Security

All traffic between your device and BabyNamedBaby is encrypted with TLS 1.2+. Data at rest in our managed database and file storage is encrypted by the underlying platform.

Every database table enforces row-level security: a row about you can only be read by you and the cohort members you've invited. Admin access is gated by a separate roles table (no role flags on user profiles) and every privileged action is recorded in an audit log.

Our internal admin console hides personal identifiers (names, emails) by default and shows masked values. Revealing identifying detail requires a deliberate action and is recorded in the audit log with the admin's identity and a reason.

Access and erasure requests are processed through an automated workflow: erasure runs in a single transaction across every table that holds your data, and access exports are generated as a machine-readable JSON download with a short-lived signed URL. Requests are completed within the 30-day GDPR window.

Sign-in is handled by our managed authentication provider. We support email magic links and social sign-in. Passwords, where used, are hashed by the provider and never visible to us.

Premium billing is handled by Stripe. We never see or store full card numbers; tokens are exchanged client-side with Stripe's vault.

If we discover a personal-data breach likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify affected users directly where the risk is high, in line with UK/EU GDPR Articles 33–34.

If you believe you've found a security issue, please email security@babynamedbaby.com. We aim to acknowledge reports within 2 working days. Please give us a reasonable time to remediate before public disclosure.