Privacy policy

Effective September 12, 2026

Birthday is operated by Jordan Blum. This policy explains how information is used when you keep birthdays, connect with friends, save private notes and manage a subscription.

Your account and saved information

We collect your verified phone number, account identifier, name and birthday to provide your account and birthday features. If you add an email address or connect Google or Apple, we also process the information needed to verify and link that identity.

Birthdays you add, private notes, gift plans and message drafts are stored with your account. Private notes, gift plans and drafts are not shared with friends. When you send or accept a friend request, the other person can see the profile information you have agreed to share. Existing sharing choices are respected.

If you choose a profile or birthday picture, we upload a resized copy of that selected image. Your profile picture is available to accepted friends; pictures for birthdays you add manually remain private to you. We do not upload your photo library. Replacing a picture with birthday artwork removes the saved photo. Deleting your account removes its stored photos.

Contacts and messages

Contacts access is your choice. When you look for friends, phone numbers are sent securely to our matching service; contact names used for matching stay on your device. If you choose a contact when adding a birthday, we save that selected name and phone number with your private birthday entry. Finding an account does not by itself share its birthday; a friendship must be accepted.

You can revoke Contacts access in your device settings. This stops future access to your address book; birthday entries you already chose to save remain in your account until you edit or delete them. Invitations and birthday messages open a system message or sharing interface; you choose the recipient and send the message yourself. The service you use to send it handles that message under its own policy.

Reminders and service security

Your reminder preferences help schedule notifications. With notification permission, we may store a device push token to deliver friend-request notifications. You can turn notifications off in device settings.

Our providers process network information, such as IP addresses and technical request logs, to operate the service, diagnose failures and limit abuse. We use encrypted connections, protected sign-in storage on your device and account-based access controls.

Purchases and RevenueCat

Apple processes App Store payments. Birthday receives signed transaction and subscription information to verify access; we do not receive your payment card details.

We use RevenueCat for purchase analytics. After Birthday verifies a purchase, our server sends RevenueCat a pseudonymous account identifier and the signed purchase and subscription information. The Birthday app does not include the RevenueCat SDK or send it device analytics. We do not send it your phone number, email, birthday, contacts, private notes or message drafts. RevenueCat analytics do not decide access to your Birthday account.

Service providers

Supabase provides account and database services; Vercel hosts service endpoints and this page; Twilio delivers verification messages; Google supports optional sign-in; Apple provides purchases and notifications; RevenueCat provides purchase analytics; and OpenAI provides optional message and gift suggestions. These providers process information needed for their roles. We do not sell your personal information or use it for third-party advertising.

Optional AI help

When you request help with a birthday message or gift idea, we show the context to be shared and ask for permission before sending it to OpenAI through our server. In versions that remember this choice, permission is stored separately for each account on that device. You can stop future AI requests from Account settings (under Privacy in earlier versions); content already sent cannot be recalled. Only the context you choose in that form is included. You can choose a relationship and add selected saved notes to the editable context before requesting a gift suggestion. We do not automatically include your profile, photos, contacts, saved notes or existing drafts. Please leave out sensitive information and other people's personal details.

OpenAI returns a suggestion for you to review. Nothing is sent as a message or saved as a draft automatically. If you choose to use and save a suggestion, it becomes part of your account's saved content. AI suggestions can be inaccurate; gift ideas do not verify products, availability or prices.

We request no stored response object from OpenAI and do not retain prompt or response text in our AI service's database or logs. OpenAI's standard abuse-monitoring logs may retain content for up to 30 days, or longer for legal requirements or safety reasons. API content is not used to train OpenAI models by default. We keep account-linked request counts to enforce usage limits. See OpenAI's API data controls.

Keeping and deleting information

We retain account information while it is needed to provide the service. You can edit or delete saved content using available app controls, and delete your account from Settings → Account settings → Delete account. You can also contact us to request access, correction, export or account deletion. We may need to verify that the request comes from the account owner.

Some transaction, security or backup records may remain when needed for legal obligations, fraud prevention or backup recovery. Deleting your Birthday account does not cancel an Apple subscription; manage or cancel that separately in Apple Subscriptions.

Contact and changes

For help or a privacy request, email support@trybirthday.com. We will update the effective date when this policy changes and provide additional notice for material changes where required.