Privacy Policy

1. Who we are

Naviga is provided by [Company Legal Name] Limited ("Naviga", "we", "us"), a company incorporated in Ireland (company number: [CRO number – pending registration], registered office: [registered address – pending]).

For any question about this policy or your data, contact us at support[at sign]getnaviga.com. If our processing of location and messaging data grows to a scale that requires it under Article 37 GDPR, we will appoint a Data Protection Officer and update this section with their contact details.

2. What data we collect

Account data — name, email address, phone number, password (or sign-in token if you use Apple, Google or phone sign-in), profile photo.

Location data — your device's precise location, used to calculate routes and, if you choose to turn it on, shared live with friends or groups you select. This is the most sensitive data we handle, and section 4 explains it in detail.

Trip data — routes you search, save or navigate, and CarPlay/Android Auto session data.

Messages and group content — messages, group names, group membership, and media you send through Naviga's messaging feature.

Calls — if you use in-app voice/video calls, call metadata (who called whom, when, duration). Call audio/video is not stored by us; it is relayed in real time by our calling provider (see section 7).

Device and usage data — device type, OS version, app version, crash logs, IP address.

Payment data — if you buy Naviga Premium, your purchase is handled entirely by the Apple App Store or Google Play. We receive confirmation that you have an active subscription, but never your card details.

3. Why we use your data, and our legal basis

Purpose and Legal basis (GDPR Art. 6):

Creating and running your account — Performance of a contract

Calculating routes and navigation — Performance of a contract

Sharing your live location with friends/groups you choose — Consent (you turn this on; you can turn it off at any time)

Messaging and group features — Performance of a contract

Voice/video calls — Performance of a contract

Fixing bugs, keeping the app secure — Legitimate interest (keeping the service safe and working)

Responding to support requests — Legitimate interest / contract

Complying with legal obligations (e.g. responding to a lawful authority request) — Legal obligation

We do not use your data for automated decision-making that produces legal or similarly significant effects on you. Route suggestions are algorithmic but do not fall into this category.

4. Location sharing with friends — how it works

- Sharing your live location with another user or a group is "off by default" and requires your explicit action to turn on.

- You can see, at any time, who you are currently sharing your location with, and you can stop sharing with any one person or the whole group with a single action, without needing their agreement.

- We retain live location data only for as long as needed to provide the feature; it is [deleted / anonymised — retention period to be confirmed, e.g. "deleted within 24 hours of the sharing session ending"].

- Misusing location sharing to monitor, stalk or harass another person is against our Terms of Service and our Safety Guidelines, and we will act on reports — see those documents for details.

5. Children

Naviga is not directed at, and may not be used by, anyone under 16 years old. If we become aware that we hold data from a user under 16, we will delete it.

6. Who we share data with

We use the following processors to run Naviga. Each is bound by a data processing agreement and only processes your data on our instructions.

Mapbox — Map and routing data.

Supabase — Account data, profiles, messages, real time events, live location, database.

Agora — Voice/video call relay.

Apple / Google — Sign-in, push notifications, in-app purchases.

Webempresa — Hosting for getnaviga.com (website only, not app data).

We do not sell your data, and we do not share it with third parties for their own marketing purposes.

7. International data transfers

Some of the providers above may process data outside the European Economic Area (in particular Agora, and depending on configuration, Apple/Google). Where this happens, we rely on Standard Contractual Clauses or another valid GDPR transfer mechanism to protect your data.

8. How long we keep your data

Account data: for as long as your account is active, plus [30 days] after deletion to handle any final requests.

Messages and group content: [retention period to be confirmed with engineering].

Live location: see section 4.

Device/crash logs: [retention period, typically 30–90 days].

9. Your rights

Under the GDPR, you have the right to:

- access the data we hold about you;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- receive your data in a portable format;
- object to, or ask us to restrict, certain processing;
- withdraw consent at any time (e.g. turn off location sharing) without affecting past processing;
- lodge a complaint with the "Irish Data Protection Commission" (dataprotection.ie), our lead supervisory authority, or with your own country's supervisory authority.

To exercise any of these rights, email support[at sign]getnaviga.com.

10. Security

We use industry-standard technical and organisational measures (encryption in transit, access controls) to protect your data. No system is 100% secure, and we will notify you and the relevant authority of any data breach as required by law.

11. Changes to this policy

We will post any changes to this policy here and update the "Last updated" date. If a change is material, we will notify you through the app.

12. Contact

support[at sign]getnaviga.com

Last updated: 15 September 2026.