Privacy
Last updated 27 July 2026
Navis is a focus app for people with ADHD. There is no advertising, no tracking pixels, and nothing about you is sold or shared with anyone for marketing. Navis does record how the app is used, on its own servers, to work out what to improve. This page says exactly what is stored, why, who touches it, and how to get it back or delete it.
What is collected
When you sign up
- A username you choose. It does not have to be your real name and there is no check that it is.
- A password, stored only as a bcrypt hash. The plain password is never written to disk or logs, and cannot be recovered by anyone, including us.
- Your age, used once to confirm you are at least 13. It is not used for anything else.
- A recovery code, also stored only as a hash. Shown to you once and never again.
No email address is asked for, so there is nothing here that identifies you outside the app.
What you put in
- Task names, deadlines and how long you plan to spend on them.
- Which sessions you started, finished or stopped, and when.
- Your working hours, session length, and a rough location if you enter one.
- Routines like meals, and whether you have logged them today.
What is worked out automatically
- Your timezone, read from your browser. No permission prompt is involved and it is only used so plans land on the right day.
- Your location, only if you tap Use my location and allow it. The coordinates are turned into a place name and then discarded; only the name is kept.
- A device identifier Navis generates itself, so it can tell your phone from your laptop. It is random, local to that device, and not linked to anything else.
What is not collected
- No advertising or cross-site tracking of any kind. No Google Analytics, no pixels, no session recording, no profile of you sold or shared.
- An email address, if you gave one. Optional at sign up and afterwards. Used for one thing by default: resetting your password. Without one, losing your recovery code means losing the account, because there is no other way to prove it is yours. Add, change or remove it in Settings at any time.
- One exception, stated plainly: Vercel Analytics counts page views on the public pages so we know whether anyone is finding this. It sets no cookies, does not follow you between sites, and never sees anything inside your account. See the table below for what it receives.
- No advertising identifiers, and no advertising.
- No contacts, photos, calendar, health data or microphone.
- No location beyond a place name, and only if you ask for it.
- No cookies, including for the analytics above. Navis uses your browser's local storage to keep you signed in, which is functional rather than tracking, and it never leaves your device.
How the app is used
Navis records what happens in the app so it can be made better: sessions started and finished, where people give up during setup, which features go unused, how often a suggested sound is skipped. This is kept on Navis servers and nowhere else.
Nothing you write is included. No task names, no notes, no goals, no reflections. The record is a fixed list of event names with counts and flags beside them, and anything typed is refused before it is stored. There is no session recording and no screen capture.
Nothing is stored on your device for this. No cookie is set and nothing is read from your browser, which is why Navis does not put a consent banner in front of you. The legal basis is legitimate interest under Article 6(1)(f) GDPR: understanding how a product is used so it can be improved, without profiling and without sharing.
You can object. Settings, Privacy, turn it off. It takes effect immediately, nothing else changes, and no feature is withheld for it. That is your right under Article 21 and using it costs you nothing.
Email you might receive
Two kinds, separate on purpose.
Necessary mail arrives because you asked for something: confirming your address, or a password reset you requested. There is no opting out of these while an address is on the account, because they only ever answer something you did.
Occasional updates about Navis only if you ticked the box and then opened the link in the confirmation email. Ticking alone does nothing, and nothing is sent before that link is opened. It is the same link that confirms your address, so there is one email rather than two. At most one update a month. Every one carries an unsubscribe link that works in a single click without signing in, and you can also turn them off in Settings. Stopping them takes nothing else away.
What you agreed to is stored with the date and the exact wording that was on screen at the time, so there is a record behind it rather than a checkbox with no history.
Who else sees it
Four services are involved in running Navis. None of them is given more than the job needs.
| Service | What it sees | Why |
|---|---|---|
| Railway | Everything stored, as the database and server host | It is where your account lives |
| Vercel | The requests for the site's files | It serves the pages, and holds none of your account data |
| Vercel Analytics | Which page was viewed, roughly where from, and what kind of device. No cookies, no identifier that follows you, nothing from inside the app | Counting visitors to the public pages |
| Brevo | Your email address and the message being sent, and only if you gave an address | Sending password resets, confirmations, and updates if you asked for them. A French company, data held in the EU |
| NavisAI | Task names, deadlines and focus statistics, when you use the planner or ask for scores | It writes your plan and your notifications |
| Browser extension | Nothing. It reads your sign in from the Navis site and asks Navis two questions: is a session running, and what is on your site list. It cannot read pages, history or anything you type | Holding your chosen sites shut on a computer |
| Apple or Google push | The text of a notification, if you turn them on | It is the only way to reach a closed app |
The AI planner is the one to be aware of. When you tap Tell Navis, ask for momentum scores, or receive a daily nudge, the relevant task names and numbers are sent to NavisAI to generate a response. Your username, password and age are never sent. If you never use those features, nothing is ever sent to NavisAI.
How long it is kept
Until you delete it. Navis does not expire accounts or quietly clear old data, because a history that disappears defeats the point of keeping one.
Push subscriptions are removed automatically when a device stops accepting them, for example when you delete the app.
Your rights over it
All of these are built into the app rather than requests you have to make.
- See it. Settings, Download everything we hold. That is every field stored about you on the server, not a summary.
- Take it. Settings, Back up. A plain JSON file you can read, keep, or restore into another account.
- Correct it. Everything Navis holds is editable in the app.
- Delete it. Settings, Delete my account. It is immediate and permanent, and takes your tasks, history and notification devices with it. Nobody can undo it afterwards, including us.
If you are in the UK or EU, those cover access, portability, rectification and erasure under the GDPR. You also have the right to complain to your data protection authority.
Security
- Passwords are hashed with bcrypt at cost 12 and never stored or logged in plain form.
- Everything travels over HTTPS.
- Signing out invalidates your session on the server, not just in your browser.
- The AI key lives on the server and never reaches your browser.
- Notification endpoints are restricted to the browsers' own push services.
No system is perfect. If you find a problem, please report it rather than exploit it, and it will be fixed.
Children
Navis is not for under-13s and asks your age at sign up to enforce that. If you believe a younger child has made an account, get in touch and it will be removed.
Changes
If this page changes in a way that affects what happens to your data, the date at the top changes and the app will say so. Small wording fixes will not.
Contact
Questions about any of this, or a request that the app cannot handle itself: amaan.nizam@study.thws.de.