Back to home

Privacy Policy

Effective date: October 11, 2026

The short version

NudgeTable is local-first. Reminders, completion history, and most working state live on your device first. If you choose to sign in, we sync your tables and preferences so they can follow you across devices and shared households. We do not sell data, run ads, or use ad-tech trackers. We don’t use your content to train machine-learning models. You can delete your account at any time and we honor a 7-day grace window before that data is permanently erased.

Who we are

NudgeTable is operated by Aegyrix LLC. The service is delivered through nudgetable.app (web and iOS app), api.nudgetable.app (sync and authentication API), and nudgetable.com (marketing and support). The iOS app is published under bundle id app.aegyrix.nudgetable.ios.

What lives on your device

The app stores reminders, check-in history, table metadata, and preferences in your browser’s IndexedDB so the board keeps working offline. We also keep a minimal cached signed-in profile in browser session storage to help the app reopen quickly during an active session.

What happens when you sign in

Sign-in is optional. You can sign in with any of the following providers, and we only receive the data each provider releases for authentication:

  • Sign in with Apple — a stable Apple-issued user identifier, your email (real or Apple’s private relay), and the display name if you choose to share it.
  • Google — your Google account identifier, email address, display name, and profile image URL.
  • Microsoft — your Entra ID/Microsoft account identifier, email, and name.
  • GitHub — your GitHub user id, primary email, and login.
  • Passkey (WebAuthn) — a public credential bound to a username you supplied at registration.
  • Email sign-in — we email a magic link and a 6-digit one-time code to the address you provide; either path signs you in. Codes and link tokens expire in 15 minutes and are invalidated after a small number of wrong attempts.

We never receive your password from any provider and we don’t access the rest of your account on those providers. After sign-in, the app keeps you signed in with a signed HttpOnly, Secure, SameSite=Strict session cookie. The cookie carries only an opaque session reference — not a raw provider token — and is rotated on use.

Privacy and Terms acceptance

The first time you sign in (and again whenever we publish a materially updated policy version), the app shows a one-time consent screen. We record which policy version you accepted, the UTC timestamp, and the IP address of the request so we can demonstrate consent under GDPR Article 7. You can decline and sign out instead; nothing is stored against your account until you accept.

Cloud sync, sharing, and server-side storage

If you enable sync, we store the tables and reminders you can access, your synced preferences, sharing state, and related metadata on our server so your board can sync across devices and be shared with collaborators.

  • Reminder payloads and synced preferences are encrypted at rest.
  • Sharing supports Owner, Admin, Contributor, and Viewer roles.
  • Shared-table invites may store collaborator email addresses for access control and invite delivery.
  • Invite links are server-signed and can be revoked table-wide.

Calendar feeds

If you turn on the calendar feed, your reminders are served through a private tokenized URL as an RFC 5545 calendar stream. Anyone with that URL can read the feed, so treat it like a password. You can rotate the feed token from the app at any time.

Push notifications

If you enable web-push nudges, your browser shares a push endpoint and the cryptographic material needed to deliver encrypted push messages to that device. We use that only to send NudgeTable reminder nudges. Push subscription secrets are stored encrypted at rest.

Feedback and contact submissions

If you use the in-app feedback form, we receive the category you chose plus the summary and details you submit, along with your signed-in email address so we know which account the feedback came from. The public contact form on nudgetable.com/support additionally records the email address and name you supply on the form, plus the request IP and user agent, so we can reply and detect abuse. Submissions are delivered as email to our support inbox; there is no third-party ticketing platform involved.

Analytics

The app may send a lightweight first-party telemetry beacon to our own API so we can understand app reliability and usage. That telemetry can include anonymous visit/session ids stored in local or session storage, page path or active view, referrer, device/browser basics, screen and viewport size, scroll depth, engagement time, and page performance signals like load time, TTFB, FCP, LCP, and CLS. If geolocation enrichment is enabled on the server, we may also derive coarse location data such as country, region, or city from your IP address through a cached HTTPS lookup; we do not store raw IP addresses in the telemetry records themselves. Telemetry respects Do Not Track, is not used for advertising, and is not shared with ad networks. We do not use third-party ad pixels or behavioral marketing trackers.

Third-party services

  • Sign-in providers — Apple, Google, Microsoft, and GitHub when you choose those flows. Each provider’s own privacy policy applies to the sign-in step (Apple, Google, Microsoft, GitHub).
  • Apple Push Notification service (APNs), FCM, and Mozilla Push when you opt into push notifications, because those platforms route encrypted push delivery.
  • SMTP email delivery (Hostinger / Gmail relay) for sign-in codes, invites, contact-form messages, and feedback. Messages are transmitted over TLS.

Data deletion and the 7-day grace window

You can clear this device’s local copy at any time by clearing site data for nudgetable.app or using the app’s cache-clearing tools. Local-only deletion never reaches our servers.

To erase your data from our servers, choose Delete account in Settings. We then:

  • Immediately stamp your account as pending deletion. Every subsequent API call from any device returns a 410 “account deletion pending” response, so the account is access-blocked from that moment on.
  • Hold the data unchanged for 7 days. This is a grace window so you can recover from an accidental tap by signing back in within 7 days and choosing Keep my account; the app surfaces a restore prompt automatically.
  • After the 7 days elapse, our retention job permanently deletes your user record, reminders, tables you own, sharing records, push subscriptions, calendar-feed state, and email-login tokens. Deletion cascades through the database; backup tapes age out on their normal schedule (within 35 days).

We mirror this design from established GDPR Article 17 and Apple App Store Guideline 5.1.1(v) implementations. If you don’t want a grace window, contact us through the support form and we will purge immediately on request.

Data retention

  • Email sign-in tokens / codes — 15-minute TTL; purged shortly after.
  • Audit log (consent acceptance, sign-in IP) — up to 12 months.
  • Usage and performance telemetry — up to 12 months.
  • Reminders, tables, and preferences — retained for the life of your account, plus the 7-day grace window after a deletion request.
  • Tables you delete — kept for 30 days so your other devices learn about the deletion, then permanently erased along with their reminders.

Your rights

Depending on where you live (EEA/UK/Switzerland under GDPR, California under CCPA/CPRA, and similar regimes elsewhere) you may have the right to access, port, correct, or delete your data, to withdraw consent, and to lodge a complaint with your local supervisory authority. To exercise any of those rights, use the support form from the email address on your account so we can verify the request.

iOS app data declarations

The NudgeTable iOS app ships an Apple Privacy Manifest (PrivacyInfo.xcprivacy) that declares the data we collect and the reasons we touch required-reason APIs. We collect email address, name, the reminder content you create, anonymous product-interaction telemetry, and diagnostic crash/performance data — all for app functionality or analytics, none for tracking or advertising. We touch UserDefaults, file timestamps, system boot time, and disk space only through standard Capacitor plugins under the documented Apple reason codes (CA92.1, C617.1, 35F9.1, E174.1).

Children

NudgeTable is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we update the effective date at the top and bump the policy version inside the app so the consent screen re-prompts you for material changes. Continued use after a change means you accept the updated policy.

Contact

Questions about privacy, deletion, or a rights request? Use our support form.