NagLight Privacy Policy

Effective date: October 13, 2026

This policy explains what information the NagLight application ("NagLight", "we") collects, how it is used, stored, and shared, and the choices you have. It applies to the NagLight web app that AuroLeap runs on its own server for a small group of approved users, and to any future NagLight mobile apps. If someone else runs their own copy of NagLight with their own Google credentials, that copy is governed by that operator, not by this policy.

For an overview of the app, see the NagLight home page.

Information NagLight accesses

From your Google account (Google sign-in)

When you sign in with Google, NagLight receives your Google account’s unique identifier, your email address, and your basic profile information (such as your name). NagLight uses this only to confirm who you are, keep your data separate from other users' data, and show which account is signed in.

From your Google Drive (drive.file permission)

NagLight can access only the Google Drive files it creates or that you open with it. It cannot see, read, or change any other files in your Google Drive. With these files, NagLight:

  • creates your NagLight tracker spreadsheet,

  • reads your list of tracked items from that spreadsheet,

  • writes the date you check off a one-time item back into that spreadsheet, and

  • may add a help tab to that spreadsheet or save NagLight files to a Drive folder you use with it.

Information stored by NagLight

NagLight stores a copy of your tracked items (including the item list read from your NagLight spreadsheet) and a log of when you completed them.

Google tokens

When you connect Google Drive, NagLight stores the access token and refresh token Google issues. The refresh token lets NagLight keep your tracker in sync with your NagLight files in the background, without asking you to sign in every time.

How NagLight uses your information

NagLight uses your information only to provide and improve the features you see in the app: your tracker list, check-offs, status color, and related displays.

NagLight does not:

  • sell your information,

  • use your information for advertising,

  • use your Google data to train artificial intelligence or machine-learning models, or

  • allow people to read your Google data, except with your permission, when needed for security or to investigate abuse, or when required by law.

Limited Use of Google user data

NagLight’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How information is stored and protected

  • Your tracked items and completion log are stored as files on the server that runs NagLight, kept separately for each user.

  • Google tokens are stored on that server in a separate folder, one file per user, with file permissions that restrict access to the NagLight service and the server’s administrator.

  • Your NagLight spreadsheet and Drive files stay in your own Google Drive.

  • Access to NagLight is protected by Google sign-in and limited to approved accounts, and connections use HTTPS.

  • NagLight does not use analytics, advertising, or crash-reporting services.

Sharing

NagLight does not share, sell, or transfer your information to third parties, except:

  • Optional history mirror. With a user’s agreement, the server operator may turn on a mirror that keeps a change history of that one user’s NagLight data (including items read from their NagLight spreadsheet) in a private Git repository, for example on GitHub, controlled by that user. It is off by default, covers only that one user, and never includes other users' data.

  • Optional notifications and devices you set up. You can choose to connect your own smart bulb or a push-notification service (such as ntfy). A smart bulb receives only a color. A push notification contains a short status message, which can include the names of your most overdue items and how late they are.

  • Legal requirements. If required by law, or to protect the safety or rights of users or others.

Keeping and deleting your information

  • NagLight keeps your data on its server until you ask for it to be deleted. Removing NagLight’s access to your Google account stops NagLight from reaching your Google Drive files, but does not by itself delete the data or tokens already stored on the NagLight server.

  • You can download a copy of your NagLight data at any time using NagLight’s export feature.

  • You can remove NagLight’s access to your Google account at any time at myaccount.google.com/permissions.

  • To have your NagLight data and stored tokens deleted from the NagLight server, email [email protected]. We will delete them promptly after confirming your request.

  • If a history mirror was turned on for your account, its repository belongs to you and keeps its past history until you delete that repository.

  • Files NagLight created in your Google Drive belong to you. You can delete them from Google Drive at any time.

Children

NagLight is not directed to children under 13, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date. If NagLight starts using your information in a materially different way, we will ask for your consent first.

Contact

Questions about this policy or your data: [email protected]