Privacy Policy
Effective 5 September 2026
Nudge collects the minimum needed to run the app: your account, your progress, your subscription status, and anonymous usage and crash data. We do not track you across other apps or websites, we show no ads, and we never sell your data.
Who is responsible
Nudge is made by Aksel Olsen, a sole developer based in Denmark. For the purposes of the EU General Data Protection Regulation (GDPR), Aksel Olsen is the data controller.
Contact: akselolsenbusiness@gmail.com
What we collect and why
Your account
You sign in with Sign in with Apple. Apple gives us a unique user identifier and, if you choose to share them, your name and email address. If you use Apple's "Hide My Email" option, we only ever receive the relay address. We use the name as your display name in the app and the email only to identify your account. We never send marketing email.
Legal basis: performance of a contract (providing you the app).
Your progress
To sync your progress across devices we store, against your account identifier:
- which challenges you were given, when, and whether you completed or skipped each one;
- which category and difficulty direction you chose after each challenge;
- your points, level, streak, current difficulty, and related counters;
- your time zone, whether daily reminders are on, the hour you prefer them, your chosen tree theme, and when you finished onboarding.
Nudge never asks you to write anything about your experiences. There is no journal, no free-text field, and no record of what happened during a challenge. We know that you completed "give someone a compliment"; we do not know who, where, or how it went.
Legal basis: performance of a contract.
Your subscription
Payments go through Apple. We never see your card or bank details. Apple sends purchase receipts to RevenueCat, a subscription management service, which validates them and tells us whether your subscription is active, which plan it is, and when it expires. We store that status against your account so the app can unlock the right features.
Legal basis: performance of a contract.
Usage analytics
We record a small, fixed set of in-app events so we can see whether onboarding works, how far people get, and whether the difficulty system behaves. Examples: "onboarding step viewed", "nudge completed", "paywall viewed", "level up". Each event carries only numbers and categories, such as the difficulty level, the challenge category, or the points awarded. By design, an event can never contain challenge text, your name, or your email. Events are linked to your account identifier so we can follow one person's journey through the app.
Analytics are processed by PostHog on servers in the European Union.
Legal basis: our legitimate interest in understanding and improving the app. You can object at any time by contacting us, and we will exclude your account.
Crash reports
If the app crashes, a report is sent to Sentry, a crash reporting service, on servers in the European Union. The report contains the technical details of the crash, your device model, iOS version, app version, and your account identifier so we can tell how many people a bug affects. Screenshots and view contents are switched off. No personal details are attached.
Legal basis: our legitimate interest in keeping the app working.
Reminders
Daily reminders are local notifications scheduled on your device. They never pass through a server. We store only whether you turned them on and at what hour, so the setting follows you to a new device.
What we do not do
- We do not track you across other companies' apps or websites, and we do not use Apple's advertising identifier.
- We do not show ads.
- We do not sell, rent, or share your data with anyone for their own purposes.
- We do not collect your location, contacts, photos, or microphone.
- We do not use your data to train any machine learning or AI system. Challenges come from a human-written catalog.
Who processes your data
These services act on our instructions and are bound by data processing agreements.
| Service | Purpose | Data | Location |
|---|---|---|---|
| Apple | Sign in, payments, App Store | Apple identifier, name and email if shared, purchase receipts | Apple's own terms apply |
| Supabase | Database and authentication | Account, progress, subscription status | European Union |
| RevenueCat | Subscription validation | Account identifier, purchase receipts | United States |
| PostHog | Usage analytics | Account identifier, in-app events | European Union |
| Sentry | Crash reporting | Account identifier, crash details, device info | European Union |
Where data leaves the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable to that provider.
How long we keep it
We keep your account and progress for as long as you have an account. When you delete your account, everything held about you in our database is removed immediately, your Apple sign-in authorisation is revoked, and your subscription record with RevenueCat is detached from your identity. Analytics and crash records tied to your identifier are removed within 30 days. Encrypted database backups expire on their own schedule, at most a further 30 days.
An active subscription is managed by Apple and is not cancelled when you delete your account. Cancel it in your iPhone's Settings under Subscriptions.
Your rights
Under the GDPR you have the right to:
- access the data we hold about you and receive a copy;
- correct anything inaccurate;
- have your data deleted;
- restrict or object to how we process it;
- receive your data in a portable format;
- withdraw consent at any time where we rely on it.
You can delete your account yourself in the app under Profile, Settings, "Delete my account". For anything else, email akselolsenbusiness@gmail.com. We reply within 30 days.
If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk, or to the supervisory authority in your own EU country.
Children
Nudge is not directed at children. You must be at least 13 years old, or the age at which you can consent to data processing in your country if that is higher, to use it. We do not knowingly collect data from anyone below that age. If you believe a child has created an account, contact us and we will delete it.
Security
All traffic between the app and our servers is encrypted with HTTPS. Your session is stored in the iOS Keychain. Our database enforces row-level access rules so that your data can only ever be read by you, and points and difficulty are computed on the server so they cannot be tampered with from a device.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect. Minor clarifications may be made without notice.
Contact
Aksel Olsen
Aksel Møllers Have 6, 6. th., 2000 Frederiksberg, Denmark
CVR 46349156
akselolsenbusiness@gmail.com