Nudgely Nudgely

Privacy Policy

Nudgely — ADHD Habit & Task Manager
Last updated: August 10, 2026

Introduction

SignCoders operates the Nudgely mobile application. This Privacy Policy explains how we collect, use, and protect your personal data when you use Nudgely.

We are committed to protecting your privacy and handling your data in an open and transparent manner.

Data Controller

What Data We Collect

Account Data

  • Full name (last name and first name) — required, used for personalization and account identification
  • Email address — used for authentication and account recovery

App Usage Data

  • Habits — habit names, descriptions, completion records, streak data
  • Routine steps — optional step-by-step instructions attached to a habit, with per-step duration
  • Tasks — task titles, descriptions, priorities, categories, due dates, subtasks, notes, energy level, time estimates, completion status
  • Medications — medication names, dosages, time of day, custom reminder time, intake logs
  • Mood entries — mood level, energy level, ADHD context tags (e.g. "seeking focus", "needs grounding"), optional notes
  • Focus sessions — session duration, type (Pomodoro, deep work, break, etc.), optional linked task
  • Flex Days — dates when streak protection was used (manual or auto-consumed) and your Flex Day balance
  • Welcome-back bonuses — timestamps of returns after ≥ 3 days of inactivity
  • App activity — the timestamp of your last app open, used only for the Welcome-back trigger
  • Companion state — level milestones you have seen, stored locally on your device

Partnership Data

  • If you invite or accept an accountability partner: your partner's email, the invitation status, and (once accepted) aggregate daily habit-completion count and current streak — shared bidirectionally with the accepted partner only
  • We never share tasks, mood entries, medication data, individual habit lists, or focus-session details with your partner
  • Either party can end the partnership at any time from within the app; all further sharing stops immediately

Device Data

  • Device type and operating system
  • App version
  • Notification preferences — stored locally on your device
  • Device language — read once on first launch to auto-select English / Hungarian / German

Native Calendar Access (Optional)

Nudgely may request read-only access to your device's calendar events to display them on the Today timeline. If you deny or later revoke this permission, the timeline still works — it just won't show calendar entries. No calendar data is sent to our servers.

Data We Do NOT Collect

  • We do not collect location data
  • We do not collect contacts or phone data
  • We do not use advertising trackers
  • We do not sell your personal data to third parties
  • We do not track you across other apps or websites

How We Use Your Data

  1. Provide the App's functionality — storing and syncing your habits, tasks, medications, mood entries, and focus sessions
  2. Authenticate your account — email + password, Apple Sign In, or Google Sign-In
  3. Send notifications — medication reminders, streak warnings, and task due date alerts (only if you enable them). Some of these are sent as time-sensitive notifications on iOS, which may bypass Do Not Disturb / Focus modes when you have granted that permission. You can change this anytime in your device's Settings → Notifications → Nudgely.
  4. Match you with an accountability partner — only when you explicitly invite or accept an invitation. Only aggregate daily activity (habit count, streak) is shared, and only with the accepted partner.
  5. AI task decomposition (Pro) — when you tap "Break this task into steps with AI", the task title is sent to Groq's LLM API. The generated subtasks are returned and stored in your account. Groq processes the request statelessly and does not retain your data for training. Opt-in per task.
  6. Anonymous focus presence — while a focus session is running, the app joins a shared Realtime channel with a random per-session identifier. Only an aggregate count of concurrent participants is visible; no personal identifier ever leaves your device on this channel.
  7. Email delivery — we use Resend to send feedback confirmation emails (to us) and partner invitations (to the invitee).
  8. Improve the App — aggregated, anonymized usage statistics

Data Storage and Security

  • Your data is stored securely using Supabase (PostgreSQL database with Row Level Security)
  • All data transmission is encrypted using TLS/HTTPS
  • Each user can only access their own data (enforced at the database level)
  • Biometric data (Face ID / fingerprint) is processed locally on your device and never sent to our servers
  • Notification preferences and biometric settings are stored locally on your device using encrypted storage

Data Retention

  • Your data is retained as long as your account is active
  • You can delete your account and all associated data at any time from Profile → Danger Zone → Delete Account, or by contacting us at hello@signcoders.hu
  • Upon account deletion, all your personal data is immediately and permanently removed
  • Any active partnership is ended automatically when you delete your account

Third-Party Services

  • Supabase — Authentication & database
  • Expo — App updates & notifications
  • Apple (APNs) — Push notifications (iOS)
  • Google (FCM) — Push notifications (Android)
  • Apple Sign In — Alternative sign-in method
  • Google Sign-In — Alternative sign-in method
  • RevenueCat — Pro subscription management
  • Resend — Email delivery (feedback + partner invitations)
  • Groq — AI task decomposition (Pro feature only, on demand)

We do not share your personal data with any other third parties.

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data in a portable format
  • Restrict processing of your data
  • Object to processing of your data
  • Withdraw consent at any time

To exercise any of these rights, contact us at hello@signcoders.hu.

Children's Privacy

Nudgely is suitable for users of all ages (4+). We do not knowingly collect data from children under 13 without parental consent.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the App or via email.

Contact Us