Privacy Policy

Last Updated: February 5, 2026

1. Introduction

Welcome to Birthly! This Privacy Policy explains how Birthly ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application (the "App"). Please read this privacy policy carefully.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use Birthly, we collect the following information that you voluntarily provide:

• Account Information: Name, email address, and password (if using email/password authentication)
• Profile Information: Your date of birth (optional)
• Birthday Data: Names and dates of birth of contacts whose birthdays you want to track
• Authentication Data: When you sign in with Google or Apple, we receive your email address and name from those services

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, and unique device identifiers
• Notification Tokens: Device tokens necessary to send you birthday reminder notifications
• Usage Data: App usage patterns, features accessed, and interaction data

3. How We Use Your Information

We use the collected information for the following purposes:

• Core Functionality: To provide birthday reminder services and notifications
• Account Management: To create, maintain, and authenticate your account
• Personalization: To customize your experience within the App
• Communications: To send you birthday reminders and important updates about the App
• Improvement: To analyze usage patterns and improve App features and performance
• Security: To detect, prevent, and address technical issues and security threats

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is securely stored using Supabase, a trusted cloud database provider. Supabase uses industry-standard security measures including:

• End-to-end encryption for data in transit
• Encrypted storage for data at rest
• Regular security audits and updates
• Secure authentication protocols

4.2 How Long We Keep Your Data

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

5. Third-Party Services

Birthly uses the following third-party services that may collect information:

5.1 Supabase (Database & Authentication)

We use Supabase to store and manage your data securely. Supabase's privacy policy can be found at https://supabase.com/privacy

5.2 Google Sign-In

When you sign in with Google, we receive your email address and name. Google's privacy policy can be found at https://policies.google.com/privacy

5.3 Apple Sign-In

When you sign in with Apple, we receive your email address (or Apple's private relay email) and name. Apple's privacy policy can be found at https://www.apple.com/legal/privacy/

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information at any time through the App's profile settings.

6.2 Delete Your Account

You have the right to delete your account and all associated data at any time through the "Delete Account" option in the App's settings. This action is permanent and cannot be undone.

6.3 Notification Preferences

You can manage notification preferences through your device settings or within the App.

6.4 Data Export

You can request a copy of your data by contacting us at the email address provided below.

7. Children's Privacy

Birthly is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information about a child under 13, please contact us immediately, and we will take steps to delete such information.

8. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party service providers (like Supabase) who assist in operating the App
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect the rights, property, or safety of Birthly, our users, or others

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy within the App
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification (if significant changes affect your rights)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to request deletion of personal information
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

This privacy policy is effective as of the date stated above and applies to all users of the Birthly mobile application.