Privacy Policy
Last updated: September 1, 2026
NagMeLater is a personal productivity assistant (reminders, to-dos, habits, goals, a daily coach, and optional Google Calendar meeting alerts) that works inside WhatsApp. This page explains, in plain language, what data we handle, why we handle it, and how to get it deleted. The short version: we collect the minimum needed to deliver your reminders, and we don't sell any of it.
What we collect
- Your WhatsApp phone number, it's how we know who to remind.
- The messages you send the bot: reminders, to-dos, notes, goals, habit check-ins, coach replies, and questions you ask. We store what is needed to run the features you use, and nothing from any other chat on your phone.
- Subscription status, whether you're on the free trial or a paid plan, and when it expires. We never see or store your card details; payments are handled entirely by our secure, PCI-compliant payment processor.
- Google Calendar events, only if you connect your calendar, see the dedicated section below. If you never text "connect calendar", we touch no Google data at all.
How we use it
- Your reminder text is processed once by a secure AI language service to understand the date, time, and task in your message. That's its only job, your messages are not used to train AI models.
- Your number and reminder are stored in our database until the reminder is delivered (and after, for recurring reminders to keep repeating).
- Messages are sent and received through an authorized WhatsApp Business API provider, operating on Meta's WhatsApp platform.
- We never message you for any reason other than the reminders you asked for, billing notices about your own subscription, and replies to questions you send us.
Who can read your messages
Your messages are processed automatically by the bot. On our side, no one reads your conversations in the normal course of the service; the operator accesses message logs only for support, debugging, and abuse prevention. Because NagMeLater runs on the WhatsApp Business API, messages are also delivered and stored by our WhatsApp Business API provider, like every business you chat with on WhatsApp (WhatsApp shows a notice about this inside the chat). That provider handles messages solely to deliver them, under its own privacy and security obligations, as described in "Who processes your data" below. We never publish or share a user's conversation publicly except in fully anonymized form, with anything identifying removed, and we will ask you first if there is any doubt.
Google Calendar data (optional feature)
If you choose to connect your Google Calendar (by texting "connect calendar" and approving access on Google's own consent screen), NagMeLater can send you a WhatsApp alert before each meeting. Here is exactly what that involves:
- What we access: read-only access to events on your primary Google Calendar, using Google's most limited events scope. We read the title and start time of events in the next 24 hours, refreshed roughly every 15 minutes. We never create, edit, or delete anything in your calendar, and we cannot see your email, contacts, files, or any other Google data.
- What we store: a Google access credential (so the connection survives between checks) and a rolling short-term cache of your upcoming events' titles and start times, kept only to know when to alert you. Events are dropped from the cache once they start or disappear from your calendar.
- How we use it: for one purpose only, sending you the pre-meeting WhatsApp alerts you asked for. The alert text is assembled by our own code from a fixed template, with no AI step anywhere in the process. Your calendar data is never sent to any AI or machine learning provider, including the AI services we use elsewhere in the product (Anthropic and OpenRouter), and is never used to create, train, or improve any AI model, whether in raw, aggregated, anonymised, or derived form. It is never used for advertising, never sold or rented, and no human reads it except as needed for security or support, with your consent, or where required by law.
- What is shared: the meeting title and time appear inside the WhatsApp alert we send you, which is delivered through our WhatsApp Business API provider like every other message. No other third party receives your calendar data.
- How to disconnect: text "disconnect calendar" to the bot, we delete the stored credential and the cached events immediately. You can also revoke access from your Google Account permissions page; we detect the revocation within about 15 minutes and delete our copy the same way. Full data deletion requests work as described below.
NagMeLater's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who processes your data
We use a small number of vetted service providers to run NagMeLater, each in a specific role: message delivery (an authorized WhatsApp Business API provider), reminder parsing (an AI language service), payments (a PCI-compliant payment processor, you'll see its name at checkout), and hosting (a cloud infrastructure provider with encrypted databases). Each receives only the data it needs to do its job, under its own privacy and security obligations. We do not sell or rent your data to anyone. A current list of providers is available on request at support@nagmelater.com.
The website
nagmelater.com uses Google Analytics to understand how visitors find and use the page (which sets cookies). The bot itself, the WhatsApp conversation, contains no advertising or third-party tracking.
We also use Microsoft Clarity on the website to see how pages are actually used: where people scroll, what they click, and where a page confuses them. Clarity records a playback of your visit to this website, meaning your mouse movement, scrolling, clicks and taps. It is how we find out that a button is being missed or a section is too long, which is difficult to learn any other way.
Two things it deliberately does not capture. Anything you type into a form is masked, including your WhatsApp number on the checkout box, the numbers and names you enter in our free tools, and any gift code shown to you. And it never runs on this privacy policy or on the terms page, because recording somebody reading a privacy policy is exactly the thing that policy should not be doing. Clarity is a website-only tool: it cannot see your WhatsApp messages, your reminders, or anything inside the bot.
Cookies & consent
The cookies on this site come from Google Analytics and Microsoft Clarity. We run no advertising or remarketing tags of our own, we do not build audiences, and we do not retarget you anywhere. One thing you should know rather than have us imply otherwise: Clarity is a Microsoft product, and when it loads it syncs an identifier with Microsoft's Bing domain, which Microsoft may associate with its own advertising services. That is Microsoft's behaviour, not ours, and the tag gives us no way to switch it off. If you would rather not take part, decline the cookie banner and Clarity is never loaded.
If you visit from the EU or UK, both stay off until you accept the cookie banner: analytics is held back and the Clarity script is not loaded at all, so nothing is recorded. Declining keeps both off and we remember that choice in your browser. Everywhere else they are on by default.
To change your choice at any time, clear this site's data in your browser settings and the banner will ask again on your next visit (EU/UK). One honest detail: if you accept and then change your mind during the same visit, recording stops on your next page load rather than instantly. Preferences like your banner choice are stored locally in your browser and never sent to our servers.
Data retention & deletion
Delivered one-off reminders stay in our database as history; recurring reminders stay active until cancelled. To delete all your data, reminders, number, subscription record, and any connected calendar credential and cached events, email support@nagmelater.com from any address and mention your WhatsApp number, or simply message the bot. We complete deletion requests within 7 days.
Security
Data is stored in a managed PostgreSQL database with encrypted connections. Payment webhooks are cryptographically verified. Access to production systems is limited to the operator of this service.
Children
NagMeLater is not directed at children under 13 (or the minimum age for WhatsApp in your country), and we do not knowingly collect their data.
Changes
If this policy changes materially, we'll update this page and the date at the top. Continued use of the service after changes means you accept the updated policy.
Contact
Anything unclear, or any request about your data: support@nagmelater.com.