BirthMemo

Privacy Policy

How we handle your data

Last updated: February 7, 2026

Introduction

BirthMemo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our birthday reminder application. We believe in transparency and want you to understand exactly how your data is handled.

Data We Collect

Account Information

  • Full name
  • Email address (used for login and account identification)
  • Phone number
  • Password (stored as a secure hash, never in plain text)

Profile Information

  • Country preference
  • Preferred message tone
  • Profile picture (compressed before upload)

Birthday Information

  • Names of people whose birthdays you track
  • Birth dates
  • Relationship type (e.g., friend, family, colleague)
  • Message tone preference
  • WhatsApp phone numbers (for message sharing)
  • AI-generated and saved birthday messages

Usage Data

  • Total birthdays saved
  • Basic device and browser information (for service delivery)

Where Your Data Is Stored

BirthMemo uses Supabase as its cloud database provider. Your account information, birthdays, messages, and profile data are stored on Supabase's cloud infrastructure.

  • Data is stored in Supabase-managed PostgreSQL databases
  • All data is encrypted at rest and in transit
  • Supabase infrastructure is hosted on AWS in secure data centers
  • Row Level Security (RLS) ensures you can only access your own data

Local caching: The app also caches some data locally in your browser for offline access and faster performance. This cached data mirrors what is stored in the cloud and is cleared when you log out.

AI Message Processing

BirthMemo uses Google Gemini AI to generate personalized birthday messages. When you request AI-generated messages:

  • Your request is sent to our secure server endpoint first
  • Our server forwards only the necessary details (name, relationship, tone, interests) to Google Gemini
  • The Gemini API key is kept securely on our server and is never exposed to your browser
  • Google processes the request and returns 3 unique messages
  • The message you select is saved to your account
  • Your data is not used by Google to train AI models

Rate limiting: AI generation is limited to 5 requests per minute per user to prevent abuse.

By using AI message generation, you also agree to Google's terms of service and privacy policy for the Gemini API. See policies.google.com/privacy

WhatsApp Integration

BirthMemo helps you send birthday messages via WhatsApp:

  • We use the official wa.me deep link format to open WhatsApp
  • Messages are pre-filled but NOT automatically sent
  • You must manually tap "Send" in WhatsApp to deliver the message
  • BirthMemo does not have access to your WhatsApp account, contacts, or message history
  • Phone numbers stored in your account are never shared with third parties

PWA, Caching & Cookies

Cookies: BirthMemo does not use tracking cookies or third-party analytics trackers. We use essential browser storage for authentication sessions and app functionality only.

Progressive Web App (PWA): When installed as a PWA:

  • The app caches static assets (HTML, CSS, JavaScript) for offline use
  • Page content is fetched from the network first, with cached fallbacks when offline
  • API requests are never cached and always go to the server
  • When a new version is deployed, a banner will prompt you to reload
  • Old caches are automatically cleaned up on update

Offline & Online Functionality

BirthMemo is primarily an online application. Your birthday data, messages, and profile are stored in the cloud and require an internet connection to access.

What requires internet:

  • Signing in and accessing your account
  • Viewing, adding, editing, or deleting birthdays
  • Generating AI birthday messages
  • Sending messages via WhatsApp
  • Updating your profile

What works offline: If you have installed BirthMemo as a PWA, the app shell (interface) may load from cache, but you will not be able to view or modify your data until you reconnect.

Your Rights & Data Control

You have full control over your data:

  • Access: View all your data within the app at any time
  • Edit: Modify any birthday, profile, or message information
  • Delete: Remove individual birthdays or your stored messages
  • Account deletion: Request full deletion of your account and all associated data by contacting us
  • Data export: Request an export of your data by contacting us

To exercise any of these rights, email us at privacy@birthmemo.app. We will respond within 30 days.

Children & Age Requirements

BirthMemo is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@birthmemo.app and we will promptly delete that information.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us:

  • Email: privacy@birthmemo.app
  • Security issues: security@birthmemo.app

We will respond to your inquiry within 30 days. For users in Africa and other regions, we are committed to handling your data in accordance with applicable local data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of BirthMemo after any changes constitutes your acceptance of the updated policy.