🛡️ NameRoots is designed with privacy at its core. Your personal data is never sold, shared with advertisers, or used for any purpose outside of delivering the app's features.
Introduction
This privacy policy applies to the NameRoots mobile application ("App") developed by BRK Services PLLC ("we", "us", or "our"). NameRoots is a baby name discovery app that uses real-time sync between up to four people, audio pronunciation, AI name suggestions, and curated name data. This policy explains what data we collect, why we collect it, and how it is protected.
Data We Collect
NameRoots collects only the minimum data necessary to deliver its core features:
- Account information: Your email address and name, provided when you create an account via Clerk authentication. This is used to sign you in and to link you with the other people in your session.
- Swipe data: Which names you swiped left or right. This is stored in Firebase Firestore and Firebase Realtime Database to enable the partner co-swiping and match detection features.
- Session data: A shared session identifier and invite codes, used to sync swipes in real time between everyone in your session. A session can hold up to four people.
- Your family's last name: Entered during onboarding. It is stored on your device and in Firebase Firestore, so it is still there when you sign in on another device. It is also sent to OpenAI as part of the text of a name being spoken aloud, and as context for the AI Name Advisor when you use it.
- Names of your other children: If you add sibling names during onboarding, they are stored in Firebase Firestore and sent to OpenAI as context for the AI Name Advisor, so its suggestions fit alongside the names you have already chosen.
- Heritage and gender preferences: The heritage blend and gender filter you choose are stored and are sent to OpenAI with each AI Name Advisor request.
- AI Name Advisor conversations: What you type into the Advisor is sent to OpenAI to generate a reply, and keywords from it are used to tune later suggestions.
- Push notification tokens: A device token (FCM token) stored in Firestore, used solely to deliver match notifications when you and someone else in your session like the same name. You can revoke this permission in your device settings at any time.
- User-recorded audio: If you record your own pronunciation of a name, the audio clip is sent to OpenAI for transcription. The recording is then kept on your device so you can play it back, and is deleted when you clear that pronunciation or uninstall the app. We do not store your recordings on our servers.
- Purchase records: If you purchase the partner co-swiping unlock, purchase validation is handled by RevenueCat and Apple's App Store. We do not store payment card information.
Data We Do Not Collect
- We do not collect location data
- We do not collect health or medical records
- We do not use advertising SDKs or ad tracking identifiers
- We do not sell or share your data with data brokers or advertisers
- We do not collect data from your contacts or address book
How We Use Your Data
- Account and authentication: To identify you and securely link your session with your partner.
- Swipe and match sync: To detect mutual matches between you and your partner in real time.
- Push notifications: To alert you when a match occurs. Notifications can be disabled in your device settings at any time.
- Pronunciation: To generate and cache phonetic audio previews of names paired with your last name.
- AI Name Advisor: To suggest names that fit your family, using your surname, sibling names, heritage and gender preferences, the names you have liked, and what you type into the Advisor.
Data Storage and Security
Your swipe data and session information are stored in Google Firebase (Firestore and Realtime Database), which is secured by Firebase Security Rules. Only authenticated users involved in a shared session can read or write session data. Firebase data is encrypted at rest and in transit.
Your last name, sibling names and heritage preferences are stored both on your device and in Firestore, so your profile follows you when you sign in on another device.
Third-Party Services
NameRoots uses the following third-party services, each with their own privacy policies:
- Clerk (clerk.com) — authentication and account management
- Google Firebase (firebase.google.com) — data storage and real-time sync
- OpenAI (openai.com) — spoken-name audio, transcription of pronunciations you record, and the AI Name Advisor. Requests to the Advisor include your surname, sibling names, heritage and gender preferences, the names you have liked, and the messages you type.
- RevenueCat (revenuecat.com) — in-app purchase management
- Apple App Store — payment processing for the one-time purchase
NameRoots does not integrate with Facebook, Google Ads, or any advertising network.
Data Retention
Your account and session data are retained for as long as your account is active.
You may delete your account at any time from Settings → Delete Account. This permanently removes your profile, your swipes and your account itself, and cannot be undone.
If other people are in your session, the session carries on for them and their swipes and matches are unaffected — you are removed from it and, if you created it, it passes to whoever has been in it longest. A session with nobody left in it is deleted. Names you had matched on stay visible to the people who still like them, but no longer count as liked by you.
Locally stored data (such as your swipe deck cache and any pronunciations you recorded) is removed when you uninstall the app.
Children's Privacy
NameRoots is intended for expectant parents and adults. The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
If you choose to add sibling names, you are giving us the first names of your own children. We store them only to make name suggestions that fit your family, and they are removed when you delete them or delete your account. If you believe a child has provided personal information to us directly, please contact us and we will promptly delete it.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request deletion of your account and associated data
- Revoke push notification permissions in your device settings
- Contact us with any privacy-related questions or concerns
Changes to This Policy
We may update this privacy policy as the App evolves. Any material changes will be communicated via an in-app notice or updated effective date on this page.
Contact Us
If you have any questions about this privacy policy or wish to request deletion of your data, please contact us at:
BRK Services PLLC
Email: privacy@brk-services.com
Effective Date: September 12, 2026