Privacy Policy

1. Information We Collect

1.1 Account Information

• Phone Number: Used for authentication and account identification
• Profile Information: Name, profile picture (optional)
• Fundability Score: Generated based on your repayment behavior

1.2 Debt & Reminder Data

• Debt Records: Amount, borrower/lender name, due dates, payment status
• Reminder Preferences: Frequency, notification settings, contact methods
• Transaction History: Payment records, dates, amounts

1.3 Receipt & Document Data

• Scanned Receipts: Photos of bills and receipts you upload
• OCR Extracted Data: Text extracted from receipts (amounts, dates, merchant names)
• Receipt Categories: Your categorization and organization of receipts

1.4 Usage & Device Data

• App Activity: Features used, interaction patterns, error logs
• Device Information: Device type, OS version, app version
• Analytics Data: Anonymized usage statistics for app improvement

2. How We Use Your Information

2.1 Core Functionality

• Create and manage debt reminders
• Send automated notifications (push notifications, WhatsApp)
• Calculate and display your Fundability Score
• Process and store receipt scans using OCR technology
• Sync your data across devices

2.2 Gamification & Insights

• Award badges and track payment streaks
• Generate repayment statistics and trends
• Provide personalized recommendations

2.3 App Improvement

• Analyze usage patterns to improve features
• Debug errors and optimize performance
• Develop new features based on user behavior

2.4 Security & Fraud Prevention

• Detect and prevent unauthorized access
• Monitor for suspicious activity
• Comply with legal obligations

3. Information Sharing & Third Parties

3.1 We DO Share With:

• Firebase (Google): Backend services, authentication, cloud storage, analytics
• WhatsApp (Meta): Only when you explicitly enable WhatsApp reminders
• Cloud Storage Providers: For secure data backup and sync
• Analytics Services: Anonymized usage data for app improvement (Firebase Analytics, Crashlytics)

3.2 We DO NOT Share:

• NO selling of personal data to advertisers or data brokers
• NO social media integration required or forced
• NO sharing of debt details with third parties for marketing
• NO public leaderboards without explicit consent

3.3 Legal Compliance

We may disclose information if required by law, court order, or to protect rights, property, or safety.

4. Data Security

4.1 Security Measures

• End-to-End Encryption: Your sensitive data is encrypted in transit and at rest
• Secure Authentication: Phone OTP-based login via Firebase Auth
• Access Controls: Role-based permissions and secure API access
• Regular Security Audits: Ongoing monitoring and testing

4.2 Data Storage

• Cloud Storage: Firebase Firestore (Google Cloud Platform)
• Local Storage: Encrypted local cache using Hive for offline access
• Receipt Storage: Firebase Cloud Storage with secure access tokens
• Backup: Automatic encrypted backups

4.3 OCR & AI Processing

• On-Device Processing: Google ML Kit runs locally on your device
• No Third-Party AI: Receipt text extraction happens on your phone
• Receipt Privacy: Photos are stored securely and never shared

5. Your Privacy Rights

5.1 Access & Control

• Access Your Data: View all data associated with your account
• Export Data: Download your data in a portable format
• Delete Data: Request deletion of specific data or your entire account
• Correct Data: Update inaccurate or outdated information

5.2 Privacy Controls

• Fundability Score Visibility: Choose who can see your score (private by default)
• Notification Preferences: Customize reminder frequency and channels
• Data Sync: Enable/disable cloud sync and offline mode
• Third-Party Integrations: Control WhatsApp integration separately

5.3 How to Exercise Your Rights

Contact us at privacy@nudgeapp.com to:

• Request data access or export
• Delete your account and data
• Opt-out of analytics
• Ask privacy-related questions

6. Children's Privacy

Nudge is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

7. Data Retention

7.1 Active Accounts

• We retain your data as long as your account is active
• Inactive accounts (no login for 2+ years) may be deleted after notice

7.2 Deleted Accounts

• Immediate Deletion: Account data deleted within 30 days
• Backup Retention: Encrypted backups deleted within 90 days
• Legal Retention: Some data may be retained for legal compliance (e.g., transaction logs)

7.3 Receipt Storage

• Receipt images stored until you delete them or close your account
• OCR-extracted text stored with debt records

8. International Data Transfers

Your data may be stored and processed in servers located outside your country, including the United States (Google Cloud Platform). We ensure adequate safeguards are in place to protect your data in accordance with applicable laws.

9. Cookies & Tracking

9.1 Mobile App

• We do not use browser cookies in the mobile app
• Local storage (SharedPreferences, Hive) used for app functionality
• Firebase Analytics uses device identifiers for analytics

9.2 Website

• Essential cookies for website functionality
• No third-party advertising cookies

10. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of significant changes via:

• In-app notification
• Email to your registered email address
• Update notice on this page

Continued use of Nudge after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, concerns, or requests:

We'll respond to privacy requests within 30 days.