Privacy Policy — nudgeTab

Overview

nudgeTab ("we", "us", "our") provides a web application and Chrome Extension that lets you set time-based reminders on any webpage. This Privacy Policy explains what information we collect, how we use it, and your choices.

By using nudgeTab you agree to this policy. If you do not agree, please discontinue use.

Information We Collect

We collect only what is necessary to operate the service:

Account dataYour email address and a hashed password, provided when you create an account. Used solely for authentication.

Reminder contentThe title, optional note, URL, page title, and due date you enter for each reminder. This data is stored in your account and never analyzed, profiled, or sold.

Subscription dataIf you upgrade to Pro, Lemon Squeezy processes your payment. We store your Lemon Squeezy customer ID and plan status — no raw card details ever touch our servers.

Extension preferencesTheme (light/dark), accent color, and overlay position. Stored locally in chrome.storage.local on your device only — never sent to our servers.

Push subscriptionPro users only. A browser push subscription endpoint used to deliver reminder notifications. Not linked to any advertising identifiers.

Chrome Extension — Permission Disclosures

The nudgeTab Chrome Extension requests the following permissions. Each permission is used for exactly the stated purpose and nothing else.

activeTabReads the title and URL of the current tab when you click the extension icon, so you can create a reminder for that page without copying and pasting.

storageStores your authentication token and display preferences (theme, accent color, overlay position) locally on your device. No data from this storage is transmitted to third parties.

alarmsSchedules a wake-up at the exact time of each reminder, so the notification fires even if you haven't visited the app recently.

notificationsDisplays a system notification when a reminder is due, visible even when you are on a different tab or website.

tabsIdentifies the currently focused tab so the in-page reminder overlay appears on the right tab when a reminder fires.

scriptingInjects the reminder overlay card into the active webpage when a reminder fires. No page content is read, modified, or transmitted.

contextMenusAdds a "Set reminder for this page" entry to the browser right-click menu as a shortcut to open the extension popup.

The extension does not read page content, track browsing history, inject ads, or communicate with any server other than the nudgeTab API and Supabase authentication endpoints listed below.

How We Use Your Information

We use the information collected solely to:

Authenticate you and keep your account secure
Store, retrieve, and display your reminders
Send reminder notifications via the browser, email (Pro), or push (Pro)
Process subscription payments through Lemon Squeezy (Pro)
Respond to support requests you initiate

We do not use your data for advertising, profiling, machine-learning training, or any purpose beyond operating the service described above.

Third-Party Services

nudgeTab uses the following sub-processors. Each handles data only as described:

SupabaseHosts our PostgreSQL database and provides authentication. Your account data and reminders are stored on Supabase infrastructure in the EU region. Privacy policy: supabase.com/privacy

ResendDelivers reminder notification emails to Pro users. Receives your email address and reminder title/note for the purpose of sending the email. Privacy policy: resend.com/legal/privacy-policy

Lemon SqueezyProcesses subscription payments for Pro users. Lemon Squeezy acts as merchant of record and handles all payment card data under PCI-DSS compliance. Privacy policy: lemonsqueezy.com/privacy

We do not sell, rent, or trade your personal data to any other third party.

Data Retention & Deletion

Your reminders and account data are retained for as long as your account is active. Completed reminders older than your plan's history window (7 days free · 30 days Pro) are permanently deleted from our database automatically.

To delete your account and all associated data, contact us at support@nudgetab.com. We will permanently erase your account within 30 days of the request.

Data Security

All data in transit is encrypted via TLS. Data at rest is encrypted by Supabase's managed infrastructure. Access to production data is restricted to authorized personnel only. Authentication is enforced with row-level security policies in the database so your data is never accessible by other users.

No system is perfectly secure. If you discover a vulnerability, please disclose it responsibly to support@nudgetab.com.

Children's Privacy

nudgeTab is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Your Rights

Depending on your location, you may have the right to:

Access — request a copy of the personal data we hold about you
Correction — ask us to fix inaccurate data
Deletion — request that we erase your account and all associated data
Portability — receive your reminder data in a structured, machine-readable format
Objection — object to processing where we rely on legitimate interests

To exercise any of these rights, email support@nudgetab.com. We will respond within 30 days.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you by email or with an in-app notice at least 14 days before the change takes effect.

Continued use of nudgeTab after a policy update constitutes acceptance of the new terms.

Contact

Questions, concerns, or data requests can be sent to:

EMAILsupport@nudgetab.com