Privacy Policy

Account and email

You sign in with an email and a password. When the app is connected to our database, Supabase Auth handles that sign-in. We store your email, name, nickname, and time zone on your profile, plus whether you finished setup and whether you allowed the camera, microphone, and notifications.

We do not put your password in the Nudgeguy profile tables. Supabase keeps the sign-in credential. A password reset email is sent through Supabase.

If the app is running without Supabase, the account stays in this browser instead, including a hashed password.

Photos you snap

A snap is a photo of food, a fridge, a counter, or a similar moment. We use it to choose a reply: a nudge, a short question, a fact, or a retake.

When the live model is on, we send that photo and the foods you asked us to avoid to OpenAI so it can write the reply. We set the request so OpenAI does not save the response for us to look up later. We do not use your photos to train our own models. OpenAI still processes the request as our vendor, under its own terms.

If the snap becomes a nudge, we save the photo in a private Supabase folder that only your account can read, and we keep a link to it on the nudge. A curiosity or scene reply is not saved as a Nudgeboard row. The photo draft sits in this browser until that step finishes.

When the live model is off, the reply is a local stand-in on this device. The photo is still saved with the nudge if one is created.

Nudgeboard history

A saved nudge stores the nudge line, the short why, where it came from (snap, chat, or voice), and the time. If you take the nudge or mark it unknown, we store that outcome.

Nudge Pattern is counted from those saved nudges. That count stays with your account. We do not send it to a separate analytics product.

Chat

The chat thread stays in this browser’s session while the tab is open. We do not save the full thread on our servers.

When the live model is on, we send your latest message, a few recent turns, and your food avoids to OpenAI to write the reply, with the same setting not to save that response for later lookup. A chat that becomes a nudge is saved on your Nudgeboard as the nudge text. The chat sentence itself is not stored on that row.

When the live model is off, the reply is a local stand-in and is not sent to OpenAI.

Voice

Voice asks for the microphone. As shipped, we do not send that audio to a speech service, and we do not save a recording. A voice nudge that lands on your Nudgeboard stores the nudge text, the same way a chat nudge does.

Food preferences

We store the allergy chips you pick, foods you dislike, and foods you like. Allergy chips and dislikes go with a snap, a chat, or a voice nudge so those foods are not offered. Foods you like are only a preference among swaps that already lower glycemic load. They are app preferences, not a medical record.

Notifications

We store the toggles you set for check-in reminders, pattern updates, billing, and tips. We do not register a push service, and we do not store a device push token.

Payments

When checkout is turned on, Nudgeguy Monthly is 7 days free, and no card is needed to start. On day 8 it is $12.99 a month unless you cancel. Stripe hosts the payment page and the billing portal. We do not see or store your full card number.

If you subscribe, we store a Stripe customer id, a subscription id, the plan status (such as trialing, active, paused, or canceled), when the current period or trial ends, and whether the plan is set to stop at the end of the period.

On day 7 of a trial we may ask how Nudgeguy is going. If you answer, we store that one answer: the choice, and a short reason when you give one. Skipping it stores nothing.

If checkout is not available, the billing screen does not create a charge. Pause stops new charges and keeps your account and data. Resume turns billing back on.

Referrals

If you open Refer a Friend, we store a code on your account. If someone redeems a code, we store that they used it. A code by itself does not pay a reward unless that program is turned on.

If you open Nudgeguy from a partner link, we keep the first valid code in this browser for 30 days. When you create an account, we copy that code onto your profile so a later visit still has it. A code that is not active is ignored. We do not show an error for that.

Partner applications

If you apply to the driver or creator program, we store your legal name, email, phone, state, your answers, and the agreement version you signed, plus the time, IP address, and browser you used. Driver applications can include your city, platforms, ride volume, vehicle, and a mailing address if you ask for a card. Creator applications can include your platforms, handle, follower range, a post link, and a requested code.

We email a copy of the application when email delivery is turned on, and we keep that copy with the application. Partner status links are private. We do not sell this information.

Analytics

We do not use a third-party analytics tool, advertising cookies, or a tracking pixel. The app uses this browser’s local storage and session storage to keep you signed in and to hold a snap or a chat while you are using it.

How long we keep it

We keep your account, nudges, photos, preferences, notification toggles, referral codes, a day-7 answer if you saved one, and the billing record until you delete the account.

Delete is in Account, under Manage Subscription. Delete cancels billing right away when Stripe is connected, and erases your profile, nudges, photos, preferences, notification settings, referral codes, a day-7 answer if you saved one, and sign-in. That erasure is immediate. There is no 30-day recovery.

We keep a short receipt that the erase happened: a one-way hash of the account id and the time. The receipt has no name, email, or the raw account id.

A chat thread in this browser goes away when that session ends. Delete clears the saved account on our side, and the local account, nudges, and snap draft in the browser where you tap delete. An open chat tab can still hold that session until you close it. Delete does not reach some other browser you used before.

Who we share it with

We share data with the vendors that run the product: Supabase for sign-in, the database, and private photo storage; OpenAI when a live snap or chat needs a model; Stripe when you subscribe or manage a payment method; and Vercel, which hosts the app. They process that data for us and may store it in the United States.

We do not sell your personal information.

Contact

For a deletion or privacy request, write to privacy@nudgeguy.com from the address on your account. Questions about the rules of the product are in the Terms of Use.