Privacy Policy for Birday

Last updated: 3 August 2026

Birday is a mobile app operated by Ogulcan Baskan ("Birday," "we," "us," or "our") that helps you remember and celebrate the birthdays and special days of the people you care about. This Privacy Policy explains what information we handle when you use the Birday iOS app and the birday.app website, how we use it, who we share it with, and the choices and rights you have.

The short version: Birday works with an anonymous account by default, stores only the information you choose to add, contains no advertising, and we do not sell your personal information or share it for advertising purposes.

1. Information We Collect

Information you provide to us

• Account information. By default, you use Birday through an anonymous account (Firebase Anonymous Authentication) and give us no personal details. If you choose to sign in with Apple, Google, or an email address and password (via Firebase Authentication), we receive your name and email address. We use this to back up your data and sync it across your devices.
• Your content. The people you add (names, relationship labels, freeform notes, and optional photos) and their events (birthdays, anniversaries, and custom special days, with dates). This content is stored in Google Firebase (Cloud Firestore and Cloud Storage).
• Communications. If you email us for support, we receive your email address and the contents of your message.

Information accessed through device permissions (only if you grant them)

• Contacts and Calendar. Accessed only if you use the in-app Import feature, so you can select birthdays and special days to bring into Birday. Import is user-initiated; nothing is imported without your selection, and the app does not continuously read your contacts or calendar.
• Photos. If you add a photo to a person, that photo is stored in Firebase Cloud Storage as part of your content.
• Notifications. With your permission, Birday delivers reminders as local notifications on your device and may send push notifications through Firebase Cloud Messaging, which uses a device push token.

Information collected automatically

• Usage analytics. We use Google Firebase Analytics to collect usage information — screens viewed, actions taken, and standard device and app identifiers — so we can understand how Birday is used and improve it. Analytics data does not include the names, notes, photos, or other content you enter.
• Purchase and subscription information. Purchases are processed by Apple. Your subscription and entitlement status is managed by RevenueCat, which receives purchase information and device-level identifiers; purchases are associated with your Firebase user ID so your Premium status follows your account. We never receive your payment card details.

For California residents: the categories above correspond to the following CCPA/CPRA categories of personal information — identifiers (name, email address, user ID, device and app identifiers); commercial information (purchase and subscription status); internet or other electronic network activity (app usage events); audio/visual information (photos you add); and the content you enter. We do not collect precise geolocation and we draw no inferences for profiling.

2. How We Use Information

We use the information described above only to:

• Provide Birday — store, back up, and sync your content across your devices;
• Deliver reminders as notifications on your device and, if you are a Premium user who has turned on email reminders, by email to your account email address (sent through Resend, a third-party email delivery service);
• Process purchases and determine your free or Premium entitlements;
• Understand usage and improve the app (via Firebase Analytics);
• Respond to your support requests; and
• Maintain the security of the service, prevent abuse, and comply with legal obligations.

Birday contains no advertising, and we do not use your information for advertising of any kind.

3. How We Disclose Information

We share personal information only with the service providers that make Birday work, each of which processes only the data needed to perform its role for us:

• Google Firebase — authentication, database (Cloud Firestore), file storage (Cloud Storage), analytics, and push notifications;
• Apple — in-app purchases and payment processing;
• RevenueCat — subscription and entitlement management;
• Resend — delivery of Premium email reminders.

These providers process data on U.S.-based cloud infrastructure. We may also disclose information if required by law, legal process, or a governmental request; to protect the rights, safety, or property of our users, ourselves, or others; or, if the app or our business is ever sold or transferred, to the successor (in which case this policy would continue to apply or you would be notified of changes).

We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA. We have not done so in the preceding 12 months, and we do not process personal information for targeted advertising as defined under other U.S. state privacy laws. We also do not knowingly sell or share the personal information of anyone under 16.

4. Data Retention and Deletion

• We keep your content and account information for as long as your account exists, so your reminders keep working and your data stays synced.
• You can delete individual people and events inside the app at any time; deleted items are removed from our systems.
• You can delete your entire account and all associated data directly in the app (Settings → Account → Delete Account) or by emailing us at support@birday.app. When you delete your account, your content and account data are deleted from our active systems, and residual copies are removed from backups within a reasonable period.
• Records of your purchases are retained by Apple and RevenueCat as needed to honor your entitlements (for example, a Lifetime purchase) and as required by law. Analytics data is retained for the limited period configured in Firebase Analytics.

5. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and per-user access rules that restrict your content to your own account. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

6. Your U.S. State Privacy Rights

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use and disclose it; to access it (including in a portable format); to correct it; to delete it; to opt out of "sales" and "sharing" (we do neither); to limit the use of sensitive personal information (we do not use or disclose sensitive personal information for purposes other than providing the service); and not to be discriminated against for exercising these rights.

Residents of other states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, and Utah — have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sales, and certain profiling (none of which we engage in). Although Birday may fall below the thresholds at which some of these laws apply, we extend these rights to all U.S. users.

• How to exercise your rights. Email support@birday.app from the email address associated with your account, telling us which right you want to exercise. Most access and deletion needs can also be handled directly in the app.
• Verification. To protect your data, we verify requests by confirming control of the email address associated with your account (or, for anonymous accounts, by asking you to make the request from within the app). We will respond within the time required by applicable law.
• Authorized agents. You may use an authorized agent to submit a request; we will ask for proof of the agent's authority and may still verify your identity directly.
• Appeals. If we decline a request, you may appeal by replying to our decision, and we will respond as required by the law of your state. If your appeal is denied, you may contact your state Attorney General.

7. Children's Privacy

Birday is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at support@birday.app and we will delete it.

8. International Users

Birday's data is processed and stored on cloud infrastructure located in the United States. If you use Birday from outside the U.S., you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date above, and if the changes are material we will provide additional notice, such as a notice in the app.

10. Contact Us

Ogulcan Baskan
Email: support@birday.app