NUDGE Privacy Notice
Last updated 28 October 2026.
NUDGE is an independent student project. It is not run or endorsed by Central Mindanao University.
Who this is for
NUDGE is for people aged 18 and older who are students at Central Mindanao University (CMU). You sign in with a Google account. Whether you really are a CMU student is checked by a reviewer (see below).
What we collect
- Sign-in details from Google: your name, e-mail address and a Google account identifier. Sign-in is handled by Supabase, our sign-in provider.
- Profile details you choose to add: display name, college, course, year level, a short bio, interests, what you are looking for (study, friendship, dating), study subjects and style, and, only if you choose dating, how you describe your gender and who you want to see. These last two are private and used only for matching.
- Photos you upload: up to 3. They are made small on your device before upload.
- Your age check: we ask for your birth month and year once. We do not store them. We store only the result (that you are 18 or older). If you are under 18, we keep a one-way scrambled code made from your e-mail address, so that the block cannot be undone by signing up again. That code cannot be turned back into your address.
- Chat messages: the text you send to a match. A message that breaks our rules (for example one that shares a phone number or is sexual) is blocked and not saved; we only keep a note that an attempt happened, without the text.
- Blocks and reports: who you block, and reports you make or that are made about you. When someone reports a person, we copy the last messages of that chat and, for reports about photos, that person's photos, so a reviewer can look at them. The reporter's name is never shown to the person reported.
- Verification request: if you ask to be verified, the time of your request.
- Premium payments (only if you buy it): the plan, amount, payment method, the reference number and the date. You send a screenshot of your payment receipt: it is read automatically by a Google AI model (Gemini) to confirm the reference number, name and amount, and is then deleted. If the check cannot settle it, the owner looks at the screenshot, and it is deleted as soon as they decide. We keep the payment record for our books; if you delete your account it is no longer linked to you.
- Technical data: your network address is seen by our hosting provider so it can limit abuse, and basic server logs are kept for a short time.
What we do not collect
We do not ask for or store your student ID number, ID images, selfies, face data, phone number, home address or social media accounts. Student verification is done by a reviewer in a short check where you show your CMU ID and your face (on a video call or in person). Nothing is recorded, photographed or saved. The reviewer sees your name and sign-in e-mail so the check can be set up, and we keep only a yes or no, who did the check, the date and the method. Before we ever collect or keep an ID or face image, we will update this notice and ask for your separate consent first.
How we use it
To run NUDGE: to show your profile to eligible people, to suggest matches, to keep the service safe (for example, blocking people who are under 18 or who break the rules), and to fix problems.
Who handles your data for us
- Google (sign-in)
- Supabase (the sign-in account record)
- Turso (the database that holds your profile and photos)
- Cloudflare (website and server hosting)
- Google (the AI model that reads Premium payment receipts)
These providers may store data outside the Philippines. We do not sell your data and we do not show advertising.
How long we keep it
We keep your profile and photos until you delete your account. Messages are deleted when a match ends or an account is deleted. Reports and the evidence copied into them are kept for 12 months and then deleted. If you delete your account, reports you made are deleted; reports made about you are kept for that 12 months so that people cannot avoid a decision by deleting their account. Deleting your account in the app removes your profile and photos. The under-18 block code is kept so the block cannot be undone. At the moment, removing your sign-in record from Supabase is done on request, by writing to us at the address below.
Your rights
Under the Data Privacy Act of 2012 (Republic Act 10173) you may ask to see, correct or delete your personal data, object to how it is used, and complain to the National Privacy Commission. To use these rights, write to us at the address below.
Under 18
NUDGE is for people 18 and older only. Giving a false age is against our rules and can lead to a ban.
Contact
See also the Terms of Use and Safety and help.