Legal

Privacy Policy

Last updated: October 28, 2026

Nudge is an AI accountability coach operated by Wilcodes LLC ("we", "us", "our"). You use it through the Nudge app for iPhone, or through our Telegram bot. This policy explains what data we collect, where it is stored, who can see it, and how to delete it.

Nudge never asks for your passwords, never connects to your email, bank or calendar, and never does anything on your behalf. It is just a conversation.

1. What We Collect

Your Account

In the app:you sign in with Apple. We receive an anonymous Apple account identifier and, if you choose to share it, your name. We do not receive or store your email address. Your phone's timezone is sent so check-ins arrive at the right local time. We do not collect your location.

On Telegram: your Telegram user ID and display name. During onboarding the coach may ask your city to set your timezone and local weather.

Your Profile and Goals

As you talk, the coach keeps a profile: your goals, your schedule, your check-in times, your coaching style, and the commitments you make. In the app we also store your seasons (30-day programs), goals, moods you log, and reactions you add to messages. You choose what to share; nothing is required beyond what it takes to coach you.

Sensitive Information

Conversations about personal goals can touch on physical health, mental health, money or relationships. Under some data protection laws (including GDPR Article 9) this may be "special category" data.

By sharing this information with Nudge, you explicitly consent to its processing to provide your coaching and check-ins. You are never required to share it, and you can ask the coach to remove anything from your profile at any time.

Conversations

In the app: your chat history is stored in our encrypted database so it is there when you reopen the app or switch phones. It is kept until you delete your account.

On Telegram: messages are deleted from our database once the coach has replied. Telegram itself keeps your chat history on its servers (see section 3).

In both, the coach keeps short-term conversational context in a session stored on our server. Sessions are reset regularly; your profile is what the coach relies on for long-term memory.

Voice Notes (App)

If you hold the microphone button to talk, the recording is sent to our speech-to-text provider (ElevenLabs) to turn it into text. We do not store the audio; only the text is sent to the coach as a normal message. "Read aloud" uses your phone's built-in voice and sends nothing to us.

Notifications (App)

If you allow notifications, we store your device's push token so check-ins can reach you. Notification text (for example a check-in message) is delivered through Expo's push service and Apple Push Notification service.

Launch Waitlist (Website)

If you join the waitlist on our homepage, we store your email address and the date you signed up. We use it for one thing: emailing you when the app is available. We don't add you to a newsletter or share your email. Email us to be removed at any time.

Usage Metrics

We count messages, check-ins and AI token usage per user per day to enforce fair-use limits and monitor costs, and we store your subscription status (plan, trial dates).

Payments

In the app: subscriptions are bought through Apple. We never see your card details. Apple shares your subscription status with RevenueCat, which tells our server whether your subscription is active, linked to your Nudge account ID (not your name). See RevenueCat's privacy policy.

On Telegram: payments are processed by Stripe. We receive your subscription status and a customer identifier, never your card number. See Stripe's privacy policy.

What We Do NOT Collect

  • Advertising IDs, or any tracking across other apps and websites
  • Your location (the app only sends your timezone)
  • Your contacts, photos, or files
  • Your email, calendar, bank or any other account
  • Analytics or crash-reporting data from third-party SDKs

2. How Your Data Is Stored

Encryption at Rest

Our database is encrypted with SQLCipher (AES-256). Without the encryption key the database file is unreadable, which protects your data against unauthorized disk access or backup theft. In the app, your sign-in token is kept in the iPhone's secure keychain.

Isolated Containers

Each user's profile lives in its own folder, and the AI runs in a separate, short-lived container per user that only has access to that user's folder. Containers start to handle a message and are shut down afterwards.

Credential Security

API keys are held by a credential proxy at the network level and are never placed inside the AI containers.

Server Location

Nudge runs on servers hosted by Hetzner in Ashburn, Virginia (US). If this changes, we will update this policy.

3. Who Can Access Your Data

Your Coach

The AI coach reads your profile, goals and recent conversation to give you personalized check-ins. It is the only automated system that reads your data.

Nudge Operators (Us)

An administrator with server access can technically read stored data. We do not routinely look at user conversations or profiles. We would only do so to fix a problem you report or to investigate abuse, and we will tell you if we have.

