100% On-device · Offline · No trackers
Effective date: 16 July 2026 · Last updated: 7 September 2026
The short version: Nudge! records usage and choices for apps you select, locally on your device, after accessibility consent and Android approval. Nudge! has no upload server or telemetry. You may explicitly export history or encrypted backups to a storage provider you select. There are no accounts, ads, or third-party analytics. Optional payment, website, and Google Play review flows are handled by other providers.
This Privacy Policy explains how the Nudge! mobile application
(in.hichauhan.nudge, the “App”, “we”, “us”) treats your information, in the interest of full
transparency about how we handle sensitive user and device data. Installing or using the App is not consent to accessibility access; that requires a separate affirmative choice inside Nudge! and approval in Android settings.
Nudge! helps you use selected apps more intentionally by prompting you to set a mindful time limit when you open them. Everything needed to do this happens locally on your device. We do not operate any server that receives your data.
We do not receive your app-usage history on a server. We do not ask for your name, email address, phone number, contacts, location, photos, or account credentials.
The App creates and stores the following information only on your device, and only to make the App work:
com.instagram.android) of selected apps. The picker queries launchable apps, and launcher detection queries home-screen apps.This information is stored in the App’s private, sandboxed storage (local database and preferences) and is never uploaded anywhere by us.
To know when you open a guarded app, Nudge! uses Android’s Accessibility Service. We want to be completely clear about its scope:
The normal setup flow first shows an informational Accessibility Permission introduction. View Permission Details only opens the detailed disclosure; it does not grant permission or start monitoring. Not Now continues without monitoring. On the following detailed disclosure, Agree And Enable records agreement and opens Android settings; Decline continues without automatic monitoring. Back, Home, dismissal, scrolling, and inactivity do not grant consent. There is no consent countdown or auto-dismissal. Without valid consent, you can reopen this flow through Configure > Enable Guard System Service > Review Accessibility Access, or the Home accessibility warning. With valid consent, the guard-service setting opens status and management controls without requesting agreement again. Disclosure version 2 requires renewed agreement even when an older disclosure was accepted.
Nudge! is a voluntary self-management app, not a disability-support accessibility tool, parental-control service, or device administrator. It does not prevent uninstall or block Android Settings and package-installation controls.
| Permission | Why it is used |
|---|---|
| Accessibility Service | After explicit in-app consent and Android approval, detects foreground package changes for reminders, local usage records, and quotas. Does not request screen-content access. |
| Foreground Service (special use) | Keeps your active timers running reliably in the background. |
| Post Notifications | Allows Android to show grouped running-timer notifications. You control notification visibility separately in Android settings. |
| Package Visibility (scoped) | Uses <queries> for launchable apps and home-screen launchers, not the broad QUERY_ALL_PACKAGES permission. Android may also make some packages automatically visible. App inventory is used locally for selection and detection, not uploaded. |
All App data is stored locally on your device for as long as the App is installed. Because we never receive your data, we have nothing to retain on our side. You are always in control:
History is not limited to two days or 100 records. It remains until you delete it, clear app storage, or uninstall. Explicit database migrations preserve older records. App data is excluded from Android cloud backup and device transfer. History cannot be recovered after deletion.
Optional manual export and backup: Configure → Backup and Restore opens the CSV export, encrypted backup, and restore options. CSV export contains readable history, including app names, package names, timestamps, recorded seconds, and decisions. Anyone with the CSV can read it. Backups encrypt history, monitored-app selections, rules, selected preferences, and current quota counters using AES-256-GCM with a passphrase-derived PBKDF2-HMAC-SHA256 key (600,000 iterations), a random salt, and a random nonce. The plaintext backup limit is 32 MB. Nudge! does not retain your passphrase and cannot recover it. Consent, active timers, and cooldowns are excluded.
Export is initiated only by you through Android's document picker. Your chosen provider may store the file online under its own privacy policy. These files are separate from automatic Android backup. Clearing Nudge! data or uninstalling does not delete exported copies; delete those with the provider. Restoring replaces local history and monitored-app selections, keeps monitoring off, and requires new accessibility consent. Existing quota consumption for today is not reduced.
Nudge! does not upload, share, rent, or sell your locally recorded usage history or settings. There is no advertising SDK, analytics SDK, app-operated upload service, or Internet permission. Optional external-provider interactions are described below.
The exception to keeping files inside private app storage is an export you explicitly choose. Nudge! writes that export to the destination you select; it does not choose a recipient or operate a backup server. The destination provider can process those files under its policies.
Nudge! is distributed through Google Play and uses a small piece of Google infrastructure:
Optional UPI support opens a compatible payment app with the merchant address and currency; you choose the amount and authorize payment there. Ko-fi and developer-site links open a browser. The payment provider, bank, or website may process payment, account, and technical data under its own policy. A recipient may receive normal provider transaction details; Nudge! does not read payment credentials or link transactions to usage history. Tips unlock no features. Declining to tip has no effect on monitoring.
Nudge! is a general‑audience productivity tool and is not directed at children under 13. We do not knowingly collect children's information on a server. The app does process local usage information as described above; it does not provide parental supervision or remote monitoring. The store's target-audience declaration must match the intended audience.
Your data stays within the App’s private, OS‑protected storage on your device. Because nothing is transmitted to or stored on external servers by us, the common risks associated with cloud data breaches do not apply to information handled by Nudge!.
We do not hold your usage history on a server. You control the local records through the deletion controls described in Section 5. You can pause monitoring on Home or withdraw accessibility consent in Configure; withdrawal stops monitoring and timers, but keeps existing history until you delete it.
For recovery outside the app: Android Settings → Accessibility → Installed apps → Nudge! → Off. Then Android Settings → Apps → Nudge! → Force stop, Storage → Clear storage, or Uninstall. Names vary by device. No PIN, uninstall protection, administrator removal, or factory reset is required.
Usage and reminders depend on Android package events and background execution. No data is captured before consent, while monitoring is paused, or after force-stop. A sudden process termination may lose the last unflushed interval. Nudge! does not promise exact system-wide screen-time measurement or medical outcomes.
Schedules and shared budgets are deterministic rules you configure, not autonomous AI decisions. Outside a selected app's schedule, its usage is not recorded or charged. Timed pause and the Quick Settings tile do not grant accessibility consent. Resume uses an inexact alarm and foreground-event checks; Android power management can delay it. No storage, exact-alarm, Internet, full-screen-intent, or usage-access permission is added for these features.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. A material change to accessibility data use requires a new in-app disclosure and affirmative consent before that use begins. Continued use, navigation, or an earlier permission grant is not a substitute for consent.
If you have any questions about this Privacy Policy or how Nudge! handles data, please reach out: