Privacy Policy

Baby Bee helps couples choose their baby's name together. We take your data seriously and collect as little as possible. This page explains, in plain language, what data we process, why, and what rights you have.

Who is responsible

The data controller is whoever operates Baby Bee, based in Portugal. For any privacy question, write to hi@ourbabybee.com.

What data we collect

• Account: your email and name. If you sign in with Google, we receive the name, email and photo linked to that account.
• Use of the service: the babies (boards) you create, the votes you cast on names, the invites you send and the members who take part.
• Communications: the emails we send you (sign-in link, invites, notices of names in common) and your email preferences.
• Usage analytics (only with your consent): pages visited, clicks, heatmaps and session recordings (how you navigate the app), so we can understand what to improve.
• Technical data: logs and IP address processed by our providers for the security and operation of the service.

Cookies and storage

We use two types of storage in your browser:

• Essential (always on, no consent required): keeping you signed in and remembering your cookie choice. Without these, the app does not work.
• Analytics (PostHog): only created after you click «Accept» on the privacy notice. If you decline, no analytics cookie is created and no session is recorded. You can decline and still use everything.

Why we process the data (legal basis)

• Performance of a contract: creating the account and providing the service (babies, votes, invites, service emails).
• Consent: usage analytics and session recordings. You can withdraw it at any time.
• Legitimate interest: security and abuse prevention.
• Legal obligation: when the law requires us to retain certain data.

Who we share with

We do not sell your data. We rely on providers (processors) that handle it only to provide the service to us:

• Vercel: application hosting.
• Database provider: secure storage of account and service data.
• Resend: sending the service emails.
• PostHog: usage analytics and session recordings, only with consent (servers in the USA).
• Google: only if you choose to sign in with a Google account.

Some of these providers process data outside the European Economic Area (for example, PostHog in the USA). In those cases, the transfer relies on appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep it

We keep account data for as long as you keep the account active. If you delete the account, we remove or anonymize your personal data, except what is strictly necessary for legal reasons. Analytics data has limited retention periods in PostHog.

Your rights

Under the GDPR, you have the right to:

• access your data and obtain a copy;
• correct inaccurate data;
• delete the data («right to be forgotten»);
• object to or restrict certain processing;
• withdraw consent to analytics, at any time;
• data portability.

To exercise any of these rights, write to hi@ourbabybee.com. You can also lodge a complaint with the supervisory authority: in Portugal, the CNPD (cnpd.pt).

Security

We use encrypted connections (HTTPS) and reasonable technical and organizational measures to protect your data. No system is 100% secure, but we work hard to keep it that way.

Minors

Baby Bee is intended for adults (parents-to-be). It is not directed at minors, and we do not knowingly collect children's data.

Changes

We may update this policy. If there are significant changes, we will let you know in the app. The date at the top shows the last update.