Service Providers

We use these providers only to run Nudge:

  • Anthropic (AI):your messages and profile are sent to Anthropic's Claude API to generate replies. Under Anthropic's commercial API terms your data is not used to train AI models, and API data may be retained for up to 30 days for safety monitoring, then deleted. See Anthropic's privacy policy.
  • ElevenLabs (voice notes, app): converts voice recordings to text. See ElevenLabs' privacy policy.
  • Apple, Expo and RevenueCat (app): sign-in, push notifications and subscriptions, as described above.
  • Telegram (Telegram users): bot chats are not end-to-end encrypted. Telegram stores those messages on its servers under its own policy.
  • Stripe (Telegram users): payments.
  • Hetzner: hosts our servers.

Law Enforcement

If compelled by a valid court order or subpoena, we may have to provide the data we hold. We will notify you before disclosing it unless the law prohibits us from doing so.

No One Else

We do not sell or share your data with advertisers, data brokers or analytics companies, and we do not use it for advertising.

4. Data Retention

While You're a User

Your profile, goals, seasons, usage metrics and (in the app) chat history are kept for as long as your account exists.

After Cancelling

If your subscription or trial ends, chat and check-ins stop but your data is kept, so you can pick up where you left off if you subscribe again. Delete your account if you want it gone.

Deleting Your Account

In the app: Settings → Delete my account. On Telegram: send /deleteaccount. You can also email us. We then delete your profile folder, chat history, goals, seasons, moods, check-ins, push tokens and user record, usually within minutes.

Deleting your account does not cancel an App Store subscription. Cancel it in your iPhone's Settings → your name → Subscriptions. Deleting a Telegram account cancels its Stripe subscription.

Some copies sit outside our control:

  • Server logs may contain metadata such as timestamps and error messages
  • Anthropic may keep API data for up to 30 days under its safety policy
  • Telegram keeps bot chat history under its own retention policy
  • Apple and RevenueCat keep purchase records as required for billing and tax

5. Your Rights

You have the right to:

  • Access: ask for a copy of the data we hold about you by emailing hello@hellonudge.me.
  • Correction: ask the coach to fix your profile at any time, or edit goals and check-in times in the app.
  • Deletion: delete your account in the app or with /deleteaccount on Telegram.
  • Withdrawal of consent: stop using Nudge at any time.
  • Restriction: ask us to limit how we process your data.

We will respond to all data rights requests within 30 days.

6. For Users in the European Union (GDPR)

If you are located in the EU/EEA, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal basis: contractual necessity (to provide the service you signed up for), your explicit consent for sensitive information, and legitimate interest (security and abuse prevention).
  • Data transfers: your data is processed in the United States. We rely on standard contractual clauses or adequacy decisions for these transfers.
  • Supervisory authority: you have the right to lodge a complaint with your local data protection authority.

7. For Users in California (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:

  • Right to know: what personal information we collect and how it's used (see sections above).
  • Right to delete: request deletion of your personal information.
  • Right to opt out: we do not sell or share personal information, so there is nothing to opt out of.
  • Non-discrimination: we will not treat you differently for exercising your CCPA rights.

8. Data Breach Notification

If a data breach affects your personal information, we will:

  • Notify affected users in the app, on Telegram and/or by email within 72 hours of becoming aware of it
  • Describe what happened, what data was affected, and what we are doing about it
  • Notify supervisory authorities where the law requires it

9. Cookies

The app uses no cookies. The Nudge website uses only essential cookies. We do not use tracking, analytics or advertising cookies.

The website counts page visits on our own server: the page, the referring site, and a one-way hash of your IP address so repeat visits aren't double-counted. No cookies, and nothing is shared with third parties.

10. Children

Nudge is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child under 16 is using Nudge, contact us and we will delete the account.

11. Changes to This Policy

If we make material changes, we will tell you in the app or on Telegram and update the "Last updated" date at the top. Continued use after that means you accept the updated policy.

12. Contact

For privacy questions, data requests, or to report a concern:

Data controller: Wilcodes LLC, Florida, United States.

We aim to respond to all inquiries within 7 business days.