Privacy Policy

Last updated: September 2026

NameBird ("NameBird," "we," "us") is operated by Smilekid Labs. This policy explains what information we collect when you use the NameBird app, why we collect it, who we share it with, and the choices and rights you have.

If anything here is unclear, email us at namebird@smilekidlabs.com and we'll help.


1. Information we collect

Account information. When you sign in, we collect your email address. You can sign in three ways: an email sign-in code (a one-time passcode), Sign in with Apple, or Sign in with Google.

If you use Sign in with Apple and choose Apple's Hide My Email, we only ever receive the private relay address Apple generates for NameBird — never your real email address. If Apple or Google shares your name with us at first sign-in, we use it only to pre-fill your display name, and you can change it at any time.

Baby and circle information. To use NameBird you create a "circle" (sometimes shown in the app as a "nest") for a baby — this includes the baby's working name, gender preference, and due date, plus who's in the circle with you. Anyone who joins your circle using an invite code can see this information.

Your naming activity. Every name you swipe on (like, dislike, or "keep warm") and the names you match on with your circle are stored so the app can work — see Section 3, "Circles: what your circle can see," for who else can see this.

AI assistant conversations. Your chat with the in-app AI naming assistant is shown only on your own device and is not kept after you close the app. On our servers we briefly store the question you asked and the answer you received — for up to 7 days — so that retrying the same request doesn't charge you twice or generate a different answer. See Section 6 for what is sent to our AI providers, and Section 7 for retention.

Purchase information. If you buy NameBird's premium subscription ("Baby Pass") or a token pack, our payment partner RevenueCat and the app store you purchased through (e.g., Apple's App Store) process the transaction. We receive and store only which product you bought and when your access expires — never your card number or other payment details.

Device and technical information. To deliver push notifications, we store a device push token tied to your account (removed when you sign out or turn notifications off). Our infrastructure providers (see Section 5) also log standard technical data (like IP address and request timestamps) briefly, as part of normal request handling — this is not used for advertising or analytics.

Crash reports. We use Sentry to tell us when the app crashes or hits an error, so we can fix it. Sentry is configured to collect errors only — we have turned off performance tracing, session recording, and the option that would attach personal details to a report. A crash report contains the technical details of the failure (what code failed, on what device model and OS version, and which app release), not your name, your email, your baby's name, or your conversations.

What we don't collect. We don't use any advertising network, we don't use any product-analytics or user-tracking service, we don't track you across other companies' apps or websites, and we don't show ads. NameBird does not ask for the App Tracking Transparency permission because there is nothing we would use it for. If any of this changes, we'll update this policy first, and it will never involve selling your personal data.


2. How we use your information

We use your information to:


3. Circles: what your circle can see

This is the most important section of this policy — please read it before inviting someone.

NameBird is built around full transparency inside a circle. When you and a partner (or another family member) share a baby's circle:

If you'd rather keep your reactions private from a specific person, don't add them to the same circle.


4. Push notifications

Push notifications (match alerts, a circle-mate joining, and Hatching Day countdown reminders) are on by default so you don't miss a match, and can be turned off anytime in Settings → Notifications — one switch controls all notification types. Turning the switch off means our servers won't attempt to send you any push notification at all. We use Expo's push notification service to deliver these; we don't use push notifications for marketing.


5. Who we share information with

We do not sell your personal information. We share limited information with the following service providers, only as needed to run NameBird:

ProviderWhat they doWhat they receive
SupabaseOur database, authentication, and file storage — hosted in the EU (Frankfurt, Germany)Your account, circle, and naming data
ResendDelivers your sign-in code by emailYour email address
RevenueCatManages subscriptions and purchases across app storesYour account identifier and purchase/entitlement status — never your card details
Apple / GoogleProcess app store payments if you make a purchaseHandled directly by the app store — we never see your payment details
OpenAI, Google and AnthropicPower the in-app AI naming assistantSee Section 6 — limited naming context, never your email or account ID
ExpoDelivers push notificationsA device push token, not your email or account ID
SentryCrash and error reporting, so we can fix bugs — hosted in the EU (Germany)Technical crash details only: device model, OS version, app release, and the error itself. Not your name, email, baby's name, or AI conversations

We may also disclose information if required by law, to protect the rights and safety of NameBird or our users, or in connection with a merger, acquisition, or sale of assets (in which case we'll let you know).


