Privacy Policy

What we collect

When you create an account, we collect your email address and password. The password is stored only as a one-way hash by our authentication provider; we never see or store the plaintext. We do not collect your real name, phone number, address, or payment details.

When you log a habit, we record the date and the count you entered. Your logs are scoped to your account and are not visible to other users.

We use cookies for session management and, in production, Vercel Analytics for aggregate, privacy-preserving usage metrics.

How we use your data

We use your email and password hash to sign you in. We use your habit logs to render the calendar views inside the app. We do not sell your data, and we do not share it with advertisers.

Communications

We send transactional emails only — no marketing, no newsletters. You will receive email from us in two cases: to confirm your account at signup, and to reset your password if you request it. These emails are sent from @nudgehabit.app via Amazon Web Services on our behalf. There is nothing to unsubscribe from; if you don't want to receive these messages, you can delete your account (see "Your rights" below).

Service providers

Authentication and database storage are handled by Supabase. Hosting and analytics are handled by Vercel. Email delivery is handled by Amazon Web Services.

Sensitive data

Habit logs (including alcohol consumption) can be considered sensitive personal data under laws like GDPR. We treat them accordingly: stored in a database scoped to your user ID, encrypted at rest by our provider, and never shared outside service providers required to deliver the product.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account at any time. Contact us at hello@nudgehabit.app.

Changes to this policy

If we make material changes, we'll notify you by email and update the "Last updated" date above.

Contact

Questions? Email hello@nudgehabit.app.