Who we are
This Privacy Policy explains how Baby Names by Settle ("Settle", "we", "us") collects, uses, and protects your information when you use the app. Baby Names by Settle is published by Dave App Development Ltd (trading as Settle) and distributed under the package identifier com.settlebabynames.
By using Settle you agree to the practices described in this policy. If you do not agree, please do not use the app.
Information we collect
We collect only the information needed to run the app:
- Account identifiers from Google Sign-In: your email address and your Google account ID. Signing in requests the basic "profile" and "email" scopes, but we store only your email and Google account ID. Your name and profile picture are discarded and never saved.
- Your activity in the app: the names you swipe on (approve, reject, or superlike), your filter preferences (gender, decade, and origin), any custom names you add, and your saved match rankings.
- Your couple link: if you pair with a partner, we store the connection between your two accounts so that your shared names and matches can sync.
- Sign-in sessions: a session credential for each device you sign in on. On Android it is held in the device's secure keystore; on our servers it is stored only as a one-way hash, never in its original form.
- Your referral code, and any referral code you enter: the first time you look at your own referral code we create a permanent one for your account, which you can share with friends. If you enter a friend's referral code, we store that code on your account — because the code identifies its owner, this records which account referred you, and the discount it unlocks can then be used by you or by the partner you are linked with. You can enter a code only once, ever. On iPhone the discount arrives as a single-use App Store offer code, and we record which code was given to your account so that it is never given to anyone else.
- Subscription status: if you buy Premium, we store whether your subscription is active, when it expires, and a record of each purchase that added or discounted a term: the store's identifier for the transaction, which product was bought, which store it came from, and when. We never receive or store your card or payment details — payment is handled entirely by the payment provider for where you bought (the app store on mobile, or Paddle on the web), as described under "Payments" below.
- A small daily usage counter, used to enforce the free daily swipe limit.
- Crash and stability data: in the Android and iPhone apps we use Google Firebase Crashlytics to record crashes and errors. When the app crashes or hits an error we want visibility on, Crashlytics collects a diagnostic report containing the technical details of the failure (such as the error and the stack trace), together with information about the app and device at the time (for example app version, operating-system version, device model, and a Crashlytics-generated installation identifier). We use these reports only to find and fix bugs. They are not used for advertising, and the web version of Settle sends no crash reports.
- Analytics and advertising-measurement data: through Google Firebase Analytics we collect the actions you take in the app (such as the screens you view, your swipes, and whether you open the upgrade screen), app and device information (such as app version, device model, and general region), a Google advertising identifier where available (on iOS only if you allow it, see "Analytics and advertising measurement" below), and, when you first buy Premium, a purchase event recording the amount, currency, and store transaction identifier. It is tagged with your account type (guest, free, or Premium) and, once you sign in, linked to a pseudonymous member identifier, as described below.
How we use your information
We use your information only to operate the app:
- To sign you in and keep you signed in.
- To store your preferences and the names you swipe on.
- To sync names and matches between you and your partner.
- To enforce the free daily swipe limit and to unlock unlimited swiping for Premium subscribers.
- To run our referral offer: to check whether the code you entered still entitles you or your partner to a discount on Premium, and to count how many households have bought Premium with a code you shared, because the discount is offered for only a limited number of them.
- To understand how the app is used and to measure the effectiveness of our advertising, using Google Firebase Analytics (see below).
- To diagnose and fix crashes and errors, using Google Firebase Crashlytics (see "Crash reporting" below).
We do not sell your data. We use Google Firebase Analytics to understand usage and to measure our advertising, and Google Firebase Crashlytics to find and fix crashes.
Analytics and advertising measurement
We use Google Firebase Analytics to understand how the app is used and to measure the effectiveness of our advertising. We do not sell your data.
When you first purchase Premium, we send Google Firebase Analytics a "purchase" event recording the purchase amount, its currency, and the store transaction identifier. This is linked to Google Ads so that, if you arrived from one of our advertisements, the purchase can be attributed to it, helping us reach more people who would enjoy Settle. This event is sent only on an initial purchase, never on a renewal or a restore.
Firebase Analytics also records the actions you take in the app and information about your device (for example app version, device model, and general region), together with a Google advertising identifier where available. On iOS this advertising identifier (the IDFA) is used only if you allow it through the App Tracking Transparency prompt; if you decline, the app works in exactly the same way and the purchase event is still recorded, only without the advertising identifier. You can change your tracking choice at any time in your device's Settings.
So that we can understand how people move through the app over time — for example, which screens lead people to keep using Settle or to upgrade — and improve it, we attach two things to this analytics data, in the apps and on the web. The first is your account type: guest, free, or Premium, which is attached from your first visit. The second, only while you are signed in, is a pseudonymous member identifier: a code our server derives from your account using a one-way, secret-keyed hash. It is not your account ID, email address, or name, and Google cannot turn it back into any of them. We use these only for product analytics, never for advertising.
Google processes this analytics data on our behalf. We also export a copy of it to Google BigQuery, a data warehouse in our own Google Cloud project stored in the European Union, where only we can analyse it.
Google Analytics keeps event-level data for 2 months and user-level data for up to 14 months from your last activity. The copy in our BigQuery project is kept for up to 14 months and then deleted.
In the Android and iPhone apps, when you sign in we also give RevenueCat (our subscription provider, see "Third-party services") the identifier Firebase Analytics assigns to your installation of the app. It is not your name or email address. If you then buy Premium after being referred by a friend, our server uses it to record that purchase in Google Firebase Analytics against your app installation, so we can measure how well referrals work. It is not used for advertising. We clear it from RevenueCat when you delete your account.
