Skip to content
nudge

Privacy Policy

Effective 29 October 2026

Nudge is built and operated by Vendaka. This policy explains what the app collects, why it needs it, and who else sees it. It is written to be read, not to be skimmed past — if anything here is unclear, write to us and we will explain it properly.

The short version

  • We collect your phone number, your name, and whatever you put into your tasks.
  • We do not run any advertising, analytics or tracking software. There is none in the app.
  • We do not sell your data, and we never will.
  • We read your contacts only to find people you can add to a task — and only when you open the contact picker yourself.
  • You can ask us to delete your account and everything in it at any time.

What we collect, and why

Your phone number. This is your account. We use it to sign you in with a one-time code, and to let people who already have your number find you when they add you to a task.

Your name. You type this in when you sign up. It is shown to the people you share tasks with, so they know who you are.

Your profile photo, if you add one. It is optional. It is shown in place of your initials to the people you share tasks with and the people in your Nudge circle. It is stored on our servers at an unlisted link, which anyone given that link could open. You can change or remove it at any time from your profile.

Your tasks and everything in them. Titles, notes, due dates, priorities, the updates you post, and any photos, videos or voice notes you attach. This is the content of the app. It is stored on your device and on our servers so it reaches the people you share it with and survives you changing phone.

Contacts, when you open the invite screen. To show you which of your contacts are already on Nudge, the app sends the phone numbers from your address book to our server, which compares them against existing accounts and sends back only the matches. Nothing is written down: the numbers are compared and discarded in the same request. They are not stored as your contact list, not used to build a social graph, and not shared with anyone.

Notification tokens. If you allow notifications, your device gives us an anonymous token so we can send you a nudge. It identifies the app on your phone, not you.

Crash and diagnostic reports. When the app breaks, it sends us a report so we can fix it. Phone numbers and email addresses are stripped out of these reports before they are sent, automatically, in the app itself. The reports contain the error, the screen you were on, your app version and your device model.

Your contacts, specifically

This is the part of the app people worry about most, so here it is plainly.

  • Nudge asks for contacts permission only when you open the contact picker to invite someone or add them to a task, never before. If you refuse, we never read your contacts.
  • The match check above is the only thing your contacts are used for. We keep none of them, and we do not build a network from your address book, suggest friends, or match you to strangers.
  • When you invite someone who is not on Nudge, we send their number to our SMS provider so they receive your invite link. Apart from the match check above, that is the only reason a number leaves your phone.
  • You can refuse contacts permission and still use Nudge. You just have to type a number in by hand to invite someone.
  • You can withdraw contacts permission at any time in your phone's settings.

Who else sees your data

We use a small number of companies to run the service. They process data on our instructions and are not allowed to use it for their own purposes.

  • Supabase — stores the database, your files, and handles sign-in.
  • PowerSync — keeps the copy of your data on your phone in step with our servers, so the app works offline.
  • Twilio — sends the SMS with your sign-in code and your invite links.
  • Sentry — receives crash reports, with phone numbers and email addresses already removed.
  • Expo (EAS) — delivers app updates and passes push notifications to Apple and Google.

Other than these, the only people who see your data are the people you share a task with. We do not sell, rent or trade your information, and we do not share it for advertising.

We may disclose data if the law requires it — a valid court order, for example. If that happens we will tell you, unless we are legally forbidden from doing so.

Where your data is held

Our providers operate servers outside India, so your data may be stored and processed in other countries. Those providers are contractually bound to protect it to the standard described in this policy, wherever it sits.

How long we keep it

  • Your account and tasks: for as long as your account exists.
  • Invites you send: until they are accepted or they expire, which is 14 days.
  • Crash reports: up to 90 days, then deleted automatically.
  • After you ask us to delete your account: removed from our live systems within 30 days, and from backups within 90 days.

One thing to be aware of: a task you shared with other people does not disappear for them when you leave. Your contributions stay visible to the people you shared them with, under your name, unless you delete them first.

Deleting your account

Email [email protected] from the phone number on your account, or tell us the number, and we will delete your account and everything in it. We will confirm when it is done. There is no charge and we will not ask you to justify it.

Your rights

Whatever country you are in, you can ask us to:

  • Give you a copy of the data we hold about you.
  • Correct anything that is wrong.
  • Delete your account and its contents.
  • Stop using your data for something you previously agreed to.
  • Complain to us, or to your local data protection authority if you are not satisfied.

Write to [email protected]. We will answer within 30 days. We do not charge for any of this.

Keeping it safe

Data is encrypted in transit. Access to our production systems is limited to the people who need it. Our database enforces, row by row, that you can only read data belonging to you or to a task you are part of.

No system is perfectly secure, and we will not pretend otherwise. If your data is ever exposed in a way that puts you at risk, we will tell you and the relevant authority without undue delay.

Children

Nudge is not for anyone under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, write to [email protected] and we will remove it.

Changes to this policy

If we change anything that matters — new data, a new company processing it, a new purpose — we will tell you in the app before it takes effect, and update the date at the top. Carrying on using Nudge after that means you accept the new version.

Contact

Vendaka, India. Privacy questions, data requests and complaints: [email protected]. A real person reads that inbox.