Privacy notice

Data controller

The data controller is Eren Öztürk. For any privacy question or request: privacy@nuddle.app

What we process

• Your phone number. It is the only identity of your account; your sign-in code is sent to it by SMS.
• Your name and, if you add one, your profile picture.
• Your connections: whom you invited, your relationship (partner, mother and so on) and the name and phone number of the person you invited. We do not read your contacts; we only take the number of the person you pick. If the person you invited does not use the app yet, their number is kept so they see the invite when they sign up with it.
• Tasks: the text you wrote, the task's title, detail, time, who it was written to, notes and how it ended. When you dictate, your phone's speech recognition turns your speech into text; your voice never reaches us.
• Your poke history: which poke rang when, after which one you acted, snoozes. From it a short summary of how you should be poked is written.
• Photos: the photo you send to show that a task is done.
• Your settings: quiet hours, time zone and whether people you know may be told.
• Device data: your phone's notification key so we can reach it, whether permissions are on, whether pokes rang on time on the phone, each phone's model, app version and when it was last seen so you can see in My devices where you are signed in (we keep no IP addresses), and if the app crashes or an action fails, an error report (phone model, Android version, the screen that was open, the app's last steps and the error log; never task text, names, numbers or photos).

Why we process it

To provide the app to you: signing in, delivering tasks, ringing pokes on time, showing the photo to the other person. This is necessary to perform our contract with you (KVKK art. 5/2-c).

To keep the app working and make it better: crash reports, counting sign-in attempts against abuse, and measuring the quality of the AI's plans. This relies on our legitimate interest (KVKK art. 5/2-f).

We do not use your data for advertising, we do not sell it and we do not give it to anyone for marketing.

AI

We use an AI model to turn what you write into a task and to plan when and how loudly the pokes ring. When turning the text into a task, the text you wrote goes to the model together with your name, your local time and weekday, your time zone, the language and clock formats (for now the same for everyone: Turkish, week starting Monday, 24-hour clock), and the names of your active connections with what each person is to you. Phone numbers, person and task ids, photos, quiet hours and your other tasks do not go with this call. For the plan, the task itself, your time zone, your quiet hours, the names of the person who wrote to you and of your connections with your relationship, and the titles of your recent tasks with how they ended also go. Your photos do not.

We keep the input and the answer of these calls to see whether the plans were right and to improve them. When you delete your account, these records are deleted too.

Who we share it with

The person you are connected with sees your name, your profile picture, your phone number (so they can call you) and how your phone can be poked right now. Only the two of you see the tasks, notes and photos you write to each other. One exception: if you miss a task, one of your own connections may be told its title and that you are not answering. You can turn this off with the setting "Benim işlerimde tanıdıklarımı kullanabilirsin" in Profile.

The companies we use, only as much as they need for their job:

• Supabase: database, sign-in and photo storage. Servers in Frankfurt, Germany.
• Vercel: website and server code. The code runs in Frankfurt, Germany.
• Google Firebase: notifications and crash reports. The US and other countries.
• Twilio: the sign-in code SMS. The US.
• OpenRouter and the provider of the AI model that runs through it. The US and other countries.

Transfer abroad

These companies are abroad or were founded abroad, so your personal data is transferred outside Turkey: to Germany, the US and the other countries these providers work in. The transfer is made in line with article 9 of KVKK.

How long we keep it

• Photos are deleted when the task closes.
• Everything else is kept while your account is open.
• When you delete your account, your phone number, name and profile picture are deleted at once, your tasks and everything else within 7 days. What is deleted is listed below.
• Crash reports stay in Firebase for at most 90 days, not linked to your phone number.

Deleting your account

You can delete your account in the app under Profile > Hesabı sil. If you cannot reach the app, follow the steps on nuddle.app/delete-account. When you delete your account, this is deleted:

• Your phone number, name and profile picture.
• Your connections and the invites you sent.
• The tasks you wrote and the tasks written to you, with their notes and photos.
• Your poke history and the poke summary we learned for you.
• The records of the AI calls.
• The notification keys and session records of your phones.

Waiting list

If you are in a country where you cannot sign in to Nuddle yet, the app offers to take your e-mail address. We keep the address, the ISO code of the country, the app language and the date; your phone number is not part of this record. To limit abuse we also keep, for one hour, a scrambled form of the network address the request came from, from which the address cannot be read back. We use the address only to tell you when Nuddle opens in that country, never for anything else and never give it to anyone.

We delete the record after the announcement, or after 12 months at the latest. To have it deleted sooner, write to privacy@nuddle.app with the address; we delete it within 30 days.

Your rights

Under article 11 of KVKK you can ask:

• Whether your data is processed, and if so, for information about it.
• Why it is processed and whether it is used for that purpose.
• To whom it is transferred, in Turkey and abroad.
• To have it corrected if it is incomplete or wrong, deleted or destroyed, and for those it was transferred to to be told.
• To object to a result against you that comes only from automated analysis.
• For compensation if you suffer damage from unlawful processing.

Requests

Write your request to privacy@nuddle.app, with the phone number of your account. We answer within 30 days at the latest.

Children

Nuddle is not for children under 13. People under 18 should use Nuddle with the permission of a parent or guardian.

Website

nuddle.app uses one cookie, only to remember the language you picked. There are no advertising or tracking cookies.

The promo video on the home page is hosted on YouTube. Until you press play the page loads nothing from YouTube; when you do, the video comes from youtube-nocookie.com under Google's own privacy rules.

Changes

If we change this notice, the current version is published on this page and the date above is updated.