At Namelia ("we", "us", or "our"), operated via namelia.ai, we are committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have. By using our service, you agree to the practices described below.

1. Data We Collect

We collect the following categories of personal data: Account information — email address, password (stored as a secure hash), and your first and last name, provided during registration. Usage data — name generation history, shortlisted names, and shared lists created through the service. Technical data — your IP address, which is used to enforce freemium usage limits for unregistered users. We do not collect sensitive personal data such as racial or ethnic origin, health data, or biometric data.

2. How We Use Your Data

We use your personal data for the following purposes: To provide and operate the service — generating personalized name suggestions, maintaining your shortlist, and enabling shared lists. To manage your account — authentication, password resets, and subscription management. To enforce usage limits — tracking free-tier usage via IP addresses for unregistered users. To send transactional emails — such as password reset links and subscription confirmations. To improve the service — analyzing aggregated, anonymized usage patterns to enhance features and performance. We do not sell your personal data to third parties, nor do we use it for advertising purposes.

3. Third-Party Services

We rely on trusted third-party providers to deliver our service: OpenAI — processes your name generation requests using AI. Your input data (family context, preferences) is sent to OpenAI's API for processing. OpenAI's data usage policies apply to that processing. Stripe — handles all payment and subscription management. When you subscribe to Pro, your payment details are collected and processed exclusively by Stripe. We never store your credit card information. Azure Application Insights (Microsoft) — collects anonymized telemetry data such as page views, performance metrics, and error reports to help us monitor and improve the service. Azure Communication Services (Microsoft) — used to send transactional emails such as password reset links. Your email address is shared with this service solely for delivery purposes. Each of these providers has their own privacy policy, and we encourage you to review them.

4. Cookies and Local Storage

Namelia uses essential cookies and local storage to keep you signed in and remember your language preferences. We also use analytics cookies via Azure Application Insights to understand how the service is used. We do not use advertising or tracking cookies from third parties. You can manage or disable cookies in your browser settings, though this may affect the functionality of the service.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it for longer. Anonymized, aggregated data that cannot be linked back to you may be retained indefinitely for analytics and service improvement.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR): Right of access — you can request a copy of the personal data we hold about you. Right to rectification — you can ask us to correct any inaccurate data. Right to erasure — you can request that we delete your personal data ("right to be forgotten"). Right to data portability — you can request your data in a structured, machine-readable format. Right to restrict processing — you can ask us to limit how we use your data. Right to object — you can object to our processing of your data in certain circumstances. To exercise any of these rights, please contact us at Telegram @MrSon1Q. We will respond to your request within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, and access controls. While no system is 100% secure, we take reasonable steps to safeguard your information against unauthorized access, alteration, or destruction.

8. Children's Privacy

Namelia is a tool for parents and families choosing baby names. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us via Telegram at @MrSon1Q.

Analytics and Behavioral Data

We use Microsoft Application Insights, Microsoft Clarity and Google Analytics to collect usage data: pages visited, clicks, session duration, session replays and technical performance. Application Insights runs in cookie-free mode by default; in the EEA, UK and Switzerland, cookies, session recordings and Google Analytics are enabled only after you accept them in the consent banner. Logged-in users are identified only by a pseudonymous hash; we never send your email or name to analytics services.