Privacy Policy
Effective date: October 15, 2026
1. Summary
Nudge is designed to be local-first.
In plain language:
- Your focus presets, allowed apps, blocked websites, focus history, goals, and settings are stored on your Mac by default.
- Nudge uses macOS Accessibility permission to help return you to allowed apps during focus sessions.
- Nudge uses browser Automation permission to check the active/current tab in supported browsers during active focus sessions so it can redirect blocked websites.
- Nudge does not need to store your full browsing history to work.
- Nudge does not store full payment card details.
- On first launch, Nudge creates an account for you automatically, without an email or password. It is used to run the free trial and access checks.
- To allow one free trial per Mac and to protect gift keys from abuse, Nudge uses hashed identifiers of your Mac, your Nudge installation, and your IP address. In these trial records, only the hashes are stored.
- If analytics are enabled, Nudge may send limited product analytics events to Mixpanel.
- If you buy Lifetime Access, Paddle processes the one-time payment and Nudge stores the minimum data needed to bind the purchase, license, and entitlement to your account.
- Paddle asks for your email at checkout. Nudge stores that purchase email with the payment record so it can send your receipt and license key.
- Nudge sends marketing emails only after you confirm through a link in a confirmation email. The optional email checkbox at checkout starts unticked in the EU, the EEA, the UK, Switzerland, and Canada. Every marketing email has an unsubscribe link.
- If you contact support, we process the information you choose to send.
- If you join the website waitlist, Nudge stores your email address so we can notify you when the app is ready.
2. Scope
This Privacy Policy applies to:
- The Nudge macOS app.
- The Nudge marketing website.
- Nudge trial, purchase, license, entitlement, and support flows.
- Related downloads, update flows, and policy pages.
This policy does not apply to websites, apps, or services that you choose to block with Nudge. Those services have their own privacy practices.
3. Who controls your data
For this Privacy Policy, the data controller is:
Nika Dolidze, Individual Entrepreneur
Ivane Gravamadze 30, Tbilisi, 0100, Georgia
Identification number: 61001085814
Residence: Georgia
Email: privacy@nudgefocus.app
Phone: +995 555 182 149
If Paddle processes your payment, Paddle may separately act as merchant of record, reseller, controller, processor, or payment provider depending on the specific payment flow and applicable Paddle terms.
4. Data stored locally on your Mac
Nudge stores app data locally by default, mainly using macOS local storage such as UserDefaults.
Local data may include:
- Allowed app bundle IDs and app names.
- Blocked website domains.
- Blocked app bundle IDs and app names, if app blocking is enabled.
- Preset names, icons, allowed apps, blocked domains, blocked apps, and last-used timestamps.
- Active session state, elapsed time, remaining time, duration, pause count, and start time.
- Daily focus seconds.
- All-time focus seconds.
- Focus history by date.
- Completed or stopped session logs.
- Per-app focus time by date.
- Daily and weekly focus goals.
- Streak-related focus data.
- Notification preferences.
- Sound preferences.
- Analytics consent state.
- Analytics anonymous/distinct ID if analytics are enabled or initialized.
- Update preferences.
- Appearance mode.
- Last quick-focus duration.
- Hotkey bindings.
- Window layout/autosave information.
This local data remains on your Mac unless:
- You delete it in Nudge, if deletion controls exist.
- You delete the app’s local data manually.
- You uninstall/reset the app using macOS or third-party cleanup tools.
- A future import/export/sync feature moves or copies data with your action or consent.
5. Data used for focus enforcement
Nudge uses local system signals to provide focus sessions.
During an active session, Nudge may locally process:
- Which app is currently active/frontmost.
- Whether an allowed app is running.
- Whether a blocked app was launched.
- Whether the current active browser tab matches a blocked domain.
- Whether a supported browser is installed/running and has Automation permission.
- Session timer state.
This processing is needed to bring you back to allowed apps, block selected sites, and track focus time.
Nudge does not send raw browsing history by default. It also does not send raw app-switch timelines or raw active tab URLs to Nudge servers by default.
6. Accessibility permission
Nudge requests macOS Accessibility permission so it can provide app-focus enforcement.
Accessibility may be used to:
- Detect or respond to active app changes.
- Bring an allowed app to the front.
- Support focus session enforcement.
- Support strict mode or app blocking if enabled.
Nudge explains this permission before asking for it.
If you do not grant Accessibility permission, core app-focus enforcement may not work correctly.
You can revoke Accessibility permission in macOS System Settings.
7. Browser Automation permission
Nudge requests browser Automation permission for supported browsers so it can block selected distracting websites during active sessions.
Supported browsers currently include:
- Safari.
- Google Chrome.
