Last updated: May 25, 2026 Effective: May 25, 2026
This is Navoura’s privacy policy. We’ve tried to write it in plain English. If anything is unclear, email us at privacy@navoura.app.
Navoura is operated by Welcome Lane LLC (“we,” “us,” “our”). Mailing address:
Welcome Lane LLC PO Box 530361 St Petersburg, FL 33747 United States
For privacy questions: privacy@navoura.app For general support: support@navoura.app
If you’re in the European Union, this policy is provided under the EU General Data Protection Regulation (GDPR). If you’re in California, additional rights under the California Consumer Privacy Act (CCPA) apply — see Section 9.
| Data | Why | Where it lives |
|---|---|---|
| Email address | Account login, billing receipts, account recovery, important service notices | Supabase (our database provider) |
| First name | To greet you in the app | Supabase |
| Account creation date, last active date | To know if an account is dormant and eligible for auto-deletion | Supabase |
| Subscription tier (Free / Plus / Pro) | To know what features you have access to | Supabase |
| Usage counters — number of Translator and Fathom calls per day | To enforce free-tier limits and to bill paid tiers correctly | Supabase |
| Crash reports (anonymized) | To find and fix bugs | Sentry |
When you tap Translator on a conversation, or Fathom on a reflection, the text of that specific item is sent to Anthropic’s Claude API for analysis. We do not store this text on our servers. We log only metadata: which feature, which model, how many tokens, how long the call took, what it cost us.
If you subscribe through the App Store, Apple handles your payment. We never see your credit card. Apple gives us an anonymous customer ID and a signed receipt. Their privacy policy applies to that transaction: https://www.apple.com/legal/privacy/
This is the part of the product we care most about. Three layers:
If you enable cloud sync in a future version of the app, you will be able to enable end-to-end encryption with a passphrase you control. We will not be able to read your reflections even if compelled by court order. That’s the design goal.
We share the minimum necessary with these service providers. Each is contractually required to protect your data:
| Provider | What they get | Why |
|---|---|---|
| Anthropic (Claude AI) | The text you send through Translator or Fathom, when you send it | Powers the AI features |
| Apple | Your subscription and payment | Handles App Store billing |
| Supabase | Your email, name, tier, usage counters | Hosts our database |
| Cloudflare | Encrypted network traffic between your app and our backend | Hosts our backend at api.navoura.app |
| Sentry | Anonymized crash reports | Helps us fix bugs |
We do not share data with advertisers, data brokers, marketing companies, or any other third party. Ever.
We may disclose data if legally required (a valid subpoena, court order, or other lawful demand). When we can legally do so, we will notify you before complying.
If you are in the EU/UK, your data may be transferred to and processed in the United States. These transfers are governed by the EU Standard Contractual Clauses and equivalent UK terms. We do not transfer data to countries lacking adequate protections.
| Data type | Retention |
|---|---|
| Account info while account is active | As long as you have the account |
| Account info after deletion | Removed within 30 days |
| Account info if dormant (no login for 2 years) | Account is auto-deleted; you’re emailed 30 days beforehand |
| Usage counters and billing records | Kept 7 years (US tax requirement) |
| Crash reports | 90 days, then purged |
| AI call metadata (no content) | 1 year, then aggregated |
| Reflection content sent to Anthropic | Not retained by us; not retained by Anthropic for training |
We take security seriously, but no system is perfectly secure. What we do:
In the unlikely event of a breach affecting your data, we will notify you within 72 hours of discovery, as required by GDPR.
You have the right to:
Exercising these rights is free and we will respond within 30 days. If you’re not satisfied with our response, you can complain to your local data protection authority.
In addition to the rights above, California residents have the right to:
Categories of personal information we collected in the last 12 months: identifiers (email, name), commercial information (subscription tier), internet activity (usage counters), inferences (none — we don’t profile).
To exercise CCPA rights, email privacy@navoura.app or use the controls in the You tab.
Navoura is not intended for users under 16. We do not knowingly collect data from children under 16. If you believe a child has created an account, email us and we will delete it immediately.
We may update this policy. If we make material changes (changes that affect what data we collect, who we share it with, or how it’s used), we will:
Continued use of Navoura after a change means you accept the new policy. If you don’t accept it, delete your account from the You tab — your data will be removed.
The “Last updated” date at the top of this policy shows when it was last changed.
This policy is written to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), Apple’s App Store privacy requirements, and equivalent regulations in the United Kingdom, Brazil (LGPD), and Canada (PIPEDA). It is not legal advice. Have an attorney review before relying on it for a public launch beyond TestFlight beta testing.