Nudge privacy policy
The short version: we collect only what Nudge needs to remind you. Your reminders are encrypted with a key unique to you. We never sell your data and show no ads. Nudge never reads your contacts or location. Finished reminders are deleted automatically on a schedule you choose.
1. Who we are
Nudge is a product of Swift InfoCorp, a software business registered in India (Udyam Registration No. UDYAM-DL-07-0005541), at 87/2, Street No. 2, Gautam Gali, Jwala Nagar, Shahdara, New Delhi 110032, India.
Swift InfoCorp decides how and why your personal data is processed in Nudge. It is the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). In this policy, "we", "us" and "our" mean Swift InfoCorp.
This policy covers the Nudge app, the Nudge WhatsApp number, and the services behind them. Our website has its own website privacy notice.
2. What we collect, and why
| Data | Why we need it | How long we keep it |
|---|---|---|
| Your mobile number | To create your account, sign you in with a one-time code on WhatsApp, and deliver WhatsApp reminders you ask for. It is stored encrypted. We keep a separate keyed fingerprint so we can find your account without decrypting the number. | While your account exists |
| Your reminders: the text, the schedule, and your choices such as "must not miss" or "discreet" | To remind you at the right time. The text is encrypted with a key unique to you. | Until you delete the reminder, when the text is destroyed immediately. Finished reminders are deleted automatically after the period you choose: 7–365 days, 90 by default. |
| Reminder activity: when a reminder was shown, opened, marked done or snoozed, and where (app, notification or WhatsApp) | To know you have been reminded, to stop follow-up messages once you respond, and to show your Today list | Deleted with the reminder (as above) |
| Settings: home timezone, how long to keep finished reminders, digest time | To schedule correctly and respect your preferences | While your account exists |
| Device and sign-in information: an app-install identifier, platform, app and OS version, and sign-in times | To keep you signed in securely, let you see and end your sign-ins, and block suspicious activity | Until you sign out or the sign-in expires, then removed in routine clean-up |
| Notification token (from Google Firebase) | To send notifications to your phone. Stored encrypted and tied to one sign-in. | Removed when you sign out, or when Google reports it invalid |
| Your consents: what you agreed to, when, and which version of this policy | To prove and respect your choices | While your account exists, and afterwards as long as the law requires |
| Delivery records: when we sent a notification or WhatsApp message, by which channel, and the outcome. They never contain reminder text. | To make delivery reliable, prevent duplicates, enforce fair-use limits, and account for messaging costs | 13 months |
| Security records: account events such as sign-ins, sign-outs and settings changes. IP addresses are stored only as keyed fingerprints. | To protect your account and our service from abuse, and to meet legal obligations | At least one year, as required by the DPDP Rules, 2025 |
| Login codes | To sign you in. We store only a fingerprint of the code, never the code itself. | Codes expire after 5 minutes and are deleted within a day |
What we do not collect: your contacts, location, photos, files, microphone, camera, or advertising identifiers. Nudge contains no advertising or tracking software.
Our logs never contain your reminder text, mobile number, login codes or access tokens.
3. WhatsApp and Meta
Nudge uses Meta's WhatsApp Business Platform for two things only:
- Login codes. These are needed to sign in, so they are sent even if you turn WhatsApp reminders off.
- Reminders you mark "must not miss", sent about one minute after the due time if you have not already responded. This happens only while WhatsApp reminders are turned on, which you choose at sign-up and can change at any time.
When we send you a WhatsApp message, Meta processes your mobile number and the message content under its own terms and privacy policy. A reminder you mark discreet is never sent with its text, only a note that a private reminder is due.
If you reply to Nudge on WhatsApp, we act only on the buttons (Done, Snooze 1h) and on STOP or START. We do not keep any other text you send.
To stop WhatsApp reminders, reply STOP or turn them off in the app's settings. This takes effect immediately.
4. Who we share data with
We never sell your personal data, and we never share it for advertising. We use these service providers ("Data Processors") only to run Nudge, under contracts that limit them to our instructions:
| Provider | What for | What they receive |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Login codes and must-not-miss WhatsApp reminders | Your mobile number and the message content (never the text of discreet reminders) |
| Google (Firebase Cloud Messaging; Google Play) | Phone notifications; app distribution | Your notification token. Notifications we send through Google contain no reminder text, only an identifier the app uses to look up the reminder on your phone. |
| Amazon Web Services (Mumbai region) | Hosting, databases and encryption-key management | Stored data, which is encrypted |
We may also disclose data when Indian law requires it, for example in response to a lawful order. We will tell you when the law allows us to.
5. Where your data is stored
Our servers and databases are in India (AWS, Mumbai region). Meta and Google may process the data they receive (described above) in other countries, under their own safeguards.
6. How we protect it
- All connections use encryption in transit (TLS).
- Your mobile number and reminder text are encrypted at rest with a key unique to you. That key is itself protected by a managed key service.
- Sign-in tokens and login codes are stored only as fingerprints.
- Access to production systems is restricted and logged.
- If a personal data breach occurs, we will notify you and the Data Protection Board of India as the DPDP Act and Rules require.
7. Your rights
Under the DPDP Act you can:
- Access a summary of your personal data and how we process it.
- Correct or update it.
- Erase it, by deleting reminders or your whole account (see Delete your Nudge account).
- Withdraw consent at any time, as easily as you gave it. For example, turn off WhatsApp reminders. Withdrawal does not affect processing that happened before it.
- Nominate a person to exercise your rights if you die or become incapacitated.
- Raise a grievance with us (section 10). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Many of these are available directly in the app's settings. Otherwise, write to us (section 10). We may need to verify that the request comes from the account's owner, for example by sending a code to your number on WhatsApp.
8. Children
Nudge is only for people aged 18 and over, and you confirm this when you sign up. If we learn that an account belongs to someone under 18, we will delete it.
9. Changes to this policy
When we change this policy, we publish a new version with a new date and tell you in the app before it takes effect. Every version stays available at its own permanent link. When you agree, we record which version you agreed to.
10. Contact and grievance officer
For questions, requests or grievances about your personal data, contact our Grievance Officer:
Grievance Officer, Swift InfoCorp87/2, Street No. 2, Gautam Gali, Jwala Nagar, Shahdara, New Delhi 110032, India
Email: support@swiftinfocorp.com (subject: "Privacy request")
We will acknowledge your request promptly and respond within the time the DPDP Rules allow, at the latest within 90 days.