Privacy policy

1. Who we are

Nudgeable Consulting (“we”, “us”) operates the website and application at https://aicap.nudgeable.app (the “Service”). We are based in India.

Privacy inquiries: team@nudgeable.ai.

2. Who this policy covers

This policy describes how we handle personal information about end users of the Service—people who browse or sign in to use Nudgeable.

3. Information we collect

• Account details. When you create an account or sign in (including with Google), we process information needed to operate your account, such as your email address and name, along with identifiers from our authentication provider.
• Learning activity. When you use learning features, we process information such as progress, completions, and scores associated with your account.
• Sign-in & sessions. We use cookies and similar technologies as needed for secure sign-in and session management through Supabase Auth. If you use Google sign-in, Google processes your login according to Google's policies; see also Authorization & consent.
• Usage analytics. We collect limited first-party analytics (for example page views and certain clicks) to understand how the Service is used. This may include event type, page path, referring URL, optional contextual metadata about the interaction, a random identifier for your current browser session (stored in session storage; it does not persist across browser sessions), internet protocol (IP) address, and timestamps. Analytics are stored in our systems and access is restricted.
• Technical data. Like most online services, our systems receive technical information when you use the Service (for example IP address, browser type, and request timestamps).

4. How we use information

We use personal information to:

• provide, operate, and improve the Service and your account;
• record and display learning progress, completions, and scores;
• maintain security, diagnose issues, and prevent abuse;
• understand aggregate usage through analytics; and
• comply with applicable law and respond to lawful requests.

5. Legal bases

Depending on applicable law (including India's Digital Personal Data Protection Act, 2023, where it applies), we process personal data where permitted—for example to perform our contract with you, for legitimate interests that are not overridden by your rights, with consent where required, or to comply with legal obligations.

6. Sharing

We use trusted service providers to host and operate the Service. That includes Supabase for authentication and database hosting. If you choose Google sign-in, Google processes your Google account login under Google's policies.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and integrity of users and the Service.

7. International transfers

Your information may be processed in India and in other countries where our service providers operate, consistent with applicable law and safeguards required in your jurisdiction.

8. Retention

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes, including security backups and compliance. Retention periods may vary by data category.

9. Security

We implement reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure.

10. Your choices and rights

Depending on applicable law, you may have rights to access, correct, update, delete, or restrict certain processing, or to lodge a complaint with an authority. To exercise these rights, contact us at team@nudgeable.ai from the email address associated with your account where possible.

11. Children

The Service is not directed at children under 16. If you believe we have collected personal information from a child without appropriate authority, contact us and we will take appropriate steps.

12. Changes

We may update this policy from time to time. We will post the updated policy on this page with a new effective date.