Privacy policy

This Privacy Policy explains how L12 Industries ("L12 Industries", "we", "our", or "us"), operating as Giggle, collects, uses, shares, and protects personal information when you use the Giggle website at gigglebaby.app, the Giggle iOS and Android apps, and related application programming interfaces (together, the "Service").

Who we are

Giggle is operated by L12 Industries, based in Toronto, Ontario, Canada.

Privacy questions: privacy@gigglebaby.app

Support questions: support@gigglebaby.app

Mailing location: Toronto, Ontario, Canada

Scope

This policy applies to personal information processed in connection with the Service, including when you browse the website without an account, complete onboarding, create an account, use Discover and shortlist features, invite a partner, purchase a subscription, or contact support.

Information we collect

Account information. When you create an account, we collect your email address and password. Passwords are stored in hashed form by our authentication provider (Supabase Auth). We may also process authentication tokens and email confirmation or password-reset metadata needed to keep your session secure.

Onboarding and preferences. You may provide naming preferences such as gender preference, due date, parent or family names (for example mom, dad, last name, sibling names, middle name), ethnicity or vibe tags, syllable or sound preferences, style notes, popularity or era preferences, and example names you love or dislike. These answers are stored in your profile when you have an account, and may also be kept on your device while you use the Service without signing in.

Usage and discovery data. We collect how you interact with names in the Service, including names you shortlist, dismiss, or view; pair-pick and ranking comparisons; learned taste weights and related taste-profile data; personalized candidate queues; and explore-list preferences generated for you.

Partner sharing data. If you use Share with Partner, we process invitation tokens, link status between accounts, and — when a partner opens or validates an invite — limited information such as the inviter's email address and an approximate count of saved names. Linked partners can view each other's shortlists.

Support communications. If you contact us (including via the in-app support flow that opens your email client), we receive the content of your message and any diagnostics you choose to include (for example app version, platform, user ID, or subscription state).

Website local data. On the website, certain tools store shortlists, likes/dislikes, filters, and related preferences in your browser's local storage. That web shortlist is not synced to a Giggle account today.

Subscription status. We receive entitlement and purchase-state information from RevenueCat and the Apple App Store or Google Play so we can unlock Giggle Plus features. We do not receive or store your full payment card number.

Analytics and diagnostics (mobile). On the mobile app we use product analytics and crash reporting that may include a user identifier, email (when you are signed in), device/app context, and event details such as onboarding steps, swipe or paywall interactions, and error traces.

Information we do not collect. We do not request precise GPS location, camera or photo library access, contacts, or push-notification tokens for the Service as configured today. We do not store payment card numbers on our servers.

How we use your information

We use personal information to:

• Provide, personalize, and improve Discover, shortlist, explore lists, and related features • Sync your preferences and shortlist across devices when you are signed in • Enable optional partner sharing at your direction • Process and manage Giggle Plus subscriptions and restore purchases • Send transactional messages such as account confirmation and password reset • Analyze product usage and diagnose crashes or errors • Secure the Service, prevent abuse, and enforce our Terms of Service • Respond to your support and privacy requests • Comply with applicable law

AI processing

We use third-party AI services (currently Anthropic) on our servers to help compile onboarding preferences into discovery settings, rank name candidates for your feed, and generate short personalized reveal-card copy.

When these features run, preference and taste-related information you provide or generate in the Service (for example style notes, loved or disliked names, shortlist and dismissal signals, and related profile fields) may be sent to the AI provider for inference so we can return personalized results.

We do not use your personal name choices to train our own machine-learning models. Our AI providers process data under their terms as our processors or subprocessors. You should not submit sensitive information you do not want processed for personalization.

Partner sharing

Partner features are optional. If you create an invitation, the person who opens the link may see your email address and an approximate count of names you have saved. If both of you accept a link, each of you can see the other's shortlist (including updates while the link is active).

You control whom you invite. You can leave a couples link, which dissolves the shared relationship going forward. Invitation links expire after a limited period (approximately 14 days). Only invite people you trust.

Cookies and similar technologies

Website. We do not currently set first-party analytics cookies on the website. The website may use browser local storage to remember shortlists and tool preferences on your device. The site may load fonts or other assets from third-party content delivery networks, which can receive standard technical request data such as IP address.

Mobile app. The app uses software development kits (including PostHog for product analytics and Sentry for crash reporting) that store identifiers and event data on your device and transmit them to those providers. These are not browser cookies but serve a similar purpose for analytics and reliability.

You can clear website local storage through your browser settings, and you can delete the mobile app or contact us to request account-related deletion as described below.

Third-party services

We use service providers who process personal information on our behalf or as needed to operate the Service. Key providers include:

• Supabase — authentication and database storage • Anthropic — AI inference for personalization features described above • RevenueCat — in-app subscription and entitlement management • Apple App Store and Google Play — payment processing for in-app purchases • PostHog — product analytics (mobile) • Sentry — crash and error reporting (mobile) • Vercel — hosting for the website and API

These providers may process data under their own privacy policies. We require them to use personal information only as needed to provide their services to us, except where they act as independent controllers (for example Apple or Google for store billing).

International transfers

L12 Industries is based in Canada. Some providers process data in the United States or other countries (for example analytics, hosting, AI, and subscription infrastructure). When you use the Service, your information may be transferred to and processed in those locations as needed to operate Giggle. We take steps appropriate to the circumstances to protect personal information in accordance with applicable Canadian privacy law.

Retention

We retain account and profile data for as long as your account remains active, unless a shorter period applies or you ask us to delete it.

Share invitations typically expire after about 14 days. Certain explore-list sets rotate on a similar cadence. Behavioral signals used for ranking may be weighted or decayed over time as part of product design.

When we delete an account in response to a verified request, associated server-side profile, shortlist, dismissal, taste, queue, explore-list, and share records that cascade from your user account are removed from our primary database. Residual copies may remain briefly in backups or logs until those systems rotate. Local data on your devices may remain until you clear app storage, sign out (which clears certain local session and flow keys), or uninstall the app. Website local storage remains on your browser until you clear it.

Subscription and purchase records held by Apple, Google, or RevenueCat are retained according to those providers' policies.

Your rights

Depending on applicable law (including PIPEDA and other Canadian privacy laws), you may have the right to request access to, correction of, or deletion of personal information we hold about you, and to withdraw consent where processing is based on consent, subject to legal or contractual limits.

To exercise these rights, email privacy@gigglebaby.app from the address associated with your account when possible, and describe your request. We may need to verify your identity before acting. We will respond within a reasonable time as required by law.

Today, account deletion and data export are handled by email request rather than a self-serve in-app tool. Signing out of the app does not by itself delete your server-side account data.

Children's privacy

Giggle is intended for adults making naming decisions and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact privacy@gigglebaby.app and we will take steps to delete it promptly.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encrypted session storage on supported mobile platforms and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top and, for material changes, provide additional notice through the Service or by email where appropriate. Continued use of the Service after an update becomes effective means you acknowledge the revised policy.

Contact

For privacy questions or requests, contact:

L12 Industries Toronto, Ontario, Canada privacy@gigglebaby.app