Nagz Privacy Policy

Version 1.0 — Effective February 17, 2026

1. Introduction

Nagz ("we", "our", "us") provides a family-oriented AI-mediated reminder and task management service ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information.

2. Information We Collect

• Account Information: email address, display name, date of birth, and hashed password.
• Family Information: family name, membership roles (organizer, member, caregiver, child), and relationship records.
• Task Data: nag descriptions, due dates, categories, completion status, excuses, and escalation history.
• Device Information: device tokens for push notification delivery, device platform (iOS/iPadOS/macOS).
• Usage Data: timestamps, request IDs, and audit events for security and compliance purposes.
• AI Mediation Data: excuse text submitted for AI summarization, AI tone preferences, and mediation event records.

3. How We Use Your Information

• To provide and operate the Service.
• To send push notifications and SMS reminders you or your family organizer have configured.
• To generate family reports and gamification summaries for organizers.
• To enforce safety controls (blocking, abuse reporting, rate limiting).
• To comply with legal obligations and respond to lawful requests.

4. Children's Privacy (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act (COPPA). Child accounts (users under 13) require organizer consent before activation. We collect minimal information from children: display name, task-related data, and device tokens for notifications. Organizers can review, modify, or delete their child's data at any time.

5. Data Sharing

We do not sell your personal information. We share data only:

• With Apple Push Notification service (APNs) for push delivery (device tokens only).
• With SMS providers for SMS delivery (phone numbers only, when opted in).
• When required by law or to protect safety.

6. Data Retention

• Operational events: 24 months.
• Notification metadata: 12 months.
• User-generated content: until account deletion or 24 months of inactivity.
• Audit and moderation records: 36 months.
• Deleted accounts: data purged or anonymized within 30 days, except records required for legal compliance.

7. Data Security

We use encryption in transit (TLS) and at rest. Passwords are stored as cryptographic hashes. Access to data is restricted by role-based authorization enforced server-side.

8. Your Rights

You may:

• Access your data through the app.
• Request data export.
• Delete your account at any time.
• Revoke consents at any time.

Organizers may exercise these rights on behalf of their children.

9. SMS Communications

SMS messages are sent only after explicit opt-in consent. You may opt out at any time by revoking SMS consent in the app or by texting STOP. Text HELP for assistance. Message frequency varies. Message and data rates may apply.

10. Changes to This Policy

We may update this policy and will notify users of material changes. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy inquiries: privacy@nagz.app
For safety concerns: safety@nagz.app