- Arc.
- Comet.
Browser Automation may be used to:
- Read the active/current tab URL during an active focus session.
- Extract and normalize the domain.
- Compare the domain to your blocked domain list.
- Redirect a blocked active tab to a local Nudge locked page.
Important limits:
- This is not network-level blocking.
- This does not mean Nudge collects your full browsing history.
- This does not mean Nudge can block every browser.
- This depends on browser support, macOS permission state, and active/current tab behavior.
By default, Nudge does not store or transmit raw full URLs. If a future diagnostic or support feature needs URL-level data, Nudge will ask clearly first.
8. Website data
The Nudge website may process basic technical information when you visit it, depending on how it is hosted.
This may include:
- IP address.
- Browser type.
- Device type.
- Pages visited.
- Referrer.
- Time of visit.
- Basic server logs.
The website uses Google Analytics to understand aggregate website traffic. If you join the waitlist, Nudge stores your email address, submission time, and form source so we can notify you when the app is ready.
9. Product analytics
Nudge may use Mixpanel or another analytics provider to understand product usage and improve the app.
Nudge limits analytics and avoids sensitive content.
Analytics events may include:
- App opened.
- Session started.
- Session paused.
- Session resumed.
- Session completed.
- Session stopped early.
- Shortcut used.
- Allowed app added during session.
- Onboarding completed.
- Bug report initiated.
- Analytics test event.
Analytics event properties may include:
- App version.
- macOS version.
- Session duration in minutes.
- Actual duration in minutes.
- Number of allowed apps.
- Number of blocked sites.
- Number of pauses.
- Source of the action.
- Transport/debug metadata.
Analytics events do not include by default:
- Full active tab URLs.
- Raw browsing history.
- Full blocked domain lists.
- Full app-switch timelines.
- Payment card data.
- Sensitive text entered in support messages.
You can disable analytics in Nudge settings. If analytics are disabled, Nudge stops sending analytics events except for data strictly necessary to provide paid access, security, or legal compliance.
10. Purchase and Paddle data
If you buy Nudge Lifetime Access, the one-time payment is handled by Paddle.
Paddle may collect and process:
- Name.
- contact details.
- Billing address.
- Country/region.
- Tax/VAT information.
- Payment method details.
- Fraud-prevention and risk information.
- Transaction details.
- Invoices and receipts.
- Refund and chargeback information.
Nudge may receive and store from Paddle:
- Paddle customer ID.
- Customer email (the purchase email).
- Transaction ID.
- Price ID or plan ID.
- Product ID.
- Transaction and purchase status.
- Purchaser account ID and, if the account has one, its masked verified email.
- License and entitlement status. Raw license keys are not stored in ordinary readable database fields.
- Refund/adjustment status.
- Country/region where needed for tax, fraud, or support.
Nudge does not store your full card number.
Purchase email. For a purchase, Nudge does not ask for an email itself: Paddle collects it at checkout. Nudge stores this purchase email with the payment record for Lifetime Access or for a trial with a card added. It is used to send your receipt and license key. The purchase email is kept only with the payment record. It is not added to the account that paid and does not become its sign-in email. Nudge does not use the purchase email for marketing without your separate consent.
11. Trial, license, and entitlement data
To provide the one-time 7-day trial and Lifetime Access, Nudge processes account, purchase, license, and entitlement data.
Account created on first launch
On first launch, the app creates a Nudge account automatically, without an email or password. This anonymous account is used to run the free trial and access checks. It holds:
- A random account identifier.
- Trial start and end dates.
- Access status.
- The last Nudge app build that checked access.
Activating a license key, including a gift key, needs no email and no code, so no email is added to your account when you activate one.
Accounts that already had an email before accounts were created automatically keep that email.
Abandoned anonymous accounts are deleted automatically. An anonymous account is deleted when it has no purchase or unfinished payment, gift, trial with a card added (in any state), support message, or email subscription, and no activity for 180 days.
One free trial per Mac
Each Mac gets one free 7-day trial window, measured using server time. Reinstalling Nudge, clearing the keychain, or creating a new account on the same Mac continues the same trial window.
To allow one free trial per Mac and to protect gift keys from abuse, the app sends with its access checks:
- An identifier of your Nudge installation.
- A hardware identifier of your Mac, hashed on the device before it is sent.
The server hashes these identifiers again and also stores a hash of the IP address the request comes from. In these trial records, only the hashes are stored, never the original identifiers or the IP address. They are compared to recognize a repeat trial on the same Mac or installation and many new trials started from one network.
These trial records are kept after an account is deleted, so the trial window of that Mac stays the same.
For trial and entitlement checks, Nudge may store locally and/or in a backend database:
- User and Paddle customer identifiers.
