Privacy Policy

Last updated: 14 August 2026

Nudge is in active development. The service is available for people to try, but features are still being added and this policy will be updated as they launch. Where a section describes something that is not yet in use, it says so. If anything here is unclear, email privacy@nudgeactivity.com and we will answer.

1. Who we are

Nudge ("Nudge", "we", "us") is a service that helps people discover and join local social activities, available at nudgeactivity.com and as a mobile app.

The data controller responsible for your personal data is:

• Espen Joli, operating as a sole trader
• Torrevieja, Alicante, Spain
• Privacy contact: privacy@nudgeactivity.com

If you have any question about this policy or your data, email us at the address above.

2. What data we collect

You give us:

• Account data: email address, password (stored only as a secure hash by our authentication provider), and, if you use social login, the basic profile your provider shares (name, email, profile picture).
• Profile data: display name and, if you choose to add them, photo, bio, interests, home location, and optional details such as job, school or birthday.
• Location: when you set a location or use the map picker, we store the place name and its coordinates so we can show nearby activities and people. Precise location is only saved when you enter or confirm it; we do not track your device in the background.
• Content you post: activities you create, join requests ("nudges"), connections you make, and the messages you send other users.

We collect automatically:

• Technical data: IP address, browser and device type, and basic, cookieless usage analytics needed to run and secure the service.

We do not knowingly collect data from anyone under 18, and we do not use tracking or advertising cookies.

3. Why we use your data, and our legal basis

Under the EU and UK GDPR we rely on these legal bases:

| What we do | Legal basis |

| --- | --- |

| Create and run your account; show activities, people and messages | Performance of our contract with you (Art. 6(1)(b)) |

| Store and show your location and profile details | Your consent, which you give by entering them, and which you can withdraw (Art. 6(1)(a)) |

| Keep the service secure, prevent abuse, and handle moderation reports | Our legitimate interests in a safe service (Art. 6(1)(f)) |

| Send you service emails (confirmations, security, replies) | Contract and legitimate interest |

| Send optional product or marketing emails | Your consent, withdrawable at any time |

| Process a Pro subscription payment | Contract, and legal obligation to keep tax records |

4. Who we share it with

We do not sell your personal data. We share it only with the service providers ("processors") that make Nudge work, each under a data-processing agreement:

• Supabase: database, authentication and file storage. Your data is hosted in the EU (Ireland, eu-west-1).
• Cloudflare: website hosting, CDN and security.
• Google Maps: powers the optional map location picker, subject to Google's own privacy policy when the map loads.
• OpenStreetMap contributors: place search and address lookup when you type a location or drop a pin. The text you type or the coordinates you select are sent to the geocoding service; no account data is included.

The following are planned and not yet in use. This policy will be updated before any of them begins processing your data:

• Zoho Mail: sending transactional and support email.
• Lemon Squeezy: Merchant of Record for Pro subscriptions, processing payment and billing details as an independent controller.
• Sentry: error and crash diagnostics.

Other users see the parts of your profile and content you choose to make visible: your name, photo, activities, and messages you send them.

We may also disclose data where legally required, or to protect the rights and safety of users.

5. International transfers

Your data is stored in the EU. Some providers may process limited data outside the EEA. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

6. How long we keep it

• Account and profile data: for as long as your account is open.
• Messages, activities and connections: until you or the other party delete them, or you close your account.
• When you delete your account: we remove your personal data from our live database promptly. Nudge has a built-in "Delete account" action that erases your rows and your login. Backups roll off on their normal cycle, and we keep only the minimum required for legal and tax reasons.

7. Your rights

Under the GDPR you can, at any time:

• Access the personal data we hold about you;
• Correct anything inaccurate, most of which you can edit directly in your profile;
• Delete your account and data (Settings → Delete account, or email us);
• Export a copy of your data (portability);
• Object to or restrict certain processing;
• Withdraw consent: for example remove your location, or unsubscribe from marketing, without affecting processing that has already happened.

To exercise any of these, email privacy@nudgeactivity.com. We respond within one month.

You also have the right to complain to your data protection authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

8. Security

Access to the database is protected by row-level security, so users can only reach their own data and the content shared with them. Passwords are hashed, connections are encrypted with HTTPS, and we rotate credentials and keep the service patched. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Children

Nudge is for adults. You must be 18 or older to use it. If we learn we have collected data from someone under 18, we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make a significant change we will notify you in the app or by email. The "Last updated" date above always shows the current version.

11. Contact

Questions or requests: privacy@nudgeactivity.com

Espen Joli, Torrevieja, Alicante, Spain.