Privacy Policy

Account information — name, email, password (stored only as a secure hash), timezone, and, if you enable WhatsApp notifications, your phone number.

Health and wellness information — the content you or your practitioner add while using Navwell: challenge activity and completions, questionnaire answers, notes and messages, meal logs and photos, health records you upload, voice notes and their transcripts, and measurements from wearable devices you choose to connect.

Usage and device information — standard technical logs (such as IP address and browser type) used for security and reliability. We do not use third-party advertising or analytics trackers.

To operate the service: delivering your programs and challenges, tracking your progress and outcomes, powering messaging with your practitioner and community, and sending the notifications you opt into.

AI features — Navwell includes an AI coach and AI-assisted features (for example, estimating nutrition from meal photos or transcribing voice notes). These run on infrastructure under contractual data protection terms; your information is not used to train third-party AI models. What the coach remembers about you is visible to you and can be edited or deleted at any time from your coach memory settings.

With your practitioner — if you belong to a practitioner's community, they see your program activity and the things you deliberately share with them. Your AI coach conversations are private by default: nothing from them reaches your practitioner unless you explicitly consent to share a summary or record.

Service providers — we use a small number of infrastructure providers to run Navwell (cloud hosting and storage under healthcare data-protection agreements, payment processing, and transactional email). Payment details are handled entirely by Stripe; card numbers never touch Navwell systems, and no health information is shared with payment or messaging providers.

Never — we do not sell your personal information, and we do not share health information for advertising.

Push, WhatsApp, and email notifications are optional and controlled by you, per channel and per category. Messages sent over external channels (like WhatsApp or SMS-style nudges) are deliberately generic — they never contain health information, only a prompt to open the app. Inbound messages to our notification numbers are not read or stored.

Data is encrypted in transit and at rest, access is role-based and audited, connected-device credentials are additionally encrypted at the application level, and health information is kept out of logs, URLs, and third-party metadata by design. Sessions are time-bounded, and a password reset signs out all other sessions.

Your information is retained while your account is active. You can delete individual items (messages, uploads, meal logs, health records, coach memory) directly in the app, and you can request a full export or deletion of your account from your account settings. Financial records required for legal and accounting purposes are retained as required by law.

Navwell is not directed to children under 13, and we do not knowingly collect information from them. Minors may use Navwell only under the direction of a practitioner and with consent from a parent or guardian.

We will update this page when our practices change and revise the effective date above. Material changes will be announced in the app.

Questions or requests: admin@navwell.ai