6. AI features

When you use the in-app AI naming assistant, we send limited context to our AI providers — OpenAI, Google and Anthropic — so they can generate a response:

There is no free-text input in the assistant: only the items above are ever sent. We do not send your email address, your account ID, your due date, or who in your nest swiped or voted what — agreement and disagreement are computed as aggregates before anything leaves our server.

Before you use the AI assistant for the first time, we tell you this in the app and ask you to continue. You can use everything else in NameBird without ever using the AI assistant.

Training. We use these providers' paid business tiers, under which the things you send are not used to train their AI models. They may hold it briefly for abuse monitoring under their own terms.

Storage. We store the question you asked and the answer you received for up to 7 days, so that retrying the same request doesn't charge you twice or give you a different answer. After that it is deleted.

International transfer. OpenAI, Google and Anthropic are US-based, so this limited context is processed outside the European Economic Area. These transfers are covered by the European Commission's Standard Contractual Clauses in our agreements with each provider.

AI output can be wrong. AI-generated name suggestions and explanations are for inspiration only. They are not guaranteed to be accurate, complete, culturally appropriate, or suitable for your family, and they are not advice. Use your own judgment, and confirm anything that matters — see also our Terms of Service.


7. Data retention

We keep your information for as long as your account is active, or as needed to provide the service. If you delete your account in-app (Section 8), your personal data is erased immediately; aggregate AI-usage records are kept in anonymized form only (stripped of your identity, with no personal data remaining). If you request deletion by email instead, we delete or anonymize your personal data within 30 days. Either way, we may keep certain records longer where we're legally required to — for example, purchase/transaction records for tax, accounting, or fraud-prevention purposes.


8. Deleting your account and data

You can delete your NameBird account yourself, at any time, in-app: go to Settings → Delete account and follow the confirmation steps. This erases your account and its data immediately — matches, likes, tokens, and everything else tied to your account. Deleting your account removes your access to any circles you're part of; it does not delete a shared circle itself if other members remain in it, since your circle-mates' own naming data and matches are theirs to keep.

If you can't access the app, email us at namebird@smilekidlabs.com from the email address on your account and we'll process your deletion request within 30 days instead. We may ask you to confirm your identity first.


9. Your rights

If you're in the European Economic Area, the UK, or a similar jurisdiction, you have the right to:

To exercise any of these rights, email namebird@smilekidlabs.com. Our legal basis for processing your information is: performing our contract with you (running the app you signed up for), our legitimate interest in operating and securing the service, your consent where we ask for it, and compliance with legal obligations.


10. Children's privacy

NameBird is intended for expecting or new parents and is not directed at children. You must be at least 13 years old to create a NameBird account. We do not knowingly collect personal information from children under that age, and if we learn that we have, we delete it.


11. Security

We use industry-standard safeguards (including encryption in transit and access controls) to protect your information. No service can guarantee perfect security, so please also use a strong, unique password with your email provider and keep access to your email account secure, since that's how you sign in to NameBird.


12. Changes to this policy

We may update this policy as NameBird changes. We'll update the "Last updated" date above, and for material changes we'll let you know inside the app.


13. Contact us

The data controller for NameBird is Alejandro Villanueva, trading as Smilekid Labs.

Alejandro Villanueva (Smilekid Labs) Sagitario 147 04230 Mexico City CDMX Mexico Email: namebird@smilekidlabs.com

Our infrastructure is hosted in the European Union (Frankfurt, Germany — verified 2026-08-23: both Supabase projects are in the `eu-central-1` region).

If you are in the EU and believe we have handled your personal data incorrectly, you may complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk).