Privacy
Last updated 27 July 2026
Navis is a focus app for people with ADHD. There is no advertising, no tracking pixels, and nothing about you is sold or shared with anyone for marketing. Navis does record how the app is used, on its own servers, to work out what to improve. This page says exactly what is stored, why, who touches it, and how to get it back or delete it.
What is collected
When you sign up
- A username you choose. It does not have to be your real name and there is no check that it is.
- A password, stored only as a bcrypt hash. The plain password is never written to disk or logs, and cannot be recovered by anyone, including us.
- Your age, used once to confirm you are at least 13. It is not used for anything else.
- A recovery code, also stored only as a hash. Shown to you once and never again.
No email address is asked for, so there is nothing here that identifies you outside the app.
What you put in
- Task names, deadlines and how long you plan to spend on them.
- Which sessions you started, finished or stopped, and when.
- Your working hours, session length, and a rough location if you enter one.
- Routines like meals, and whether you have logged them today.
What is worked out automatically
- Your timezone, read from your browser. No permission prompt is involved and it is only used so plans land on the right day.
- Your location, only if you tap Use my location and allow it. The coordinates are turned into a place name and then discarded; only the name is kept.
- A device identifier Navis generates itself, so it can tell your phone from your laptop. It is random, local to that device, and not linked to anything else.
What is not collected
- No advertising or cross-site tracking of any kind. No Google Analytics, no pixels, no session recording, no profile of you sold or shared.
- An email address, if you gave one. Optional at sign up and afterwards. Used for one thing by default: resetting your password. Without one, losing your recovery code means losing the account, because there is no other way to prove it is yours. Add, change or remove it in Settings at any time.
- One exception, stated plainly: Vercel Analytics counts page views on the public pages so we know whether anyone is finding this. It sets no cookies, does not follow you between sites, and never sees anything inside your account. See the table below for what it receives.
- No advertising identifiers, and no advertising.
- No contacts, photos, calendar, health data or microphone.
- No location beyond a place name, and only if you ask for it.
- No cookies, including for the analytics above. Navis uses your browser's local storage to keep you signed in, which is functional rather than tracking, and it never leaves your device.
How the app is used
Navis records what happens in the app so it can be made better: sessions started and finished, where people give up during setup, which features go unused, how often a suggested sound is skipped. This is kept on Navis servers and nowhere else.
Nothing you write is included. No task names, no notes, no goals, no reflections. The record is a fixed list of event names with counts and flags beside them, and anything typed is refused before it is stored. There is no session recording and no screen capture.
Nothing is stored on your device for this. No cookie is set and nothing is read from your browser, which is why Navis does not put a consent banner in front of you. The legal basis is legitimate interest under Article 6(1)(f) GDPR: understanding how a product is used so it can be improved, without profiling and without sharing.
You can object. Settings, Privacy, turn it off. It takes effect immediately, nothing else changes, and no feature is withheld for it. That is your right under Article 21 and using it costs you nothing.
Email you might receive
Two kinds, separate on purpose.
Necessary mail arrives because you asked for something: confirming your address, or a password reset you requested. There is no opting out of these while an address is on the account, because they only ever answer something you did.
Occasional updates about Navis only if you ticked the box and then opened the link in the confirmation email. Ticking alone does nothing, and nothing is sent before that link is opened. It is the same link that confirms your address, so there is one email rather than two. At most one update a month. Every one carries an unsubscribe link that works in a single click without signing in, and you can also turn them off in Settings. Stopping them takes nothing else away.
What you agreed to is stored with the date and the exact wording that was on screen at the time, so there is a record behind it rather than a checkbox with no history.
