Privacy policy
Last updated: 1 October 2026
Who we are
Tovela is a baby-name discovery app operated by Christian Ghosn. This policy describes how information is handled when you use the app and this website.
Information we collect
- Account information: your email address, account identifier, profile/display name and authentication information needed to create and secure your account. Clerk manages sign-in credentials and verification.
- Your choices: names you like, pass on or exclude, your shortlist and rankings, deck filters and preferred Australian state.
- Family details you provide: the proposed family name and sibling names you choose to enter. Please only provide information you are entitled to share.
- Couple information: invitations, your partner connection, mutual favourites and shared settings.
- Technical information: service providers may process IP addresses, device/browser information, request timestamps and security or diagnostic logs to operate and protect the service.
- Support messages: information you choose to send when requesting help.
How we use information
We use information to authenticate you, save and restore your choices, personalise name discovery, connect you with your invited partner, display shared favourites, respond to requests and protect the service from misuse.
The launch version has no advertising or in-app purchases. We do not sell your personal information or use it for targeted advertising.
What your partner can see
Connecting accounts enables shared features, including mutual favourites and shared family and sibling information. Your partner can update shared family settings. Information your partner has already saved or exported may remain in their possession after you unlink or delete your account. Do not enter sensitive information that you do not want to share through these features.
Service providers and storage
We use Clerk for authentication and Supabase for the app database and cloud backup. Information is stored on your device and processed by these providers as needed to run the app. Providers may use infrastructure or support teams outside Australia, including in the United States. The specific hosting locations and website hosting provider will be confirmed before publication of the final policy.
Providers handle information under their applicable service and data-processing terms. More information: Clerk legal resources and Supabase privacy notice. We may also disclose information where legally required or necessary to address fraud, misuse or security incidents.
This website
This website does not add advertising trackers or analytics scripts. Fonts and brand assets are served with the site. The interactive name demo runs in your browser and does not save or send your choices. The website host may process request logs, including IP addresses, for delivery and security. Following an external link takes you to a service with its own privacy practices.
Retention and account deletion
We retain account information while needed to provide the service. You can request deletion in the app: You → your account heading → Delete my account and data → Finish deleting my account.
The deletion flow removes your authentication account, cloud backup, profile, saved choices and partner connection, and clears the account’s saved app state on the device performing the deletion. If interrupted, follow the prompts to finish. Your partner keeps their own account and choices.
A one-way fingerprint of the deleted account identifier is retained to prevent old sessions from recreating deleted records. It does not contain your name, email or preferences. Provider backups and logs may persist until their retention periods expire; information may also need to be retained where required by law. Offline devices and copies held by your partner cannot be remotely erased immediately. Historical billing delivery identifiers, if any, may remain in a separate event-deduplication ledger.
Your choices and requests
You can update supported profile and family details in the app, change preferences and delete your account. You may also request access to or correction of your personal information, or raise a privacy concern with Christian Ghosn. We may need to verify your identity before acting on a request.
Privacy contact: support@tovela.xyz.
We will consider privacy concerns and respond. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner, where your matter falls within its jurisdiction.
Children
Tovela is intended for adults choosing baby names, not for children to create accounts. Sibling names entered by an adult may relate to children; only enter the details you wish to use in the app.
Security and changes
We use authenticated access, database access controls and secure connections to help protect information. No system can guarantee absolute security. We may update this policy as the service changes and will revise the date above. Material changes will be communicated as appropriate.