Privacy policy

Effective October 6, 2026

TubNudge works without an account, and then everything you enter stays on your phone. If you choose to sign in, a backup of your tub data is kept on TubNudge's server so you can restore it. If you also turn on sync or share a tub, that tub's data is kept there too, and the people you invite can see it.

Without an account

TubNudge keeps what you enter in a database on your phone: your tub's name and details, your maintenance schedule, the tasks you complete, soaks, notes, your own tasks, and the products, links, counts and purchases you save. Unless you sign in, none of it is sent to us or to anyone else, and the app does not contact our server at all.

With an account (optional)

In Settings you can sign in with Google to back up your data. Signing in is never required. If you do, TubNudge's server stores:

• Your email address and name, as Google provides them when you sign in, and Google's identifier for your account, so the server can recognize you the next time. We do not receive your Google password and we do not store your profile picture.
• A copy of your tub data: the same information as "Export data" in the app, which is the list under "Without an account" above. Each backup replaces the one before it. With it we store when the backup was made, how many tubs and entries it holds, and the app version that made it.

This information is used only to back up your data and restore it for you, and, if you turn them on, to sync your tubs between your phones and share a tub with the people you invite. It is never sold, never used for advertising, and never shared with anyone except the people you invite to a tub, as described below.

Syncing between phones (optional)

On the Account screen you can turn on "Sync between phones". It is off until you turn it on. With sync on, the server stores each of your tubs separately, with everything that belongs to that tub: its details and schedule, the tasks completed, soaks, notes, your own tasks, and the products, links, counts and purchases you saved for it, including entries you have removed (so the removal reaches your other phones). With each tub it stores when it was last changed, how many entries it holds, and the app version that wrote it. Entries you make while signed in record that your account made them.

Your phones signed in to the same account exchange this data with the server while the app is open. The backup described above is still kept. Turning sync off stops this phone from syncing; the tubs stay on your phone and on the server until you delete them or your account.

Sharing a tub (optional)

You can invite up to four people to a tub you sync. When you share a tub:

• The people you invite see that tub's data: everything listed under "Syncing between phones" for that one tub. They do not see your other tubs or your backup.
• They see your name and email address, and you and the other people in the tub see theirs. An invite link shows the tub's name and your name and email address to the signed-in person who opens it, before they join.
• Names appear on entries. A task someone completes, a soak or a purchase they record in a shared tub carries their name for everyone in that tub.
• An invite link gives access to whoever opens it first. It works once and expires after seven days, and you can cancel it before it is used. Send it only to the person you mean. The server keeps a record of each invite (which tub, when it expires, whether it was canceled, and which account used it), not the link itself.
• Everyone in a tub can add to it. The people you invite can complete tasks, log soaks, add notes and update supplies. Changes they make reach your phones.

You can remove someone at any time, and anyone you invited can leave. Leaving or being removed takes the tub off that person's phone the next time their app syncs; entries they made stay in the tub's history, without their name. If you are invited to someone else's tub, that tub belongs to its owner: it is not part of your backup, and it comes off your phone when you sign out.

The server is operated by Blerdev LLC, the developer of TubNudge, in the United States. The app reaches it through Cloudflare over an encrypted connection; Cloudflare processes technical details of each request, such as your IP address, to deliver it and protect the service. The server keeps a short-lived technical log of requests for the same purpose.

The app keeps your sign-in on your phone in Android's secure storage. "Sign out" removes it from the phone and leaves your account and backup on the server.

Asking the helper (optional)

Signed in, you can ask "Ask TubNudge" a question about your water or upkeep. Nothing is sent unless you ask. When you do, your question, the earlier messages of that conversation and details of your tub (its name, model, size, sanitizer, schedule and recent upkeep) are sent to our server and from there, through OpenRouter, to an AI model provider that writes the answer. Your name, email address and account identifier are not sent with it.

