Privacy Policy.

Nudge is a shopping companion operated by Nudge Coshop Private Limited, a company incorporated in India (Corporate Identity Number U74101UP2026PTC250920), with its registered office at 301 Crystal Flora Apartment, Forsyth Road, Plot 122/004, Lalbagh, Lucknow, Uttar Pradesh 226001, India ("Nudge", "we", "us" or "our"). Nudge helps you decide what to buy. It asks about what you need, searches online stores and shows you a short list of picks. It includes an artificial intelligence (AI) assistant called Nui, a shelf for the things you save and buy, and Huddles, where friends help you choose.

This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what choices and rights you have. It applies to the Nudge app for Android and iPhone and to the website at nudgecoshop.com (together, the "Platform"). "Personal data" means any data about you that can identify you. Under Indian law, we are the "Data Fiduciary" for your personal data, which means we decide why and how it is used.

We do not sell your personal data, we do not show advertisements, and we do not use advertising or analytics trackers. The website and the apps keep your sign-in, your settings and copies of some of your data (for example saved products, wishlists, purchases you mark, your chat list and your avatar) on your own device, in your browser's storage or the app's storage, so that Nudge works quickly and you stay signed in. Signing out or clearing your browser's storage removes them from the device. Nudge does not take payments. When you buy something, you buy it on the store's own website.

This Policy is written to meet the Information Technology Act, 2000 and the rules made under it, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as they apply to us from time to time. We use your personal data with your consent, or where the law allows or requires us to.

1. What we collect

We collect personal data in the three ways described below. Items marked optional can be left out without affecting the rest of Nudge.

What you give us

• Account. Your name, email address, username and password. We store your password only as a protected hash, which is a scrambled form that cannot be turned back into your password. If you sign in with Google or Apple, we receive your name and email address from them. When you create an account, you tick a box to confirm that you are 18 years or older and that you agree to our Terms of Service and this Policy, and we record when you did.
• Email codes and two-step sign-in. When you confirm your email address, or sign in with two-step sign-in turned on, we email you a 6-digit code. We keep only a protected hash of the code, how many tries were made, and when it was sent, used and expires. Codes expire after 10 minutes. Codes older than a day are deleted the next time a code is sent, and all of them when your account is erased. We also keep whether you have turned two-step sign-in on.
• Profile (all optional). Answers you choose to give, such as your age or age range, gender, clothing and shoe sizes, skin type, allergies, medical conditions, shopping interests and avatar.
• Shopping. Your answers to Nudge's questions and any notes you add; your chats with Nui, whether typed or spoken; photos you share with Nui; your chats on our website, and the photos you add to them, which our server keeps with that chat for a limited time and does not back up; the products you save, like or buy; and your order history.
• Social. Your friends and friend requests; Huddles, including messages, votes, reactions and the products in them; shelves you share; people you block; and reports you send.
• Support. Anything you send us when you contact support.

What we collect as you use Nudge

• Memory. Facts Nudge learns from your conversations and shopping sessions so that it does not ask you again, for example your preferred brands or an allergy you mentioned. You can see, edit and delete every Memory in Profile > Memory.
• Activity. The recommendations shown to you, the links to stores that you open, and whether you tell us that you bought something.
• Device and sign-in. A label for the device you signed in from, so that we can warn you about new sign-ins; your Internet Protocol (IP) address in our server logs; and the time of each request. If you allow notifications, a notification token for your phone, so that we can send notifications to it.

What we handle but do not keep

• Voice. Recordings of your voice are sent to be turned into text and are not stored. Nui's spoken replies are held temporarily for about 10 minutes and then dropped.
• Photos for Nui in the app. A photo you share with Nui in the app is described by an AI model and then discarded. We use only the description. (Photos you add to a chat on our website are kept with that chat for a limited time, as described above.)
• Virtual try-on. The live camera video goes from your phone, or your computer's camera on our website, directly to our try-on provider, Decart, and does not reach our servers. Each session lasts at most 15 seconds.

2. Health information

Allergies, skin sensitivities and medical conditions are sensitive. You never have to give them. If you do, or if you mention them in a conversation, we use them only to keep unsuitable products away from you, for example a moisturiser with an ingredient you are allergic to. To do this, they are included in the requests we send to the AI providers listed in Section 4. We do not use them for any other purpose. You can remove them at any time in Profile > Preferences, and in Profile > Memory on your Nudge App.

3. How we use it

We use your personal data only for these purposes:

• To ask you relevant questions and to find products that fit what you asked for, your budget, your sizes and your needs.
• To run Nui, the shelf, Huddles, sharing and notifications.
• To remember your preferences between sessions.
• To keep accounts safe, through sign-in protection, blocking, automatic checks of Huddle chat messages for abuse before they are sent, and review of reports about people, messages and AI replies.
• To send account emails, such as a code to confirm your email address, a sign-in code if you turn on two-step sign-in, and emails that reset your password or Shelf PIN or alert you to a new sign-in.
• To fix problems and keep the service running.

