GoodNudgin Privacy Policy

DRAFT — needs attorney review. This is a working draft and is not yet in effect. Text in [square brackets] is a placeholder or a note that must be resolved before publishing.

Effective date: [Effective date] Last updated: [Last updated date]

GoodNudgin (at app.goodnudgin.com) is run by [GoodMoyer LLC / legal entity TBD] ("GoodMoyer," "we," "us"). GoodNudgin is a relationship app where an AI friend, Goodie, suggests small "nudges" to help you show love to your partner.

To do that well, you tell us about you and about someone you love who may never use the app. We take that seriously. This policy explains, in plain English, what we collect, why, who helps us run the service, how long we keep it, and the choices you have.

The short version

• We don't sell your personal information, and we don't share it for cross-context behavioral (targeted) advertising.
• Google sign-in data stays with us. We use your Google name, email address, and profile photo only to create and run your account. We never sell it or use it for advertising (see Section 4).
• Voice input is optional. If you tap the mic, your recording goes to our speech-to-text provider, Groq, to become text. We don't store the audio, and you review the text before anything is saved.
• You're in control. You can view and edit what you've told us, and reset or delete your account and data.
• Your partner's details are used only to make your nudges better. We don't contact your partner, we don't track them, and we never collect their location.
• GoodNudgin is for adults (18+) in the United States.
• Some features described below (like texts, push notifications, AI-written nudges, payments, location-aware nudges, and sponsored suggestions) aren't live yet. We describe them now so there are no surprises, and we'll ask for your permission where the law or common sense says we should.

1. Information we collect

1.1 Information you give us about yourself

1.2 Information you give us about your partner

GoodNudgin works by learning a little about your partner from you. This may include:

• Their name or nickname, and the pronouns you'd like us to use
• Their birthday and your anniversary (month and day; no year required)
• Your ranking of the ways you think they feel most loved, and specifics you add
• Their "little preferences": likes, dislikes, and hard "nevers" (for example, a favorite coffee order, "no boba," "never lilies")
• Allergies or dietary restrictions you choose to note. We flag these and use them only to filter out suggestions that could be a bad fit, never for advertising.

Please share only what's needed for thoughtful nudges. Our prompts don't ask for sensitive details about your partner (like health conditions, sexuality, finances, or immigration status), and we ask that you not add them. See the Terms of Service for your responsibilities when you share information about someone else.

1.3 Information about how you use nudges

• The nudge options we showed you, when, and in what order
• Which option you picked, and what you did with it (for example: done, snooze, "make it smaller," or "not for us")
• Follow-up check-in answers and ratings about how a nudge went
• Technical scoring details about why a nudge was selected (counts and scores, not your partner's details)

1.4 Feedback you send us

If you use the in-app feedback form, we collect your rating, category (bug, idea, nudge, other), and comment, along with the screen you were on, the app version, and your browser type. If you're signed in, your feedback is tied to your email address so we can follow up. If you're not signed in, it's tied to a random device ID instead. Feedback is stored in our database or in a spreadsheet in our Google Workspace account. [Confirm which feedback destination is live in production.]

1.5 Information collected automatically

• Device and log data: IP address, browser and device type, pages requested, and timestamps, which our hosting providers record to run and secure the service.
• Cookies and local storage: we use essential cookies to keep you signed in. The app also saves some of your answers, nudge history, and a random device ID in your browser's local storage, so the app works smoothly (including offline) and can move your answers into your account when you sign in. You can clear these in your browser settings, though the app may stop working as expected.
• No ad trackers: we don't use third-party advertising cookies or cross-site tracking. [If product analytics (for example, PostHog) are added, describe them here before launch.]
• Browser signals: we treat a Global Privacy Control (GPC) signal as a request to opt out of any "sale" or "sharing," although we don't do either today.

1.6 Voice input (optional)

Some questions let you answer by voice instead of typing. Voice input is off unless you tap the microphone, and your browser will ask for microphone permission first.