- Hashed installation, Mac, and IP identifiers.
- Entitlement status.
- Trial start and expiration timestamps.
- The purchase email stored with each payment record.
- Purchase, transaction, and license identifiers.
- A normalized hash of the license key and encrypted recovery data needed to display or email the same issued key.
- Last entitlement check timestamp.
- Refund, chargeback, revocation, and restoration state.
Nudge does not require raw app-switch logs, raw browser URLs, or full browsing history to enforce the trial or Lifetime Access.
12. Support and bug reports
If you contact support or submit a bug report, we may process:
- Your contact details.
- Your message.
- App version and build number.
- macOS version.
- Focus-today summary.
- Diagnostics you choose to include.
- Attachments or screenshots you choose to send.
- Paddle transaction ID if the request involves a purchase or refund.
Do not send passwords, payment card numbers, private documents, or sensitive personal information in support requests.
If your account has no email, the support form asks for an address to reply to. That address is used as the reply-to address for your message. If your account has an email, it is filled in for you and you can change it.
13. Emails and marketing consent
Nudge works without an email address. You can choose to give one for:
- A trial-end reminder: one service email about a day before your free trial ends. The email for this reminder is stored separately from any marketing consent.
- Support replies: the reply-to address in a support message, as described above.
An email you give for a purchase, a trial-end reminder, or a support message is not added to marketing emails unless you separately opt in.
Marketing emails. Nudge sends marketing emails, such as focus tips and product news, only with your consent, and only after you confirm it by clicking the link in a confirmation email. Until you click that link, your address is not added to marketing emails. This applies to every source: the app (for example, the trial-end reminder or after a focus session) and checkout.
The checkout checkbox. At checkout, the line “I'd like to receive Nudge tips and updates by email.” is optional and never affects your purchase. If you visit from the European Union, the European Economic Area (Iceland, Liechtenstein, Norway), the United Kingdom, Switzerland, or Canada, or if your country cannot be determined, the checkbox starts unticked. In other countries it may start ticked, and you can untick it with one click at any time before you complete payment. Nudge records your choice only when you complete payment, from the state of the checkbox at that moment; if it is unticked then, you are not subscribed. If it is ticked, Nudge sends a confirmation email to your purchase email after the purchase is complete, and you are subscribed only if you click the link in it. To choose the starting state, our website host, Cloudflare, tells the checkout page which country your connection appears to come from, based on your IP address. Nudge does not store this country with your choice.
For each consent, Nudge records:
- The email address.
- Where the consent was given.
- The exact consent text and its version.
- For the checkout checkbox, whether it started ticked or unticked.
- The times of consent, confirmation, and unsubscribe.
Every marketing email includes an unsubscribe link. Consents that are not confirmed are deleted after 30 days. Marketing emails are sent through Resend, our email provider.
14. Data we do not intentionally collect by default
By default, Nudge does not intentionally collect:
- Full browsing history.
- Full active tab URLs.
- Keystrokes.
- Screen recordings.
- Screenshots.
- Private message contents.
- File contents from your Mac.
- Full payment card numbers.
- Precise location.
- Health data.
- Biometric data.
- Contacts.
- Calendar data.
- Microphone or camera data.
If a future feature needs additional data, Nudge will ask clearly and update this policy.
15. How we use data
We use data to:
- Provide focus sessions.
- Save presets and settings.
- Create your account automatically on first launch.
- Start and enforce the one-time 7-day trial, one per Mac.
- Issue, activate, and revoke Lifetime Access, and keep each license key to one Mac.
- Process billing and refunds.
- Provide support.
- Send a trial-end reminder and marketing emails you asked for.
- Send local notifications.
- Improve the app.
- Fix bugs.
- Prevent abuse, fraud, trial reset, license misuse, and payment misuse.
- Comply with legal and tax requirements.
- Maintain security and app reliability.
16. Legal bases for processing
Where laws such as GDPR require a legal basis, we rely on one or more of the following:
- Contract: to provide the app, trial, Lifetime Access purchase, license, support, and requested features.
- Consent: for optional analytics, optional future sync, optional support diagnostics, a trial-end reminder you ask for, and confirmed marketing emails.
- Legitimate interests: to improve the product, prevent abuse (including keeping one free trial per Mac, keeping each license key to one Mac, and protecting gift keys), keep services secure, and understand aggregate usage.
- Legal obligation: for tax, accounting, consumer rights, fraud prevention, and compliance.
17. Sharing data
We may share data with:
- Paddle for payments, billing, tax, invoices, refunds, chargebacks, and fraud prevention.
- Mixpanel for analytics if analytics are enabled.
