Privacy Policy

1. Introduction

Nagz ("we", "our", "us") provides a family-oriented AI-mediated reminder and task management service ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information.

2. Information We Collect

a) Account Information

Email address, display name, date of birth, and hashed password.

b) Family Information

Family name, membership roles (guardian, participant, child), and relationship records.

c) Task Data

Nag descriptions, due dates, categories, completion status, excuses, and escalation history.

d) Device Information

Device tokens for push notification delivery, device platform (iOS/iPadOS/macOS).

e) Usage Data

Timestamps, request IDs, and audit events for security and compliance purposes.

f) AI Mediation Data

Excuse text submitted for AI summarization, AI tone preferences, and mediation event records.

3. How We Use Your Information

• To provide and operate the Service.
• To send push notifications and SMS reminders you or your guardian have configured.
• To generate family reports and gamification summaries for guardians.
• To enforce safety controls (blocking, abuse reporting, rate limiting).
• To comply with legal obligations and respond to lawful requests.

4. Children's Privacy (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act (COPPA). Child accounts (users under 13) require guardian consent before activation. We collect minimal information from children: display name, task-related data, and device tokens for notifications. Guardians can review, modify, or delete their child's data at any time.

5. Data Sharing

We do not sell your personal information. We share data only:

• With Apple Push Notification service (APNs) for push delivery (device tokens only).
• With SMS providers for SMS delivery (phone numbers only, when opted in).
• When required by law or to protect safety.

6. Data Retention

• Operational events: 24 months.
• Notification metadata: 12 months.
• User-generated content (nag text, notes, excuses): until account deletion or 24 months of inactivity.
• Audit and moderation records: 36 months.
• Deleted accounts: data purged or anonymized within 30 days, except records required for legal compliance.

7. Data Security

We use encryption in transit (TLS) and at rest. Passwords are stored as cryptographic hashes. Access to data is restricted by role-based authorization enforced server-side.

8. Your Rights

You may:

• Access your data through the app.
• Request a full data export from your account settings.
• Delete your account at any time.
• Revoke consents (AI mediation, SMS, gamification) at any time.

Guardians may exercise these rights on behalf of their children.

9. SMS Communications

SMS messages are sent only after explicit opt-in consent. You may opt out at any time by revoking SMS consent in the app or by texting STOP. Text HELP for assistance. Message frequency varies. Message and data rates may apply.

10. Changes to This Policy

We may update this policy and will notify users of material changes. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy inquiries: privacy@nagz.app

For safety concerns: safety@nagz.app