We do not use your data for advertising, and we do not sell it or share it with data brokers. If we want to use your personal data for a new purpose, we will tell you and ask for your consent first.

4. Who we share it with

We share personal data only with the service providers that run Nudge for us, and only what each one needs. They may use it only to provide their service to us.

AI providers may change as models improve. They process your data to give us a response, under the terms that apply to business customers of each provider.

We also share personal data in these cases:

• Friends. Your shelf is shown to the people you choose. Huddles, with their messages and votes, are shown to the people you invite and to anyone signed in to Nudge who opens the Huddle's invite link. Items on your private shelf are never shown.
• Stores. When you tap Buy, the store's website opens, and anything you do there is covered by that store's privacy policy.
• The law. We may disclose personal data if the law requires it, if a court or an authority with legal power asks for it, or to protect people's safety.
• Business changes. If we merge with another company, are acquired, or sell our assets, your personal data may pass to the new owner. The new owner must follow this Policy, and we will tell you before your data is handled under a different policy.

5. Where your data is processed

We store your data in India, with Amazon Web Services in Mumbai. The AI, try-on, search and email providers listed above process it on their own servers, mostly outside India. We send them only what each feature needs. We do not transfer personal data to any country that the Government of India has restricted.

6. How long we keep it

• Your account and its data are kept until you delete them.
• Deleting your account. You can delete your account in the app (Profile > Settings > Delete my account) or at nudgecoshop.com/delete-account. You are signed out at once and hidden from other people. Everything is erased permanently 14 days later. If you sign in before then, your account is kept. We also instruct our service providers to erase the copies they hold for us.
• Database backups are kept for up to 30 days, so deleted data leaves the backups within 30 days of being erased.
• Server logs are kept for 14 days.
• Reports that other people made about an account are kept after the account is deleted, to keep Nudge safe. Cost records are kept without anything that identifies you.
• Some laws require us to keep certain records, including logs of how data was processed, for a minimum period even after you delete your account. We keep only what the law requires, and we do not use it for any other purpose.

7. Your choices and rights

• See and change your profile, preferences and Memory in the app at any time.
• Delete single Memories, or your whole account (Profile > Settings > Delete my account, or nudgecoshop.com/delete-account).
• Keep things private by using the private shelf, restricting friends, or blocking people.
• Turn off notifications in Settings, or phone notifications in your phone's settings.
• Withdraw your consent at any time by writing to us. It is as easy to withdraw as it was to give. Withdrawal does not affect what we did before you withdrew. If you withdraw consent for something Nudge needs to work, that feature will stop working.
• Use your rights under the law. You have the right to get a summary of the personal data we process and the names of those we have shared it with; to have your data corrected, completed or updated; to have it erased; and to have your grievance answered. You may also name another person to use these rights for you if you die or cannot act for yourself. To use a right, write to support@nudgecoshop.com from the email address registered with your account. We reply within 30 days.
• Complaint. If we do not solve your concern, you can complain to the Data Protection Board of India. The law asks you to use our grievance process in Section 11 first. If you live outside India, you can also complain to the data protection authority where you live.

8. Security

Data travels over encrypted connections and is encrypted where it is stored. Passwords and Shelf PINs are stored only as protected hashes. Access to production systems is limited to the people who run Nudge. No system is completely secure, so please keep your password and passcode private. If a personal data breach affects you, we will tell you without delay, and we will report it to the Data Protection Board of India and to other authorities as the law requires.

9. Children

Nudge is only for people who are 18 years or older. Indian law treats anyone under 18 as a child, and it does not allow a service that learns from how you shop to track or monitor children. We ask you to confirm that you are 18 or older when you create an account, and we do not knowingly collect data from anyone under 18. If we learn that a person under 18 has an account, we will close it and delete the data, except where the law requires us to keep it. If you think a child has given us data, please write to us at support@nudgecoshop.com.

10. Changes

If we change this Policy, we will update the date above. We will tell you in the app before any change that affects how your data is used. If a change needs your consent, for example a new purpose, we will ask for it again.

11. Contact

Questions, requests or complaints: support@nudgecoshop.com.

In accordance with the Information Technology Act, 2000, the rules made under it, and the Consumer Protection (E-Commerce) Rules, 2020, the name and contact details of our Grievance Officer are:

• Name: Meghna Phanse, Engineering Lead and Member of the Founding Team
• Company: Nudge Coshop Private Limited, 301 Crystal Flora Apartment, Forsyth Road, Plot 122/004, Lalbagh, Lucknow, Uttar Pradesh 226001, India
• Email: support@nudgecoshop.com

The Grievance Officer also answers questions about how we process your personal data. We confirm that we have received a grievance within 24 hours and resolve it within 15 days.