Privacy policy

Effective: coming soon, when Nudge opens to testers. Nudge is run from the United States. Questions: support@trynudge.so.

Nudge is an iPhone app that helps you keep in touch with friends. This page says what it stores, what it sends to whom, and how to delete it. We wrote it to match what the app actually does today. When that changes, so will this page.

The short version

• We store what you put into Nudge: your account, the friends you add, your ideas, promises and notes, and the facts you confirm.
• Some text goes to Anthropic's Claude to power the AI features. That's text you type into Nudge and what you've saved about a friend, never messages from your chats.
• No ads, no selling your data, and no analytics or tracking scripts.
• You can ask us to delete your account and everything in it.

Your account

You sign in with Apple or Google. From them we keep:

• which one you used;
• the account ID it gives us;
• the email address it shares, and whether it's verified. With Apple this may be a private relay address.

We don't get your Apple or Google password. To keep you signed in, we store a sign-in token in a form that can't be turned back into the token. It lasts up to 60 days, and a new one replaces it each time it's refreshed.

Friends you add

For each friend we store:

• their name, and a phone number or email address so you don't add the same person twice;
• how often you'd like to be in touch;
• the look you design for their character.

If you pick a friend from your Contacts, the app asks iOS for access. It sends us only that one contact's name and the phone number or email you choose. It doesn't upload your address book.

What you write and confirm

• Ideas, promises and notes: what you write, and the dates you choose.
• Facts and dates about a friend that you confirm, like a birthday or a new job, and a short summary of that friend written from those facts.
• Notes in Capture: the note itself is stored along with the facts you keep from it.
• "Tell Nudge about them" and the weekly recap's "Anything missing?": what you say or type isn't stored. Only the items you confirm are.
• Ask: your conversation isn't stored on our server.

Activity in the app

We store what happens to your ideas and promises (made, kept, missed, moved or called off), your points, a history of those changes, your settings, and how far you've got with each weekly recap. The app uses these to show each friend's ring and face, your calendar and your recap.

Reminders are scheduled on your iPhone. Our server only works out when they should fire.

AI, and what goes to Anthropic

Some features use Claude, an AI model from Anthropic. When you use one, the text below is sent to Anthropic to get an answer, and the answer comes back to us:

• Capture, and "Tell Nudge about them": what you type or say, and the friend's name.
• "Anything missing?" in the weekly recap: what you type or say, and your friends' names, so it can tell who you mean.
• Ask: your question, and what Nudge holds about the friend you're asking about. That's their name, summary, dates and facts, and their reminder schedule. If you ask without picking a friend, that's sent for all your friends.
• Suggestions and estimates: to suggest how often to stay in touch, the facts and dates you've saved about a friend. To estimate how much effort a promise takes, the words of that promise.

Messages from your chats are never sent to Anthropic. When you speak instead of typing, iOS turns your voice into text first; see "Voice" below.

We use Anthropic's commercial API. Under Anthropic's commercial terms, Anthropic may not train its models on what we send, and it keeps that data only as those terms and its privacy policy allow. We don't store the text of these requests. To keep usage within limits, we record only how many AI requests you made each day and how large they were.

Voice

When you tap the microphone, Apple's speech recognition turns what you say into text. It runs on your iPhone when your device supports that. Otherwise, Apple may process the audio under Apple's privacy policy. We never receive the audio, only the text, and only when you send it.

Your messages (Mac sync, not yet available)

We're building an optional Mac app that reads your iMessage chats with the friends you pick, so Nudge can suggest ideas from plans you make there. It's designed so your messages stay on your own devices:

• The Mac app reads your chats with the friends you pick, read-only, and only messages from after you turn it on.
• It finds possible plans, facts and the last time you talked, using Apple's on-device model. Message text is never sent to us or to Anthropic.
• Those suggestions go to your iPhone, and only what you confirm there is saved to your Nudge account.

To get from your Mac to your iPhone, the suggestions are sealed on the Mac so that only your iPhone can open them. They pass through our server, which can't read them, and wait there until your iPhone collects them. Waiting suggestions are deleted after 14 days, or straight away if you unpair.

You pair the two by scanning a code from your Mac with your iPhone. The code's secret goes from screen to camera and never reaches our server. Our server can see that a Mac and an iPhone on your account are paired, when they send something and how big it is. It can't see your messages, the suggestions, your friends' names or which chats you picked.

It needs macOS's Full Disk Access, which you grant yourself and can take back anytime in System Settings. This section will be updated before the Mac app is released.

Chat exports (not yet available)

Bringing in a WhatsApp or Instagram chat export isn't available yet. Our server doesn't accept chat exports and never reads chat messages. When this comes, the export will be read on your iPhone, and only the facts you confirm there will be saved to your account.

Who else sees your data

We don't sell your data or share it for advertising. We use these services to run Nudge:

• Railway hosts our server and database, in the United States.
• Anthropic provides Claude, as described above.
• Apple and Google handle sign-in, and Apple delivers the app.

We may share information if the law requires it, for example to answer a valid legal request.

Security

Your data is stored with Railway in the United States, and the app talks to our server over HTTPS. Railway's security documentation says the data it stores, backups included, is encrypted at rest. Railway manages those keys, so this protects against someone getting hold of the disks, not against someone with access to our server. Each account can only reach its own data. No system is perfectly secure. If something goes wrong that affects you, we'll tell you.

Keeping and deleting

• Deleting a friend in the app hides them and their history. If you add the same phone number or email again later, they come back with their history. To have a friend erased completely, write to us.
• Deleting your account: in the app, go to Me, then Delete account. It deletes your account and everything in it straight away and for good: your friends, notes, facts, ideas, promises, points, history and settings, your sign-in records, and our record of your AI usage. You're signed out on every device. If you can't open the app, write to support@trynudge.so and we'll do it for you.
• Apple and Google: we don't keep any token that lets us act on your Apple or Google account, so there's nothing to revoke there. You can also remove Nudge from the apps that use Sign in with Apple or your Google account, in their settings.
• We keep your data while your account exists. After you delete something, it may stay in our host's backups for a limited time before they're overwritten.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Write to support@trynudge.so. Nudge is available in the United States first. Depending on where you live, you may have more rights under your state's privacy laws, such as California's, and we'll honor them.

Children

Nudge isn't meant for children under 13, or under 16 where local law requires that, and we don't knowingly collect their data. If you think a child has given us data, write to us and we'll delete it.

This website

trynudge.so is a plain page: no cookies, no analytics and no tracking scripts. Our host may keep standard request logs, such as IP addresses, for security.

Changes

If we change how Nudge uses your data, we'll update this page and its date. For anything significant, we'll also tell you in the app.