Privacy policy

Last updated 21 October 2026

Nafna helps people find baby names together. We only collect the information needed for the app to work. Here you can see what information we process, how it is used and what rights you have.

This is a translation of the Icelandic privacy policy.

Controller

Sunna Rún Þórarinsdóttir is responsible for the processing of personal data in Nafna.

You can get in touch at nafna@nafna.is.

What information do we collect?

We process the following information to provide the service:

• Name: The name you choose to show to others on the list.
• Sign-in information: Email address and, if you sign in with Google, your Google ID and profile picture.
• Lists and settings: Lists you create or join, their names, the settings you choose and the information needed to pick names.
• Name picks: Names you like or pass on, and how many names you have seen. Your picks are private until you share them with others on the list.
• Invites: The email address of someone you invite to a list is used to send the invite through Firebase. Nafna does not store the address as part of the invite.

Nafna also keeps local settings in your browser, such as theme, appearance and filters. These are not sent to Nafna's servers.

How do we use the information?

The information is used to:

• give you access to the app and your lists,
• keep track of your name picks and show shared results,
• invite others to join lists,
• keep the service secure and prevent misuse.

Nafna does not use ads, analytics tools or tracking cookies. Personal data is not sold or used for advertising.

The legal basis for the processing is primarily that it is necessary to provide the service you ask for.

Who has access to the information?

Nafna uses the following service providers to run the app:

• Google Firebase: Handles sign-in and the database. The database with lists and picks is hosted in Europe. Sign-in information may be processed outside the European Economic Area with appropriate safeguards.
• Cloudflare: Delivers the website and processes IP addresses for technical purposes, including protection against misuse.

The fonts and code libraries the app uses are hosted by Nafna itself, so your device does not fetch them from other providers.

If you choose to support Nafna by tapping “Buy me a coffee”, you go to Ko-fi. Payments go through Ko-fi and/or PayPal, and their privacy policies apply.

How long is the information kept?

The information is kept until you delete your account. There is no automatic deletion period for accounts that aren't used, so the data stays until you delete it or ask us to.

You can delete your account under Settings → Delete account. This deletes:

• your sign-in, name and profile picture,
• all your picks, both private and shared,
• your membership of lists,
• lists where you are the only one left.

Lists that others are still on remain for them, along with the list name, since it is shared by everyone on the list. Settings for “Try the full name”, such as middle names and a parent's first name, are kept separately for each person and are deleted with the account. You are then no longer listed as the creator of the list.

If something fails during deletion, for example because of the connection, you get a message and the account is not deleted until everything has succeeded.

If you leave a list, the picks you shared with it are deleted.

What is deleted disappears from the database immediately. To protect against data loss we take daily backups of the database that are kept for up to 98 days, and the database can be restored to how it was at any point in the last 7 days. Deleted data is therefore gone from all backups within 98 days. The backups are stored by Google in Europe and are only used to restore data if something goes wrong.

If you can't delete information yourself, for example because you no longer have access to the device, you can contact us at nafna@nafna.is.

Your rights

Under data protection law and the GDPR you can, where applicable, request:

• Access to your personal data.
• Correction of inaccurate information.
• Deletion of personal data.
• Restriction of processing, or object to processing in certain circumstances.

Send your request to nafna@nafna.is. We reply without undue delay and generally within one month.

Changes to this policy

If the privacy policy changes, we publish the updated version here and change the date at the top of the page.