Bday Bot is a WhatsApp-based birthday reminder service. We take your privacy seriously. This policy explains what data we collect, why we collect it, how we use it, and your rights. Please read it before using the service.
1. Who we are
Bday Bot is operated as a personal project based in the United Kingdom. For any privacy-related queries, you can contact us via WhatsApp at wa.me/447563434204 or by messaging us through the bot directly.
2. What data we collect
From users (people who sign up to use Bday Bot)
- Your WhatsApp phone number
- Your first name
- Your own birthday (day, month and year)
- The names, phone numbers and birthdays of contacts you choose to add
- Your conversation state with the bot
From contacts (people whose birthdays are added by a user)
- Your WhatsApp phone number
- Your name (as saved in the user's contacts)
- Your birthday (day, month and year), provided voluntarily by you
We do not collect payment information, location data, or any data beyond what is listed above. We do not access your WhatsApp contacts list directly — contacts are only added when a user explicitly forwards a contact card to the bot.
3. Why we collect your data
- To provide the service — sending birthday reminders, reaching out to contacts, and managing your account
- To improve and develop the service — understanding how the service is used helps us make it better
- To communicate with you about the service — including updates, new features, and changes
- To offer enhanced or premium features — in future, we may offer additional paid features. Your data may be used to personalise or deliver these offerings
- To comply with legal obligations — where required by law
Our lawful basis for processing your data is a combination of:
- Consent — you chose to start a conversation with Bday Bot and provide your information
- Legitimate interests — operating, improving, and sustainably developing the service
- Contract performance — processing data necessary to deliver the service you have requested
4. How we store your data
Your data is stored securely in Supabase, a cloud database provider with servers located in the European Union. Access is restricted and protected by secure credentials.
We retain your data for as long as you are an active user of the service, or until you request deletion. We do not sell your data to third parties.
5. Who we share your data with
- Whapi.Cloud — our WhatsApp messaging provider
- Supabase — our database provider
- Railway — our hosting provider
We do not share your data with any other third parties without your explicit consent, unless required to do so by law.
6. A note for contacts
If you received a message from Bday Bot, someone who knows you has asked us to remind them of your birthday. You are under no obligation to reply.
If you do reply, your birthday will be stored solely to send a reminder to the person who added you. You will not receive further messages unless you choose to sign up yourself.
To have your data removed, reply DELETE to any message from Bday Bot and all your data will be permanently deleted immediately.
7. Your rights
Under UK GDPR, you have the following rights:
- Right to access — ask us what data we hold about you
- Right to erasure — ask us to delete all your data at any time
- Right to rectification — ask us to correct inaccurate data
- Right to restriction — ask us to stop processing your data in certain circumstances
- Right to object — object to processing based on legitimate interests
- Right to portability — ask for your data in a portable format
The simplest way to exercise your rights:
Reply STOP or DELETE to any message from Bday Bot. This will immediately delete all data we hold about you.
For any other requests, message us at wa.me/447563434204.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page. If changes are significant, we will notify active users via WhatsApp.
Continued use of Bday Bot after any changes constitutes acceptance of the updated policy.
9. Contact us