Data Safety

Last updated: 5 June 2026

A plain-English summary of the data nudge handles. We collect as little as possible, never sell it, and show no ads. Full detail is in our Privacy Policy.

What we collect, and why

“Shared” means transferred to a third party for their own use — we do not do this. We do use trusted service providers who process data only on our instructions (below).

Service providers (processors)

• Groq — processes your captured text, images and audio to extract tasks. Not used to train their models on your behalf.
• Resend — sends and receives email (reminders, digests, invites, and your email-in address).
• Firebase Cloud Messaging (Google) — delivers push notifications.
• Render & Turso — hosting and database.

Security

• Encrypted in transit (HTTPS).
• Passwords hashed with scrypt — never stored in plain text.
• Sessions use secure, http-only cookies.

Your control & deletion

Raw captures are temporary and purged after a short retention period. You can delete your entire account and all associated data at any time from Profile → Delete account, or request deletion by emailing hello@nudgelive.co.uk.

Google Play “Data safety” — quick answers

For completing the Play Console Data safety form.

• Does the app collect or share user data? Yes (collects).
• Is data encrypted in transit? Yes.
• Can users request data deletion? Yes (in-app + by email).
• Data types collected: Personal info (name, email address); Photos and Voice recordings (only the ones you capture); Files & docs and other user-generated content (forwarded emails, captured text, tasks and lists); Messages (forwarded email content); Device or other IDs (push token).
• Purposes: App functionality and account management only. No analytics-for-advertising, no data sold or shared for third-party use.

Privacy Policy · Terms of Service