• What happens: when you tap the mic, your browser records a short clip (up to about 2 minutes). When you tap again, the clip goes over an encrypted connection to our server and straight on to Groq, Inc., our speech-to-text provider. Groq turns it into text and sends the text back.
• We don't store your audio. GoodNudgin doesn't save the recording on our servers, in our database, or in your browser's storage. Groq handles audio under its own terms as our service provider. [Confirm Groq's retention terms for audio sent through the API (e.g., zero data retention) and update this sentence.]
• You review the text. The transcript fills in the answer field so you can check, edit, or delete it. Nothing is saved until you submit the answer, and it's then stored like any typed answer.
• Limits: voice input is available only when you're signed in. We limit clip size and how often it can be used to prevent abuse.
• Please don't record other people without their permission, and keep the same care for your partner's privacy that you'd use when typing.

2. How we use information

We use information to:

1. Run GoodNudgin: create your account, save your profile and your partner's profile, and show your nudges.
2. Personalize nudges: match ideas to how your partner feels loved, their likes and nevers, your budget, your schedule, and important dates.
3. Learn from your choices: your picks, skips, and check-ins help Goodie suggest better ideas over time.
4. Communicate with you: respond to feedback and support requests, and send important notices about your account or this policy.
5. Keep things safe: prevent fraud, abuse, and misuse (including attempts to use GoodNudgin to monitor or control a partner), and secure our systems.
6. Improve the service: fix bugs and understand, in aggregate, which kinds of nudges people find helpful.
7. Meet legal obligations and enforce our Terms.

We don't use your information, or your partner's, to make decisions that have legal or similarly significant effects on anyone.

3. How we share information

We do not sell personal information. We do not share it for cross-context behavioral advertising. We don't give advertisers or sponsors individual profiles, partner details, or what you've told Goodie.

We share information only:

• With service providers who help us run GoodNudgin, under contracts that limit their use of it to providing services to us:

• For legal reasons: if required by law, subpoena, or court order, or to protect the rights, safety, or property of our users, the public, or GoodMoyer.
• In a business transfer: if GoodMoyer is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that deal, and it will stay subject to the promises in this policy (or you'll be notified).
• With your direction or consent.

We may share aggregated or de-identified information (for example, "grocery-related nudges were popular this month") that can't reasonably be used to identify you or your partner.

4. How we use Google user data

When you choose "Continue with Google," Google asks for your permission to share basic profile information with GoodNudgin. We request only Google's standard sign-in permissions (openid, email, and profile). We don't request access to your Gmail, Google Contacts, Google Drive, Google Calendar, or any other Google service, and we never see your Google password.

What we receive from Google:

What we don't do with Google user data:

• We don't sell it.
• We don't use it for advertising, including targeted, personalized, retargeted, or interest-based ads, and we don't share it with advertisers, sponsors, or data brokers.
• We don't use it to build or train AI or machine-learning models, and we don't send it to our AI or speech-to-text providers.
• We don't let people read it except (a) with your permission, (b) when needed for security (such as investigating abuse), (c) to comply with the law, or (d) when it's aggregated and anonymized for internal operations.
• We don't transfer it to anyone except as needed to provide or improve GoodNudgin's user-facing features (for example, our database and authentication provider, Supabase, which stores it for us), to comply with law, for security, or as part of a merger or acquisition with your notice and consent where required.

Where it's stored: your Google name, email, and photo link are stored in our authentication system and database (Supabase, US West region), protected by encryption in transit and access controls.

How to delete it:

• Delete your account: email hello@goodnudgin.com from the Google address on your account (or use the in-app delete option once it's available) and we'll delete your Google name, email, and photo link, along with the rest of your GoodNudgin data, within [30 days]. See Section 7.
• Revoke access: you can remove GoodNudgin's access anytime at myaccount.google.com/permissions. This stops Google from sharing your information with us in the future. It doesn't delete what we already have, so also request deletion if you want that.
• "Reset my account" keeps your Google sign-in details so you can keep using GoodNudgin. To remove them too, delete your account.

