Privacy policy

If you use the Nudgebox app

You never create an account. We do not ask for your name, email address, phone number, contacts or location, and we do not use advertising identifiers. To deliver notifications we store, per device:

• the push token Apple issues for this app on your device, so we can deliver to it;
• a random installation id and a hashed device credential, so the app can authenticate;
• the platform, app version, OS version, device model, language and time zone;
• when the device was registered and last seen;
• your subscriptions: which publisher, which channels, and when you subscribed or left;
• a record of each delivery attempt to your device (sent, failed or token no longer valid).

Publishers see an anonymous subscription: its channel, platform, status and dates. They never see your push token or device details. If a publisher gives you a personal subscribe link (for example, inside an account you already have with them), the subscription carries the identifier that publisher uses for you, so they can send to you specifically.

You can unsubscribe from any publisher or channel in the app. Removing the device in the app deletes the device record and every subscription with it; past delivery records are kept without a link to the device.

If you publish with Nudgebox

To run your account we store your name and email address, a password hash if you set a password, one-time sign-in codes, and active sessions including the IP address and browser that created them. We store your organizations, members, applications, channels and the notifications you send, with their delivery results. API keys are stored hashed; we keep only their first characters to help you tell them apart.

Paid plans are sold through Polar, which processes payment details. We store your plan, its status and Polar's customer and subscription identifiers.

Service providers

• Cloudflare hosts the API, dashboard, database and this site, and sends sign-in emails.
• Expo and Apple relay notifications to iPhones (Expo's push service and the Apple Push Notification service).
• Polar handles checkout, invoices and taxes for paid plans.

This website

nudgebox.app sets no cookies, runs no analytics and loads nothing from third parties. It remembers your light or dark theme choice in your browser's local storage. The dashboard at dash.nudgebox.app uses a session cookie to keep you signed in.

Contact

Questions, or a request to access or delete your data: hello@nudgebox.app. We will update this page when our practices change and note the date at the top.