Crash reporting
The Android and iPhone apps use Google Firebase Crashlytics so that when Settle crashes we can see what went wrong and fix it. Without it a crash would leave no trace and we would have no way of knowing it happened.
When the app crashes, or hits an error we have asked to be told about, Crashlytics sends Google a diagnostic report on our behalf. It contains the technical details of the failure (such as the error and the stack trace showing where in the code it happened) along with the state of the app and device at the time: app version, operating-system version, device model and settings, and an installation identifier that Crashlytics generates for your app install. That identifier is reset if you delete and reinstall the app.
We use crash reports only to diagnose and fix problems in the app. They are never used for advertising, and we do not use them to build a profile of you. Crash reporting is part of the native apps only — the web version of Settle at settledevelopment.com sends no crash reports.
Payments
Settle offers an optional paid Premium upgrade. We never see or store your card or full payment details. Payment is processed entirely by a payment provider that acts as the merchant of record for your purchase, which differs by where you buy:
- On the web (settledevelopment.com), payments are processed by Paddle (Paddle.com Market Ltd), our authorised reseller and merchant of record. To take payment and meet its tax and legal obligations, Paddle collects information such as your name, email address, billing address, and payment details directly, and handles billing, invoicing, sales tax/VAT, and refunds. Paddle acts as an independent data controller for that payment information; its handling is governed by Paddle's buyer privacy notice at paddle.com/legal/privacy.
- In the Android app, payments are processed by Google Play; in the iPhone or iPad app (coming soon), by Apple. Their handling of your payment information is governed by Google's and Apple's own privacy policies.
In every case we receive only a confirmation of your subscription status (whether Premium is active and when it expires) and the store's identifier for the transaction, never your card number or full payment details.
Where your data is stored
Your data is stored on Google Cloud (Cloud Run) and in a managed PostgreSQL database hosted by Neon. All communication between the app and our servers uses encrypted HTTPS connections.
Third-party services
We rely on a small number of service providers to run the app. They process data on our behalf; we do not sell or share your data with third parties for their own purposes.
- Google: for Google Sign-In, for hosting our backend on Google Cloud, (through Google Firebase Analytics and Google Ads) for app analytics and measuring the effectiveness of our advertising (see "Analytics and advertising measurement"), and (through Google Firebase Crashlytics, in the mobile apps only) for crash and error reporting (see "Crash reporting").
- Neon: for hosting our PostgreSQL database.
- RevenueCat, and the payment provider for where you buy — the app store (Google Play or the App Store) for in-app purchases, or Paddle (Paddle.com Market Ltd) for purchases made on the web: only if you purchase Premium, to process the payment and to manage your subscription status. Payment is handled by that provider as merchant of record (see "Payments" above); we never receive your card details.
- RevenueCat also holds, in the mobile apps and whether or not you purchase, your app installation's Firebase Analytics identifier until you delete your account, so that a referred purchase can be recorded in analytics (see "Analytics and advertising measurement").
The only analytics we use is Google Firebase Analytics, and the only crash reporting we use is Google Firebase Crashlytics, both as described above.
Data retention and deletion
We keep your data for as long as your account is active.
You can permanently delete your account and its data at any time from inside the app: open Settings (the gear icon in the top-right header), scroll to Delete account, then confirm by typing DELETE. Your account is deleted immediately and you are signed out.
When you delete your account we remove your account record, your sign-in sessions, and your swipes. If you are not linked with a partner, we also delete your custom names, your match rankings, and your couple record. If you are linked with a partner, your partner keeps their own account and the custom names you added together. These are shared by the couple and have no separate per-person ownership.
Live data is deleted immediately when you confirm. Copies may remain in routine encrypted backups for up to 24 hours before those backups are rotated out, after which no copy remains.
Deleting your account does not delete analytics data already sent to Google Firebase Analytics or exported to BigQuery. That data is identified by the pseudonymous member identifier and the app-installation and advertising identifiers described under "Analytics and advertising measurement" — never by your name or email address. Once your account is deleted it is no longer connected to your account records with us, and it is removed when the retention periods set out there expire.
Deleting your account also clears the app-installation identifier we gave RevenueCat, so RevenueCat no longer links your purchase record to your analytics data. If you bought Premium, RevenueCat keeps the record of that purchase: Premium belongs to the couple, and the record is needed to keep a linked partner's Premium and to handle refunds and restored purchases.
Children
Settle is intended for adults. It is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed. Continued use of the app after a change means you accept the updated policy.
Contact
If you have any questions about this policy or your data, contact us at [email protected].
Data safety summary
The data Baby Names by Settle (com.settlebabynames) collects, as declared for its store listing:
- Personal info: Email address, used for Account management.
- Personal info: User IDs, used for Account management, Analytics.
- App activity: App interactions, used for App functionality, Analytics.
- App activity: Other user-generated content, used for App functionality.
- Financial info: Purchase history, used for App functionality, Analytics, Advertising or marketing.
- App info and performance: Crash logs, used for Analytics.
- App info and performance: Diagnostics, used for Analytics.
- Device or other IDs: Device or other IDs, used for Analytics, Advertising or marketing.
Data is encrypted in transit.
You can delete your account from inside the app; see https://settledevelopment.com/baby-names/delete-account/.