Limited Use disclosure: GoodNudgin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Features coming later

These aren't live yet. When they launch, we'll update this policy and, where noted, ask for your permission first.

• Push notifications. If you turn them on, your browser or device gives us a push "subscription" (a technical address for your device), which we store along with your time zone and quiet-hours settings. Notification previews stay generic (for example, "Goodie has a little idea for tonight") so they don't reveal details if someone else sees your screen. You can turn them off anytime in the app or your device settings.
• Text messages (SMS) via Twilio. Only if you opt in. Message frequency varies. Message and data rates may apply. Reply STOP to cancel and HELP for help. Consent to texts isn't a condition of any purchase. We keep a record of your consent and opt-outs. We don't share your mobile number or text-message consent with third parties for their marketing. We never text your partner unless your partner opts in themselves. [Confirm final SMS disclosures with Twilio and carrier (10DLC / toll-free) registration requirements.]
• AI processing for Pro. Pro features may send the relevant parts of your profile, your partner's profile, and your messages with Goodie to [LLM provider name] to generate personalized nudges and conversations. We'll choose providers and settings that don't use your data to train their models and that limit how long they keep it. [Confirm provider terms and retention.] AI-generated suggestions can be wrong; see the Terms.
• Payments via Stripe. If you subscribe, Stripe processes your payment details. We don't store your full card number; we receive limited information like your subscription status, the card brand, and the last four digits.
• Location-aware nudges (opt-in, off by default). If you choose to turn this on, we'll use only your own location, and only to time a nudge (for example, "near a florist"). We plan to process coarse place categories (like "grocery store") rather than exact coordinates or a location history, and to delete trigger events within [24 hours]. We never collect, request, or infer your partner's location, and there is no partner-tracking feature of any kind. You can turn location off anytime.
• Sponsored suggestions. Some ideas (like a local restaurant or class) may come from sponsors. They'll always be clearly labeled "Sponsored." We match them on our side; sponsors receive only aggregate results (like how many people saw or tapped an idea), never your profile, your partner's details, or your location. Allergies, dietary restrictions, relationship struggles, and similar sensitive details are never used to target ads; dietary info may be used only to filter out bad fits. [Decide whether users can turn sponsored ideas off.]
• Partner participation. Your partner may someday be able to join with their own account and consent (for example, to add their own likes and nevers). They'll get their own privacy notice. [Expand this section when the feature is designed.]

6. How long we keep information

• Account and profile data (yours and your partner's): while your account is active. When you delete your account, we delete it from our live systems within [30 days].
• Nudge history and check-ins: while your account is active, unless you reset or delete it sooner. [Consider a rolling limit, e.g., [24 months].]
• Feedback: up to [24 months], or until you ask us to delete it.
• Server logs: typically [30–90 days], depending on our hosting providers.
• Backups: deleted data may remain in encrypted backups for up to [X days] before being overwritten.
• Records we must keep (for example, payment records, SMS consent and opt-out records, or records needed to resolve disputes or comply with law) may be kept longer, but only as long as needed for that purpose.

7. Your choices and controls

• View and edit. You can see and change your profile, your partner's profile, preferences, and rankings in the app at any time.
• Reset your account. "Reset my account" deletes your profile, your partner's profile and preferences, your rankings and specifics, and your nudge history, clears GoodNudgin data saved in your browser, and starts you fresh. Your sign-in record (your Google name, email, and photo) stays so you can keep using GoodNudgin. [Pilot note: reset is currently available only to admin/test accounts; confirm it's available to all users in Settings before launch.]
• Delete your account. Deleting your account removes everything above plus your sign-in record. [Describe the in-app delete flow when it's built; until then:] Email us at hello@goodnudgin.com from the address on your account and we'll delete it within [30 days]. Feedback you sent is stored separately; we'll delete it too if you ask.
• Partner information. You can delete any detail about your partner at any time. If your partner (or anyone else) contacts us about information you entered about them, we may review it and, where appropriate or legally required, delete it.
• Notifications and texts. You can turn these off in settings, in your device settings, or (for texts) by replying STOP.
• Disconnect Google. You can remove GoodNudgin's access at myaccount.google.com/permissions. That doesn't delete your GoodNudgin data; use delete for that (see Section 4).
• Voice input. Just don't tap the mic, or block microphone access for app.goodnudgin.com in your browser settings.

