NameSake App Privacy Policy

Last updated: September 11, 2026

This policy explains how the NameSake mobile app, published by Wall Noodles LLC ("Wall Noodles," "we," "us," or "our"), handles your information. NameSake is a personal CRM for remembering the people you meet.

This policy covers the app only. Our website and business services are covered by our separate Privacy Policy.

The short version

What stays on your device

By default, everything. NameSake keeps its data in a database on your phone, and that database is the authoritative copy — not a cache of something we hold. This includes:

• The people you add — names, photos, where and when you met, job details, and your notes about them.
• Groups, families, and the relationships you record between people.
• Your own card, which you can show as a QR code.
• Quiz results, recall statistics, and your streak.
• Your settings, including which fields and categories you use.

None of this is transmitted to us. If you delete the app, this data is deleted with it.

Permissions the app asks for

• Contacts — only if you choose to add people from your address book. You pick individual people; NameSake never imports your whole address book, and it does not import contact photos. The identifier it uses to avoid adding someone twice stays on your device. Your contacts are not uploaded.
• Camera — to scan someone's NameSake card, or to take a photo of a person you have just met. Photos are saved on your device.
• Photo library — to attach an existing photo to a person. Photos are saved on your device.
• Face ID / biometrics — only if you turn on the optional app lock. This is handled entirely by iOS or Android. We never receive, see, or store biometric data; the app is only told whether the device accepted you.
• Notifications — only if you turn on reminders. Reminders are scheduled locally on your device and their content is not sent to us.

You can decline any of these and keep using the app; you will lose the specific feature, not access.

If you create an account

An account is optional and exists to enable features that genuinely require a server. If you create one, we store:

• Your email address and the display name you choose.
• A cryptographic hash of your password — we never store your actual password.
• The date your account was created.

That is the whole account record. Creating an account does not upload the people, photos, or notes stored on your device. Your sign-in token is kept in your device's secure storage (the iOS Keychain or Android Keystore) and expires after 30 days.

Account data is stored on servers we operate, using MongoDB Atlas for the database and Render for application hosting. Both are third-party infrastructure providers that process this data on our behalf.

Password resets and abuse prevention

If you ask to reset your password, we email you a single-use code that expires after 15 minutes and allows a limited number of attempts. The code itself is never stored in our database or written to our logs. Reset emails are delivered through a third-party email service.

To prevent abuse of sign-in, registration, and password-reset, our server keeps a short-lived counter associated with the requesting IP address or email address. These records expire automatically — within 15 minutes for sign-in attempts and within an hour for registration and reset requests — and are used for nothing else.

AI capture

NameSake includes a feature that turns a written note about someone you just met into a draft profile. It requires an account, and it works like this:

• The text you submit is sent to our server, and from there to Anthropic's API, which extracts the structured details.
• The draft is returned to your device for you to review. Our server does not save the text you submitted or the draft it produced. Nothing is written to a profile until you accept it.
• Requests are rate-limited per account to prevent abuse.

Anthropic processes this text on our behalf as a service provider. Only the text you choose to submit to this feature is sent — not your existing people, notes, or photos. If you do not use this feature, none of your content leaves your device.

Sharing people and cards

You can share a person or a family with someone else, and you can share your own card as a QR code or a link. These transfers do not pass through our servers: the shared information is carried inside the link itself, in the portion of a web address that is never transmitted to a web server. A shared person is a snapshot — a copy the recipient owns and can edit — not a live connection back to your data.

Once you share something with another person, what they do with it is outside our control, the same as any message you send.

What we do not do

• We do not include advertising, ad networks, or ad identifiers in the app.
• We do not include analytics, usage tracking, or crash-reporting tools in the app.
• We do not sell, rent, or trade your personal information.
• We do not use facial recognition.
• We do not sign you in through Google, Facebook, Apple, or any other third-party account.
• We do not upload your photos to cloud storage.

How long we keep things

Data on your device stays until you delete it — an individual person, or the app itself. If you have an account, we keep the account record until you delete it, which you can do yourself in the app at any time. The short-lived security records described above expire on their own.

Deleting your data

• Your app data — delete individual people inside the app, or uninstall NameSake to remove all of it from your device.
• Your account — delete it yourself in the app, under Settings → Account → Delete account. If you can't sign in, email us at morgan@wallnoodles.com from the address on the account and we will delete the account record for you. Because your people and notes live on your device rather than on our servers, deleting your account does not delete them; uninstalling the app does.

Full instructions, including what is and isn't removed and how long it takes, are on our account deletion page.

Children's privacy

NameSake is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account with us, contact us and we will remove it.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information we hold about you. Because the information we hold is limited to the account record described above, most of these requests are straightforward — contact us at the address below. We do not discriminate against anyone for exercising these rights.

Changes to this policy

We may update this policy as the app changes. Updates will be posted on this page with a revised "last updated" date. If a change materially affects how your information is handled, we will make that clear in the app.

Contact us

Questions about this policy, or about your information? Contact Wall Noodles LLC at morgan@wallnoodles.com.