The short version.

What lives on your computer only

• Your task list, priority rankings, and check-in history — all stored at ~/.naggler/naggler.db (or C:\Users\you\.naggler\naggler.db on Windows).
• Your settings — cadence, quiet hours, snooze rules, theme.
• Any chats you have with Naggy if you're using a local model (Ollama) or your own API key.

This data never leaves your machine unless you export it yourself or ask an AI provider to look at it (see below).

What happens when you talk to Naggy

Naggler can call an AI model on your behalf. You choose one of three modes in Settings:

1. Naggler Cloud (default for new installs). Your message is relayed via our Cloudflare Worker to TokenRouter, a third-party AI gateway serving Claude-family models, and is handled in line with TokenRouter's policies. We apply a per-install daily rate limit (100 requests/day), plus per-network and overall daily caps to protect the shared free tier. The relay does not log message content — it only stores daily counters keyed by your anonymous install ID (and, for the network/overall caps, your IP and the date). If we later enable a direct Anthropic connection for the cloud tier, we will update this page.
2. Your own API key. We hand your request directly to the provider you choose — Anthropic, OpenAI, or OpenRouter — using the key you provided. We don't see it.
3. Fully local (Ollama). Nothing leaves your machine.

For Naggler Cloud, Anthropic's handling of API data is governed by their privacy policy. As of writing, API inputs aren't used to train their models. For BYOK, your chosen provider's data handling terms apply.

What happens when you enter an email on naggler.com

The email signup form on the download page does three things:

• Stores the email address, the country code Cloudflare reports, your browser's user-agent string, and a timestamp in a Cloudflare KV namespace we run.
• Triggers an internal notification so a human (currently: the founder) knows to send you the download link.
• Gets used once, and occasionally used again if we have something useful to tell you — a new signed build, a big fix, or the real launch. You can reply "stop" to any message and we'll delete your entry.

We don't sell, rent, or share the list. There isn't a list product here.

What we don't have

• No user accounts. No password to steal.
• No telemetry, analytics, or crash reporting in the app.
• No cookies on naggler.com beyond what's strictly needed to serve the page. (GitHub Pages may log standard HTTP request data on their side — that's outside our control.)
• No advertising, ever.

Your data, your move

Because the database lives on your computer, your right to access and delete it is enforced by the file system. Delete the ~/.naggler folder and the app has nothing left to say about you.

If you signed up on naggler.com and want your email removed from the KV store, write to feedback@naggler.com — we'll confirm the delete within a couple of days.

When this changes

If we add a new thing (a real account system, third-party analytics, a paid tier with payment records), we'll update this page and tell people who signed up for the download email. We won't quietly slide something in.