Effective 27 October 2026. This policy describes how Elysra ("we") handles information when you
use the Nudglow Android app, the Nudglow API at api.nudglow.com, and this website.
Nudglow is a utility that keeps your PC awake by running pointer-movement workflows you build on
your phone.
| Information | When | Purpose |
|---|---|---|
| Google account identifier, email address and profile name | Only if you choose Sign in with Google | Create your account, show who is signed in. We request only basic sign-in scopes (openid, email, profile) — no Gmail, Drive or other scopes. |
| Credit balances, reservations and usage totals (in milliseconds) | While you use credits | Operate the credit meter that governs how long workflows run. Totals only — never the contents of your workflows or anything typed into them. |
| Purchase receipts (Google Play purchase tokens) | Only if you buy a subscription | Verify the purchase once with Google Play and grant the credits you paid for. Purchase handling is performed by Google Play. |
| Rewarded-ad verification data (signature, transaction id, ad unit, one-time nonce) | Only when you claim a rewarded-ad reward | Confirm with Google that a real ad view happened before granting ad credits. Contains no advertising profile data. |
| Technical logs (event name, outcome, duration) | Always | Reliability and abuse detection. Logs deliberately exclude account identifiers, tokens and request bodies. |
We do not read or store the contents of your workflows, the text you configure to be typed, the names of programs or windows on your computer, your contacts, photos, files or location. Workflow definitions live on your phone. The mouse activity itself happens on your own computer and is not recorded anywhere.
The app can show rewarded ads served by Google AdMob. Google's SDK collects device and advertising identifiers subject to your consent choices and Google's policies; see How Google uses information when you use our partners' sites or apps. You can decline ads entirely — the app works without them — and you can reset your advertising identifier in your Android privacy settings at any time.
All traffic to the API uses HTTPS. Session tokens, account identifiers, challenge nonces and receipt identifiers are stored only as salted hashes. Database credentials are held in restricted secret files, and the database is reachable only from the API service's private network. Server sessions expire after 15 minutes. Financial records (credit grants, purchases, ad rewards and usage totals) are kept in an append-only journal so your balance can be reconstructed and audited; they are retained while your account exists and for up to 24 months after deletion in anonymized form where required for accounting and fraud prevention.
Nudglow is a productivity utility and is not directed at children. We do not knowingly collect information from children. The Google Play listing declares the appropriate audience and ad settings.
If this policy changes materially we will update this page and, for significant changes, show a notice in the app before the change takes effect.
Elysra · support@nudglow.com · privacy@nudglow.com