Privacy Policy

Namable · ai.namable.app · Last updated 21 August 2026

This Privacy Policy explains what information the Namable mobile application ("Namable", "we", "our") collects, how we use it, and the choices you have. By using Namable you agree to this policy.

1. Information we collect

Account information — when you create an account we store your email address, a salted bcrypt hash of your password (never the password itself), and your display name if you provide one.
Google Sign-In data — if you sign in with Google, we receive your email address, name, and profile picture from Google and store them with your account record.
App-generated content — the business descriptions, keywords, chosen naming engines, generated names, search history, and saved favourites you create inside the app are stored against your account (or guest session) so we can show them back to you.
Subscription status — your current plan (Free, Starter or Pro), where it was purchased (e.g. Google Play) and its renewal state. We never receive or store your payment card details.
Operational data — standard server logs (IP address, request time, request path) retained for 30 days for security and debugging.

We do not collect: phone numbers, contact lists, photos, location, microphone, camera, calendar, SMS, or any device identifier beyond what is needed for normal HTTPS traffic.

1a. Guest usage (no account needed)

You can use Namable without an account — guests get 2 free .net scans per day. To enforce this fairly across reinstalls, the app sends a device identifier which our server immediately converts into a one-way SHA-256 hash. We store only the hash, never the raw value, and it is not used for advertising or cross-app tracking. If you later create an account, your guest scan history can be merged into it.

2. How we use information

To authenticate you and keep your account secure.
To generate and remember your name-search results.
To enforce per-plan usage limits.
To improve product quality (aggregated, non-identifying analytics only).

We do not sell your data, run third-party advertising inside the app, or share your data with marketing partners.

2a. Analytics

Namable uses Google Firebase Analytics (on native app builds) to record product events — for example: app opened, scan started, scan completed, naming engine selected, paywall viewed, and subscription started or completed. These events power our internal product analytics and help us understand feature usage, measure performance and conversion, and identify problems. Events describe actions, not the content of your ideas — business descriptions are not sent to analytics.

2b. Subscriptions & payments

Paid plans on Android are purchased through Google Play Billing and managed via RevenueCat, our subscription-management provider. Google processes your payment; Namable never receives or stores your card details. RevenueCat receives a purchase token and an anonymised app-user ID so your entitlement can be verified and restored across devices.

3. Third-party services we send data to

OpenAI (GPT-5.2 via Emergent's Universal Key) — your business description and derived keywords are sent to OpenAI's API to generate brandable names. OpenAI's API terms apply. Inputs are not used to train models per OpenAI's API policy.
Domain registries (RDAP) and Cloudflare DNS-over-HTTPS — generated domain candidates are queried for availability against public registry services (e.g. Verisign for .com/.net, Public Interest Registry for .org, Identity Digital, Google Registry). Only the candidate domain string is sent; nothing personal. Availability can change at any moment — Namable does not guarantee that any domain remains available.
Google — if you choose Google Sign-In, your sign-in is brokered by Google per their privacy policy. Google Play processes subscription payments.
RevenueCat — subscription entitlement management.
Google Firebase — product analytics events.

4. Data retention & deletion

Your account and content stay until you delete them. You can delete your account instantly in the app (Profile → Delete Account), or request deletion by emailing privacy@namable.ai from the email address registered on your account. We will delete your account, search history, and saved names within 7 days. Server logs are auto-deleted after 30 days. Anonymous guest records persist only to enforce the daily free-scan limit.

5. Children

Namable is not directed to children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

6. Security

Connections to Namable are HTTPS-only. Passwords are stored as bcrypt hashes. Sessions use rotating tokens. No system is perfectly secure; report any vulnerability to security@namable.ai.

7. International users

Namable is operated from servers in the United States. By using the app you consent to processing of your data in the United States. If you are in the EEA/UK you have rights under GDPR including access, rectification, deletion, portability, and objection — exercise them by emailing privacy@namable.ai.

8. Changes to this policy

If we make material changes we will update the "Effective" date above and notify active users by email or in-app banner.

9. Contact

Email: privacy@namable.ai
App package: ai.namable.app