BirthKeeper

Privacy policy

BirthKeeper helps you remember birthdays and anniversaries. It's built to know as little about you as possible: there's no sign-up, no ads and no tracking, and the details of the people you add are encrypted on your phone before they leave it.

Effective 30 October 2026

1. Who we are

BirthKeeper is made by Mustafa Cenanovic, an independent developer, who is responsible for your data under this policy (the "controller" under the GDPR). In this policy, "we" and "us" mean the BirthKeeper developer.

Questions or requests about your data: mustafacenanovic@hotmail.com.

2. What we store

You don't create an account. The first time you open the app, it gets a random anonymous ID, and your data is stored under that ID. It isn't linked to your name, email address or phone number.

People and occasions you add (encrypted)

Names, relation, gender, interests, budget and currency, notes, gift ideas you save and your gift history. These are encrypted on your phone before they're uploaded, so we can't read them (see Encryption).

Stored without encryption, because our servers need it

  • Dates of birthdays and anniversaries, and which reminders are switched on for each one, so we know when to send a reminder. The date is stored without the name it belongs to.
  • Your time zone (for example "Europe/Berlin"), so reminders arrive in your morning.
  • A push notification token and whether your phone runs iOS or Android, so reminders can be delivered to your phone.
  • The last day you opened the app (a date, not a time). We use it to count how many people are using BirthKeeper.
  • A record of gift idea requests (your anonymous ID and the time), to stop the AI feature from being overused.

Only on your phone

The encryption key and app settings such as the theme and language. Export files you create are saved wherever you choose and never sent to us.

We don't collect your contacts, location, photos, email address, advertising ID or browsing activity. There are no advertising or analytics SDKs in the app.

3. Encryption

On first launch, BirthKeeper creates a 256-bit encryption key and keeps it in your phone's secure storage (iOS Keychain or Android Keystore). The details of the people you add are encrypted with AES-256-GCM before they're uploaded, and are only decrypted on your phone. The key is never sent to us.

Because only your phone has the key, we can't recover your data if you delete the app or lose your phone. That's why the app lets you export a copy (Settings › Your data).

4. Gift ideas and AI

Gift ideas are optional. They're generated by OpenAI's API. Nothing is sent to OpenAI unless you ask for ideas, and the app asks for your consent the first time.

When you ask for ideas for someone, your phone decrypts their details and sends these through our server to OpenAI:

We don't send your anonymous ID, the person's last name or their date of birth. Text you type is also checked by OpenAI's moderation service to block misuse. We don't keep the request or the answer on our server. Ideas you choose to save are encrypted on your phone like the rest of your data.

Under OpenAI's API terms, data sent through the API isn't used to train their models, and OpenAI may keep it for up to 30 days to detect abuse before deleting it. To avoid sending details to OpenAI, don't use the gift ideas feature.

5. Reminders

Reminders are sent from our server through Firebase Cloud Messaging (Google) and, on iPhone, Apple's push notification service. The text of each reminder, including the person's name, is encrypted with your key, so Google, Apple and we only pass along an unreadable message. Your phone decrypts it and shows the reminder.

You can turn reminders off for any person in the app, or turn off notifications for BirthKeeper in your phone's settings.

6. Crash reports

If the app crashes, a report is sent to Firebase Crashlytics (Google). It contains the technical details of the error, your phone model, operating system and app version, and a random installation ID set by Crashlytics. Crash reports never include your anonymous BirthKeeper ID or anything you entered.

7. Why we use your data (legal bases)

We don't sell your personal information or share it for advertising, and we don't use it for automated decisions that affect you.

8. Service providers

We use these companies to run BirthKeeper. They process data only on our instructions.

Some of these providers process data in the United States or other countries outside your own. Where the GDPR applies, these transfers are protected by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

We may disclose data if the law requires it. Because the details of the people you add are encrypted, we can't hand them over in readable form.

9. How long we keep it

10. Your rights and choices

Depending on where you live (including under the GDPR in the EU, EEA and UK, and California's CCPA/CPRA), you have the right to access, correct, delete or receive a copy of your data, to restrict or object to how we use it, and to withdraw consent. You can do most of this directly in the app:

For anything else, email mustafacenanovic@hotmail.com. Since there's no account, we usually can't tell which data is yours from an email alone, so the in-app options above are the most reliable way. We'll reply within one month. We won't treat you differently for using your rights.

If you're in the EU, EEA or UK, you can also complain to your local data protection authority.

11. Children

BirthKeeper isn't intended for children under 16, and we don't knowingly collect data from them. If you think a child has used the app, contact us and we'll delete the data.

12. Changes and contact

If we change this policy, we'll update the date at the top. If we change it significantly, for example by collecting a new kind of data, we'll tell you in the app before it applies.

Questions: mustafacenanovic@hotmail.com. Help with using the app is on the support page.