8. Your US state privacy rights (including California)

Depending on where you live, including California and other states with consumer privacy laws (such as Colorado, Connecticut, Oregon, Texas, Virginia, and others), you may have the right to:

• Know and access the personal information we have about you, including the categories, sources, purposes, and who we share it with;
• Correct inaccurate information;
• Delete your personal information;
• Get a copy of your information in a portable format;
• Opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. (We don't sell or share personal information or do targeted advertising, but you can still make the request.);
• Limit the use of sensitive personal information. We use sensitive information (such as allergy or dietary notes) only to provide the service you asked for; and
• Not be discriminated against for exercising these rights.

How to make a request: email hello@goodnudgin.com with the subject "Privacy request," or use [in-app request link, if built]. We'll verify your request by confirming it comes from the email address on your account, and we'll respond within the time the law requires (generally 45 days). You can use an authorized agent; we may ask for proof that they're authorized. If we deny your request, you may be able to appeal by replying to our decision; if we deny your appeal, you can contact your state attorney general.

California notice at collection. In the past 12 months we've collected these categories of personal information: identifiers (name, email, phone, device ID, IP address); personal information under Cal. Civ. Code § 1798.80 (name, phone); internet or other electronic activity (app usage, logs); approximate location (city or ZIP you enter); inferences (such as how you or your partner feel most loved); and sensitive personal information only to the extent you enter allergy or dietary details. Sources, purposes, recipients, and retention are described in Sections 1–6. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing personal information of anyone under 16. California residents may also request information about disclosures for direct marketing ("Shine the Light"); we don't make such disclosures.

[Attorney review: (1) whether any allergy/dietary or relationship information is "consumer health data" under Washington's My Health My Data Act or Nevada SB 370, which may require a separate consumer health data privacy policy and consent; (2) which state laws apply at GoodMoyer's size (many have revenue or volume thresholds); (3) how to handle rights requests from a non-user partner whose information a user entered.]

9. Children

GoodNudgin is only for adults 18 and older. We don't knowingly collect personal information from anyone under 18, and we ask that you not enter personal details about anyone under 18. (A simple answer like "we have kids at home" is fine; names and other details about children aren't needed.) If you think someone under 18 has given us information, contact us at hello@goodnudgin.com and we'll delete it.

10. Security

We use reasonable safeguards for an app that holds personal relationship details, including encryption in transit (HTTPS), access controls that restrict each account's data to its owner at the database level, and limited internal access. No system is perfectly secure, though, so we can't guarantee absolute security. If we learn of a breach that affects your information, we'll notify you as required by law.

11. Where your data is stored

GoodNudgin is offered only in the United States. Our main hosting and database providers store data in the US (West). If a service provider processes data elsewhere, we'll require appropriate protections.

12. A note on love-related terms

GoodNudgin talks about the different ways people feel loved (for example, kind words, quality time, help with tasks, gifts, and physical affection). GoodNudgin is not affiliated with, endorsed by, or sponsored by The 5 Love Languages® or its author or publisher. [Attorney: confirm trademark notice wording.]

13. Changes to this policy

We'll update this policy as GoodNudgin grows, especially when we launch the features in Section 5. We'll change the "Last updated" date above, and for material changes we'll give you notice in the app or by email before they take effect. Where the law requires, we'll ask for your consent.

14. Contact us

Questions, requests, or concerns: [GoodMoyer LLC / legal entity TBD] Email: hello@goodnudgin.com Mailing address: [mailing address]