We do not store your questions or the answers. The server keeps only counts for your account for each month: how many questions you asked, and how much text went to and came back from the model. We ask OpenRouter to use only providers that do not keep what they are sent or train on it. On your phone the conversation is gone when you leave the screen.

Buying TubNudge Pro (optional)

TubNudge Pro is sold through Google Play. Google handles the payment, under Google's privacy policy; we never see your card or other payment details.

To know whether you have Pro, the app uses RevenueCat, a service that keeps track of in-app purchases. In a version of the app that sells Pro, the app contacts RevenueCat when it starts, and RevenueCat receives: a customer identifier (a random one made on your phone, or your TubNudge account's identifier if you are signed in), what you bought and when (the product, the purchase and renewal dates, and Google Play's token for the purchase), your country and currency as Google Play reports them, and technical details such as the app's version, your phone's model, Android version and language, and your IP address. It does not receive your name, your email address or anything about your tubs, and we do not use an advertising identifier. RevenueCat's handling of this is described in RevenueCat's privacy policy.

If you are signed in, TubNudge's server asks RevenueCat whether your account has Pro and stores the answer (yes or no) with your account, so that Pro also works on your other phones. RevenueCat tells our server when a purchase is renewed, canceled or refunded. Deleting your account removes that answer from our server; your purchase history stays with Google Play, and with RevenueCat under the customer identifier.

Signing in with Google

Sign-in happens on Google's own page, in a browser tab, and is subject to Google's privacy policy. TubNudge asks Google only for your name and email address. It does not ask for access to your contacts, files, calendar, or anything else in your Google account.

Deleting your account and backup

In the app, open Settings, tap "Back up and sync", then "Delete account and backup". This deletes your account and its backup from the server. It also deletes the tubs you own from the server for everyone: a tub you shared comes off the phones of the people you shared it with the next time their app syncs. You are removed from any tub someone else shared with you, and invites you made stop working. What is on your phone stays there. You can also write to support@tubnudge.com from the email address of the account and we will delete it for you.

Uninstalling TubNudge, or clearing its storage in Android's settings, removes everything stored on the phone. It does not delete an account or its backup; use one of the two ways above for that.

What we don't do

• No analytics, advertising, or tracking, and no advertising identifiers.
• No crash reports sent to us.
• No selling of your data, and no sharing of it except with the people you invite to a tub and, for purchases, as described under "Buying TubNudge Pro".
• No access to your location, contacts, camera, microphone, or photos.

Permissions the app asks for

• Notifications, to show your daily reminder. You can decline, and the app still works without reminders.
• Alarms and reminders, an optional Android setting that lets the reminder arrive at the exact time you chose.
• Internet access, used for the optional account (signing in, backing up, restoring, syncing and sharing a tub, asking the helper, and deleting the account) and, in a version of the app that sells Pro, to check with RevenueCat whether you have it.
• Google Play billing, so that TubNudge Pro can be bought through Google Play. Nothing is bought unless you choose to.

Backup files

With or without an account, you can export your data as a file and import it again, for example on a new phone. The file goes only where you send it: when you share it to a cloud drive, an email, or another app, that service's own privacy policy applies to the copy it holds.

Links you save

If you save a link for a product, tapping it opens that web page in your browser. TubNudge does not change the link or add anything to it. The site you visit has its own privacy policy.

This website

tubnudge.com uses no cookies and no analytics. It is hosted by Cloudflare, which processes technical details of each request, such as your IP address, to deliver the pages and protect the service. After you sign in with Google, the page tubnudge.com/auth passes the result of the sign-in back to the app on your phone; it stores nothing. An invite link opens the page tubnudge.com/join, which passes the invite to the app on your phone in the same way and stores nothing.

Children

TubNudge is a maintenance tool for hot tub owners and is not directed at children. Accounts are meant for adults, and we do not knowingly collect personal information from children.

Changes

If a future version changes what is collected or how it is used, this policy will be updated before that version is released, and the date above will change.

Contact

TubNudge is developed by Blerdev LLC. Questions about this policy: support@tubnudge.com.