Privacy Policy

Namable · ai.namable.app · Effective 7 June 2026

This Privacy Policy explains what information the Namable mobile application ("Namable", "we", "our") collects, how we use it, and the choices you have. By using Namable you agree to this policy.

1. Information we collect

Account information — when you create an account we store your email address, a salted bcrypt hash of your password (never the password itself), and your display name if you provide one.
Google Sign-In data — if you sign in with Google, we receive your email address, name, and profile picture from Google and store them with your account record.
App-generated content — the business descriptions, keywords, generated names, search history, and saved favourites you create inside the app are stored against your account so we can show them back to you.
Operational data — standard server logs (IP address, request time, request path) retained for 30 days for security and debugging.

We do not collect: phone numbers, contact lists, photos, location, microphone, camera, calendar, SMS, or any device identifier beyond what is needed for normal HTTPS traffic.

2. How we use information

To authenticate you and keep your account secure.
To generate and remember your name-search results.
To enforce per-plan usage limits.
To improve product quality (aggregated, non-identifying analytics only).

We do not sell your data, run third-party advertising inside the app, or share your data with marketing partners.

3. Third-party services we send data to

OpenAI (GPT-5.2 via Emergent's Universal Key) — your business description, keywords, industry, and tone are sent to OpenAI's API to generate brandable names. OpenAI's API terms apply. Inputs are not used to train models per OpenAI's API policy.
Verisign RDAP and Cloudflare DNS-over-HTTPS — generated domain candidates are queried for availability. Only the candidate domain string is sent; nothing personal.
Google — if you choose Google Sign-In, your sign-in is brokered by Google per their privacy policy.

4. Data retention & deletion

Your account and content stay until you ask us to delete them. To request deletion, email privacy@namable.ai from the email address registered on your account. We will delete your account, search history, and saved names within 7 days. Server logs are auto-deleted after 30 days.

5. Children

Namable is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

6. Security

Connections to Namable are HTTPS-only. Passwords are stored as bcrypt hashes. Sessions use rotating tokens. No system is perfectly secure; report any vulnerability to security@namable.ai.

7. International users

Namable is operated from servers in the United States. By using the app you consent to processing of your data in the United States. If you are in the EEA/UK you have rights under GDPR including access, rectification, deletion, portability, and objection — exercise them by emailing privacy@namable.ai.

8. Changes to this policy

If we make material changes we will update the "Effective" date above and notify active users by email or in-app banner.

9. Contact

Email: privacy@namable.ai
App package: ai.namable.app