- Google Analytics for website analytics.
- Hosting providers for website and backend infrastructure.
- Resend, our email provider, for purchase and license emails, support messages, trial-end reminders, and confirmed marketing emails.
- GitHub/Sparkle/update infrastructure for app downloads and update delivery.
- Professional advisers where needed, such as lawyers, accountants, or auditors.
- Authorities or third parties when legally required or needed to protect rights, safety, security, or prevent fraud.
We do not sell your personal information in the ordinary sense of exchanging it for money. If any future advertising or tracking arrangement changes this, we will update this policy before launch.
18. Retention
We keep data only as long as needed for the purposes in this policy.
We retain data as follows:
- Local app data: kept until you delete it or reset Nudge data.
- Analytics events: kept for the shortest useful period, typically 12 to 24 months.
- Waitlist emails: kept until launch notification is complete, you unsubscribe, or you ask us to delete the email.
- Support contacts: kept until the request is resolved plus a reasonable audit period, typically 24 months.
- Billing records: kept as required for tax, accounting, refund, chargeback, and legal obligations.
- Webhook event logs: kept long enough for idempotency, audit, billing support, and reconciliation.
- Trial, purchase, license, and entitlement records: kept while the account or Lifetime Access exists and for a reasonable period afterward for support, fraud prevention, refund, chargeback, and compliance needs.
- Anonymous accounts: deleted automatically after 180 days without activity when they have no purchase or unfinished payment, gift, trial with a card added (in any state), support message, or email subscription.
- Trial records for a Mac (hashed installation, Mac, and IP identifiers): kept after an account is deleted, so the trial window of that Mac stays the same.
- Marketing consents: unconfirmed consents are deleted after 30 days.
19. Export, deletion, and control
Nudge provides, or will provide as the relevant features are released, the following controls:
- Disable analytics.
- Reset analytics ID.
- Export local data.
- Import local backup.
- Reset focus history.
- Reset presets.
- Reset blocking rules.
- Delete all local Nudge data.
- Unsubscribe from marketing emails through the link in any marketing email.
- Request deletion of server-side billing/account data where legally possible.
Some billing records may need to be kept for legal, tax, fraud-prevention, accounting, or dispute-resolution reasons even after deletion is requested.
To request access, deletion, correction, or export of server-side personal data, contact privacy@nudgefocus.app.
20. Security
Nudge uses reasonable technical and organizational measures to protect data, including:
- HTTPS for backend traffic.
- Paddle webhook signature verification.
- Storing only aggregate quota data needed for entitlement.
- Avoiding raw browser URL logs.
- Avoiding full payment detail logs.
- Storing installation, Mac, and IP identifiers only as hashes.
- Strong authentication for backend admin access.
- Server-side environment variables for Paddle API keys and webhook secrets.
- Least-privilege database access.
- Audit logging for entitlement, refund, and admin changes.
- Dependency updates.
No system is perfectly secure. You are responsible for keeping your Mac, macOS account, and browsers secure.
21. International transfers
Nudge, Paddle, Mixpanel, hosting providers, and support providers may process data in countries other than where you live.
Where required, we use appropriate safeguards for international transfers, such as contractual protections or provider compliance mechanisms.
22. Children and teenagers
Nudge is not intended for children under 13.
If you are under the age of legal majority where you live, use Nudge only with permission from a parent or guardian.
If we learn that we collected personal data from a child under 13 without required consent, we will take reasonable steps to delete it.
23. Your privacy rights
Depending on where you live, you may have rights to:
- Access personal data.
- Correct inaccurate data.
- Delete personal data.
- Export personal data.
- Object to certain processing.
- Restrict certain processing.
- Withdraw consent.
- Complain to a data protection authority.
To make a request, contact privacy@nudgefocus.app.
We may need to verify your identity before acting on a request.
24. App Store privacy disclosures
If Nudge is later distributed through the Mac App Store, App Store privacy disclosures will match this policy and the actual SDK/app behavior.
Disclosures account for:
- Mixpanel analytics, if included.
- Paddle or StoreKit billing, depending on distribution channel.
- Support/contact data.
- Usage data used for analytics or entitlement checks.
- Data linked or not linked to identity.
- Data used for tracking or not used for tracking.
25. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If changes are material, we will take reasonable steps to notify you, such as updating the website, showing an in-app notice, or sending an email if we have your email.
26. Contact
Questions or privacy requests:
Email: privacy@nudgefocus.app
Phone: +995 555 182 149
Nika Dolidze, Individual Entrepreneur
Ivane Gravamadze 30, Tbilisi, 0100, Georgia
Identification number: 61001085814
Residence: Georgia
https://nudgefocus.app