Privacy Policy

We collect the following categories of information:

• Mobile phone number — provided by you at signup so we can send SMS reminders.
• SMS opt-in and consent status — a record that you agreed to receive text messages from us, along with the date and time.
• Gmail account access — if you connect Gmail, we request read-only access to scan for subscription-related emails. We do not store the full contents of your emails. We do send the text of matching emails to an AI provider for analysis — see section 3.
• Subscription and trial data — vendor names, trial end dates, billing amounts, and cancel links that we detect from your inbox or that you add manually.
• Message history — the SMS messages sent to and received from you through the Service.

We use your information solely to operate the Service:

• Send you SMS trial reminders and account notifications.
• Detect subscription trials from your Gmail inbox, using automated analysis described in section 3.
• Respond to your SMS commands (list, cancel, add, snooze, stop, start, help, disconnect, delete).
• Improve reliability and prevent abuse.

Nudge uses artificial intelligence to read and interpret text on your behalf. Specifically, we send the following to Anthropic PBC, which operates the Claude AI models we use:

• Email content — when our scanner finds an email in your inbox that matches subscription, trial, billing, or renewal terms, we send an excerpt of that email (currently up to the first 3,000 characters, which may include the sender, subject, and body) to Claude so it can extract the service name, trial end date, and price.
• Your text messages — when you text us something that isn't a recognized command, we send that message to Claude to work out whether you're trying to add a trial in plain English.
• Service names — when you ask how to cancel something we don't have on file, we send the service name to Claude to look up a cancellation method.

Anthropic processes this data to return a result to us and does not use it to train their models. We do not use AI to make any decision that has a legal or similarly significant effect on you. Automated output can be wrong — always confirm a trial date or cancellation link with the service itself before relying on it.

If you would rather no email content be processed this way, text DISCONNECT to stop Gmail scanning, or don't connect Gmail at all — you can still track trials by texting them to us manually.

Nudge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request a single scope, gmail.readonly, which allows us to read your mail but never to send, delete, or modify anything. We use it only to detect subscription trials and tell you about them. We restrict our scan to messages from the last seven days that match subscription-related search terms, and we store only the extracted trial details — never the message body.

We do not transfer Google user data to third parties except as needed to provide the Service (the AI processing described in section 3, and our hosting providers), for security purposes, or to comply with applicable law. We do not sell Google user data, and we do not use it for advertising or to train any AI model.

You can revoke our access at any time by texting DISCONNECT to your Nudge number, which revokes the token with Google and deletes our copy. You can also revoke it directly at myaccount.google.com/permissions.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.

All the categories described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.

We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

We use the following categories of service providers, and share only the minimum data required for them to perform their function:

• Messaging platform — Telnyx, LLC, which delivers SMS on our behalf.
• Email access — Google LLC, for read-only Gmail scanning under scopes you approve during OAuth.
• Hosting and database — Vercel Inc. and Turso Corp., which host the application and store your account data.
• AI processing — Anthropic PBC, whose Claude models analyze email excerpts, your inbound text messages, and service names, as detailed in section 3.

We share only the minimum data each provider needs to do its job, and we do not authorize any of them to use your information for their own marketing purposes. Anthropic's commercial terms expressly prohibit training their models on data we submit, including the email excerpts described in section 3. Our other providers process your data under their own standard terms of service and privacy commitments rather than a separately negotiated agreement with us. As Nudge grows we intend to put formal data processing agreements in place with each of them.

Message frequency varies based on your trials and settings. Standard message and data rates may apply from your mobile carrier. You can opt out at any time by replying STOP to any message from us; reply HELP for help. Mobile carriers are not liable for delayed or undelivered messages.

We retain your data while your account is active. You are in control of removing it, and every option below takes effect immediately — you do not need to email us or wait:

• STOP — pauses all messages and stops any inbox scanning. Your account and saved trials are kept so you can resume with START.
• DISCONNECT — revokes our Gmail access with Google and deletes the stored access tokens. We can no longer see your inbox.
• DELETE — revokes Gmail access and permanently erases your account, phone number, saved trials, and message history. This cannot be undone.

If you stop using the Service without deleting your account, we retain your data for up to twenty-four (24) months after your last activity and then delete it. Verification codes are deleted within one hour. If you prefer, you can also email us at help@nudgeme.app and we will delete your data within thirty (30) days, except where retention is required by law.

We use industry-standard practices to protect your information, including encryption of OAuth tokens at rest (AES-256-GCM) and HTTPS for all data in transit. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, or delete your personal information, and to opt out of certain processing. The self-serve commands in section 8 exercise the deletion right immediately; for anything else, contact us using the details below and we will respond within 30 days. We will not discriminate against you for exercising these rights.

California residents (CCPA/CPRA). In the past 12 months we have collected the categories of personal information listed in section 1: identifiers (phone number), electronic network activity and message content, and commercial information (your subscription and trial details). We collect it for the purposes in section 2 and share it only with the service providers in section 6. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You have the right to know, delete, correct, and to limit use of sensitive personal information.

EU/UK residents (GDPR). Our lawful basis for processing is your consent (which you may withdraw at any time via STOP, DISCONNECT, or DELETE) and our legitimate interest in operating and securing the Service. You additionally have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Nudge is operated from the United States, so your data is processed there and by the providers listed in section 6.

Nudge is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

For questions about this Privacy Policy or to exercise your rights, contact us at help@nudgeme.app.