Privacy Policy

This Privacy Policy explains how NudgeMe ("we", "us", "our") collects, uses, and protects information when you use the NudgeMe mobile app. We're an indie product based in Israel. We don't sell your data, we don't share it for advertising, and we collect the minimum we need to make the app work.

Information we collect

When you create an account and use NudgeMe, we collect:

• Account info — your email address and, if you sign in with Google or Apple, your name and avatar URL.
• Goals and tasks — the journeys, phases, and tasks you create, plus the messages you exchange with Pip, our AI companion.
• Push notification token — an opaque identifier issued by Apple or Google so we can send you nudges. We can't reverse this into a phone number or device identity.
• Usage events — anonymized records of how you use the app (e.g. "task completed", "plan submitted") linked to your account so we can fix bugs and improve the product. The text content of messages you type into the app is never sent to our analytics provider.
• Diagnostic data — IP address and basic device info (model, OS version) collected automatically by our hosting providers when you connect to the Service.

We do not collect your location, contacts, photos, health data, microphone, or camera. NudgeMe doesn't request those permissions.

How we use it

• To run the app — store your goals, mark tasks complete, calculate streaks, deliver push reminders.
• To generate plans with Pip — messages you send to Pip are forwarded to Anthropic's Claude API to produce the response. Anthropic does not use API inputs to train their models, per their API terms.
• To improve NudgeMe — usage events are reviewed in aggregate to find bugs and prioritize features.

We don't sell your data, share it for advertising, or use it for any purpose beyond running NudgeMe.

Who processes your data

NudgeMe relies on these sub-processors:

• Supabase — authentication, database, and edge functions (push notification delivery runs through here too). supabase.com/privacy
• Anthropic — Claude AI powers Pip's responses. anthropic.com/legal/privacy
• PostHog (EU-hosted) — product analytics. Events are tied to your account ID and email, but the content of messages you type into the app is not sent to PostHog. posthog.com/privacy
• Expo — push notification routing. expo.dev/privacy-explained
• Apple / Google — sign-in providers (only if you choose those options).

International data transfers

NudgeMe is operated from Israel, and our sub-processors run servers in the EU and United States. By using NudgeMe, you consent to your information being processed in jurisdictions whose data-protection laws may differ from your own. We take reasonable steps to ensure your data is treated securely and in line with this Privacy Policy regardless of where it's stored.

Your rights

• View, edit, or delete your goals and account info at any time inside the app.
• Delete your account and all associated data by emailing noambuilds@gmail.com. We'll process the request within 30 days.
• Request a copy of your data by emailing the same address.

If you're in the EU or UK, you also have rights under GDPR (access, rectification, erasure, portability, objection). Email us to exercise them.

Retention

We retain your account data and content for as long as your account is active. Once you delete your account, we permanently remove it (and all associated journeys, tasks, and messages) within 30 days. Aggregated, non-identifying usage events may be retained longer for product analytics.

Security

We use industry-standard encryption in transit (HTTPS/TLS) and rely on Supabase's row-level security to ensure that one user can't read another user's data. No method of transmission or storage is 100% secure, and we can't guarantee absolute security — but we take reasonable steps to protect your data and we'll notify you if we ever become aware of a breach affecting your account.

Legal disclosures

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency), or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or safety of NudgeMe's users or the public, or investigate fraud or wrongdoing related to the Service.

Children

NudgeMe is not directed at children under 13. We don't knowingly collect data from children under 13. If you believe a child has signed up, contact us and we'll delete the account. If your country requires parental consent for processing personal data of older minors, please contact us before signing up so we can meet that requirement.

Links to other sites

NudgeMe may link out to third-party sites (e.g. our sub-processors' privacy policies). We don't control those sites and aren't responsible for their content or privacy practices — review their policies separately.

Changes to this policy

We'll update this page when anything material changes and bump the "Last updated" date above. Significant changes will also be communicated in-app or by email.

Contact

Questions? Email noambuilds@gmail.com or visit our contact page.