose.
• App Activity: Swipes (likes/dislikes), matches with a connected user, undo actions, history edits, and connections made via invite code or email.
• Communications: Messages or content you send to us (support requests, feedback).
• Subscription & Purchases: Transactional details related to in‑app purchases (handled by Apple App Store / Google Play; we receive limited records like transaction IDs and status).

B. Information collected automatically

• Device & Usage: Device identifiers, OS and app version, timezone, language, IP address, and in‑app actions (e.g., screens viewed, feature usage) to operate and improve the App.
• Diagnostics: Crash, performance, and error data to maintain reliability.
• Notifications: Push notification tokens (to deliver alerts, such as connection requests or matches).
• Attribution: Install and referral information (e.g., via deep links/invite links).

C. Information from third parties

• Authentication & Database Providers: We use cloud services to authenticate users and store app data.
• Analytics & Attribution: We may receive aggregated metrics about installs, sessions, and campaign performance.
• Payment Platforms: App Store and Google Play provide purchase validation details.

3) How We Use Information

• Provide, operate, and personalize the Services (including showing relevant names based on your filters).
• Enable partner connections, matches, and related notifications.
• Maintain safety, integrity, and security (fraud prevention, abuse detection, authentication).
• Process purchases, subscriptions, and account changes.
• Provide customer support and respond to requests.
• Monitor usage, fix bugs, and improve performance and features.
• Conduct analytics and develop new features (including optional premium insights).
• Comply with legal obligations and enforce our terms.

4) Legal Bases for Processing (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data under these legal bases:

• Contract: To provide the Services you request (account, syncing, matches, notifications).
• Legitimate Interests: To secure and improve the Services, prevent abuse, and understand usage. We balance these interests against your rights.
• Consent: For optional features such as push notifications, certain analytics/attribution, and marketing (where applicable). You can withdraw consent in device or in‑app settings.
• Legal Obligations: To meet tax, accounting, and regulatory requirements.

5) Sharing & Disclosure

We do not sell your personal information. We share information in these limited situations:

• Service Providers (Processors): Vendors that host, store, process, and support our Services (e.g., cloud hosting, authentication, databases, push notifications, analytics, attribution, crash/diagnostics, customer support, and ad partners if ads are enabled). Examples include Google Firebase/Google Cloud (auth, database, messaging), Apple and Google (payments), and Branch Metrics (deep links/attribution).
• Other Users: Your display name, likes, and matches are visible to your connected partner as needed to provide the Service.
• Legal & Safety: To comply with law, respond to lawful requests, protect rights, safety, and property, or investigate fraud, security, or technical issues.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of assets. We will continue to protect your information and notify you of any changes to this Policy.

6) Advertising, Analytics & Links

• Advertising (if enabled): We may show ads using mobile advertising SDKs (e.g., Google AdMob). Ad partners may collect device identifiers and app interaction data to provide and measure ads. You can limit ad tracking in your device settings.
• Analytics: We use analytics and diagnostics to understand usage and improve the App. Where required, we seek consent.
• Attribution & Deep Links: We use attribution tools (e.g., Branch Metrics) to enable invite links and measure installs.
• Third‑Party Links: The Services may link to other sites/apps we do not control. Their privacy practices govern those services.

7) International Transfers

We may transfer personal data to countries outside your own (including the EEA/UK to the United States) where our providers operate. When we do, we rely on lawful safeguards such as Standard Contractual Clauses (SCCs) and/or other transfer mechanisms permitted by law, and we implement appropriate technical and organizational measures.

8) Security

We implement measures aimed at protecting your information, including encryption in transit, access controls, and least‑privilege practices. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at rob@robtasker.com.

9) Data Retention

• We keep personal data for as long as necessary to provide the Services and for legitimate business needs (e.g., security, fraud prevention) and legal obligations.
• Account data is generally retained until you delete your account or we no longer need the data for the purposes described.
• Transactional records may be kept for up to [7] years or as required by tax and accounting laws.
• Diagnostic logs and analytics are typically retained for [12–24] months.

10) Your Rights & Choices

In‑App Controls

• Preferences: Manage filters, language, and notifications in the App settings.
• Push Notifications: Enable/disable in device settings and (if available) in‑app.
• Delete Account: In the App, go to Preferences → Account → Delete Account (or contact us). Deleting your account removes your profile, swipes, matches, and connections from our primary systems, subject to limited backups and legal retention.

EEA/UK Residents (GDPR)

You may request access, correction, deletion, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time. Contact us at rob@robtasker.com. You also have the right to lodge a complaint with your local supervisory authority. If you are in Iceland, the authority is Persónuvernd (Icelandic Data Protection Authority).

US State Privacy Rights (e.g., California, Virginia, Colorado, Connecticut)

Depending on your state, you may have rights to access, correct, delete, or receive a copy of your information, and to opt out of the sale or sharing of personal information or targeted advertising. We do not sell personal information, and we do not share it for cross‑context behavioral advertising as those terms are defined by California law. To exercise rights, email rob@robtasker.com with the subject “Privacy Request.” We will verify your request consistent with applicable law.

California Notice at Collection

Category	Examples	Purpose	Shared With	Retention
Identifiers	Email, device IDs, IP address	Account, security, notifications, analytics	Service providers (auth, cloud, notifications, analytics); app stores	Account life + up to legal retention
Customer Records	Purchase history, subscription status	Provide paid features, support	App stores; payment & support providers	Up to legal retention
Internet/Network Activity	App interactions, diagnostics	Improve the App, security	Analytics/diagnostics providers	12–24 months
Geolocation (approximate)	Derived from IP/timezone	Localization, fraud prevention	Service providers	12–24 months
Inferences	Aggregated insights (e.g., usage trends)	Improve features and Premium insights	Service providers	Aggregated/limited terms

Sensitive information (e.g., passwords) is handled by authentication providers; we do not store plain‑text passwords. We do not use or disclose sensitive personal information for inferring characteristics.

11) Children’s Privacy

The Services are directed to adults planning or choosing baby names and are not intended for children under 13. We do not knowingly collect personal information from children under 13 (or under the age required by your jurisdiction). If you believe a child has provided us personal information, contact us so we can take appropriate steps.

12) “Do Not Track”

Some browsers transmit “Do Not Track” signals. We currently do not respond to such signals. You can use device privacy settings to limit ads personalization and analytics where available.

13) Changes to this Policy

We may update this Policy from time to time. When we do, we will change the “Last Updated” date above and, where appropriate, notify you through the App or by other means. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

14) How to Contact Us

Rob Tasker
Reykjavik, Iceland
Email: rob@robtasker.com

Additional Disclosures

• Appeals: If we decline your privacy request, you may appeal by replying to our decision email with the subject “Privacy Request Appeal.”

---

This Privacy Policy is provided for general informational purposes and should be reviewed by your legal counsel before publication.