NudgeUp Privacy Policy

Last updated: April 2026

Who We Are

NudgeUp is a wellness application designed to help you monitor and improve your phone posture habits. This policy explains what data we collect, how we use it, and your rights.

What Data We Collect

• Account information: Email address, display name, and age range (collected during sign-up and onboarding).
• Posture data: Accelerometer and gyroscope sensor readings processed locally on your device to estimate phone tilt angle. Aggregated session summaries (duration, healthy vs slouched time) are stored locally and synced to our servers.
• Camera data: Front camera images are processed in real-time using on-device ML Kit face detection to verify head posture. These images are NEVER saved, stored, or transmitted — they exist only in memory during the brief analysis and are immediately discarded.
• Preferences: Notification settings, check interval, exercise history, and gamification progress.
• Crash diagnostics: Anonymous crash stack traces and device model information, collected only when you have enabled diagnostics.
• Analytics events: Anonymized usage events (screen views, feature usage) via Firebase Analytics, collected only with your consent.

How We Use Your Data

• To provide posture monitoring and personalized exercise recommendations.
• To sync your profile and progress across devices via our secure backend.
• To improve app stability through crash reporting (opt-in).
• To understand aggregate usage patterns and improve features (opt-in analytics).

We do NOT sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Third-Party Services

• Firebase (Google): Authentication, crash reporting (Crashlytics), analytics, push notifications, and remote configuration. Subject to Google's Privacy Policy.
• Supabase: Secure backend database for profile and session data. Data is encrypted in transit (TLS) and at rest.
• Google ML Kit: On-device face detection. No data is sent to Google's servers — all processing occurs locally on your device.

Data Security

• All network communication uses HTTPS (TLS 1.2+). Cleartext traffic is disabled.
• Sensitive local data (auth tokens, preferences) is encrypted using Android's EncryptedSharedPreferences backed by the hardware KeyStore.
• Your posture photos never leave your device and are never written to disk.

Data Retention & Deletion

• Your data is retained as long as your account is active.
• You can delete your account and all associated data at any time from Settings > Account > Delete Account.
• Upon deletion, we remove your profile, posture logs, and crash reports from our servers. Local data is cleared from your device.
• You may also email us at privacy@nudgeup.app to request data deletion.

Children's Privacy

NudgeUp is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us and we will delete it promptly.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Opt out of analytics and crash reporting at any time via Settings.
• Export your data by contacting us.

Medical Disclaimer

NudgeUp is a wellness tool, NOT a medical device. It does not diagnose, treat, cure, or prevent any disease or medical condition. The posture scores and exercise recommendations are for informational and wellness purposes only. Always consult a qualified healthcare professional for medical advice regarding neck pain or spinal conditions.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app. Continued use of NudgeUp after changes constitutes acceptance of the updated policy.

Contact Us

For questions about this privacy policy or your data, email us at team.nudgeup@gmail.com.