Who else sees it
Four services are involved in running Navis. None of them is given more than the job needs.
| Service | What it sees | Why |
|---|---|---|
| Railway | Everything stored, as the database and server host | It is where your account lives |
| Vercel | The requests for the site's files | It serves the pages, and holds none of your account data |
| Vercel Analytics | Which page was viewed, roughly where from, and what kind of device. No cookies, no identifier that follows you, nothing from inside the app | Counting visitors to the public pages |
| Brevo | Your email address and the message being sent, and only if you gave an address | Sending password resets, confirmations, and updates if you asked for them. A French company, data held in the EU |
| NavisAI | Task names, deadlines and focus statistics, when you use the planner or ask for scores | It writes your plan and your notifications |
| Browser extension | Nothing. It reads your sign in from the Navis site and asks Navis two questions: is a session running, and what is on your site list. It cannot read pages, history or anything you type | Holding your chosen sites shut on a computer |
| Apple or Google push | The text of a notification, if you turn them on | It is the only way to reach a closed app |
The AI planner is the one to be aware of. When you tap Tell Navis, ask for momentum scores, or receive a daily nudge, the relevant task names and numbers are sent to NavisAI to generate a response. Your username, password and age are never sent. If you never use those features, nothing is ever sent to NavisAI.
Challenges and the board
Challenges are the one part of Navis where another person sees something of yours, so this section exists rather than a line buried above. It is off unless you turn it on.
- Nothing appears on a board until you join a challenge. Joining is the only route onto one.
- A board carries two things about you: the username you already chose, and a single number for that challenge. It does not carry your task names, your goals, your categories, your times of day, your streak, or anything else Navis knows.
- Only people who joined the same challenge can see its board. It is not a public web page and it is not indexed.
- Leaving deletes your row rather than hiding it. You disappear from the board immediately and your number is not kept.
- Rewards are in-app coins and nothing else. There is no money involved, nothing to pay to enter, and no prize outside the app.
When a person at Navis can see your account
There is an internal panel used to keep the service running. What it can see is limited on purpose, and the limits are enforced by the server rather than by the screen, so the parts you cannot see were never sent anywhere.
- By default it shows counts and nothing else: how many tasks you have, how many are done, how many hours you have focused. Not what any of them say.
- Reading your actual task names or goals is a separate action. It requires the highest level of access, a fresh security key at the moment it is done, a written reason, and it is recorded permanently along with who did it and why.
- There is no way to list everyone or export the database from that panel. It answers a search for one account at a time.
- That record cannot be edited or deleted by anyone, including whoever made it.
You can ask what is recorded against your account, and delete everything, from Settings. See "Your rights over it" below.
How long it is kept
Until you delete it. Navis does not expire accounts or quietly clear old data, because a history that disappears defeats the point of keeping one.
Push subscriptions are removed automatically when a device stops accepting them, for example when you delete the app.
Your rights over it
All of these are built into the app rather than requests you have to make.
- See it. Settings, Download everything we hold. That is every field stored about you on the server, not a summary.
- Take it. Settings, Back up. A plain JSON file you can read, keep, or restore into another account.
- Correct it. Everything Navis holds is editable in the app.
- Delete it. Settings, Delete my account. It is immediate and permanent, and takes your tasks, history and notification devices with it. Nobody can undo it afterwards, including us.
If you are in the UK or EU, those cover access, portability, rectification and erasure under the GDPR. You also have the right to complain to your data protection authority.
Security
- Passwords are hashed with bcrypt at cost 12 and never stored or logged in plain form.
- Everything travels over HTTPS.
- Signing out invalidates your session on the server, not just in your browser.
- The AI key lives on the server and never reaches your browser.
- Notification endpoints are restricted to the browsers' own push services.
No system is perfect. If you find a problem, please report it rather than exploit it, and it will be fixed.
Children
Navis is not for under-13s and asks your age at sign up to enforce that. If you believe a younger child has made an account, get in touch and it will be removed.
Changes
If this page changes in a way that affects what happens to your data, the date at the top changes and the app will say so. Small wording fixes will not.
Contact
Questions about any of this, or a request that the app cannot handle itself: amaan.nizam@study.thws.de.