Last updated: 14 July 2026 Published at: https://digiruu.com/navora-privacy-policy
1. Who we are
Navora (“Navora”, “we”, “us”, “our”) is a mobile application published by Digiruu Ltd, a company registered in England and Wales under company number 09949884, with its registered office at Suite 6 Mercer Manor Barns, Sherington, Newport Pagnell, Buckinghamshire, England, MK16 9PU.
For the purposes of the UK GDPR and the EU GDPR, Digiruu Ltd is the data controller of the personal data described in this policy.
Contact: info@digiruu.com EU representative (Article 27 EU GDPR)
This policy explains what personal data we collect when you use the Navora iOS app, why we collect it, who we share it with, and the rights you have over it.
2. Summary
| What | In short |
|---|---|
| Your intentions | We never store the text. What you write is never saved — not to our servers, not to your device. We keep only the fact that an intention was sent, its life aspect, and the time. |
| The AI coach (Navora+ Infinite) | This is the one exception, and it is entirely your choice. If you ask the coach for help, the description you type is sent to Anthropic to generate suggestions. We do not store it. Don’t want that? Don’t use the coach — every other part of Navora works without it. |
| Custom life aspects | If you create your own life aspect, we do store the name you gave it, so we can show it to you again. Choose that name with care. |
| Advertising | The free tier shows ads served by Google AdMob. We use Meta to measure our own marketing, including a server-side purchase report that includes your hashed email. Navora+ and Navora+ Infinite are ad-free. |
| Tracking | We ask your permission (Apple’s ATT prompt) before tracking you across other companies’ apps. Decline and you’ll see non-personalised ads. |
| Selling data | We do not sell your personal data for money. Under some US laws our advertising partners may still count as “sharing” — see section 12. |
| Control | You can delete your account and everything attached to it from within the app at any time. |
3. The personal data we collect
3.1 Data you give us
Account data. Your email address and an authentication credential (a password, stored only as a hash, or an Apple Sign-In identifier). We also generate a unique user ID for you, and store your first name if you give it to us.
Your intentions — what we do NOT collect. When you write a thought or intention, that text lives only in your device’s memory while you’re looking at it. When you press send, it is discarded. We never transmit it to our servers, we never write it to storage on your device, and we never see it. Nobody at Digiruu Ltd can read what you wrote, because after you send it, it does not exist anywhere.
What we do record is that an intention was sent, which life aspect it belonged to, the visual theme used, and the date and time. That is what powers your daily limit, your streak and your insights.
Custom life aspects. Beyond the five built-in aspects (Health, Finance, Career, Love, Growth) you can create your own. We do store the name, icon and colour you choose, because we have to show it back to you. Unlike your intentions, this text is saved to our database until you delete it or close your account. Please bear that in mind when naming an aspect.
Life aspect ratings. During onboarding, at each weekly check-in, and when you create a new aspect, you rate how you feel about it on a scale of 1 to 10. We store these scores and their dates so we can show you how they move over time.
What you tell the AI coach. See section 5 — this is the most important part of this policy, and we’ve given it its own section.
Support correspondence. If you email us, we keep your message and our reply.
3.2 Data collected automatically
Usage data. Which features you use, how many intentions you send, your streak, your onboarding progress, and when you last checked in.
Device and technical data. Device model, OS version, app version, language, approximate region derived from IP address (we never collect precise GPS location), crash logs and diagnostics.
Advertising identifiers. Your device’s Identifier for Advertisers (IDFA), only if you grant permission through Apple’s App Tracking Transparency prompt. If you decline, your IDFA is not shared and you see non-personalised, contextual ads.
Push notification token. If you enable notifications, Apple issues a device token so we can send you reminders. It does not identify you personally.
Purchase data. If you subscribe, Apple confirms that a valid subscription exists, when it started and when it expires, and we record which tier you are on. Apple processes your payment — we never see or store your card details.
4. Special category data — please read this
Some of what you might write in Navora could reveal information that UK and EU law treats as special category data: your physical or mental health, your sex life or sexual orientation, or your religious or philosophical beliefs.
Your intentions cannot be, because we never receive them. We do not collect, process, store or share the text. We could not use it to target advertising or train a model even if we wanted to.
Two things you type are processed, and you should know exactly which:
- The name of a custom life aspect (e.g. “Fertility”, “Sobriety”, “Coming Out”), which we store.
- What you describe to the AI coach, which we transmit to Anthropic but do not store.
Where you choose to provide either, and it reveals special category data, we process it only on the basis of your explicit consent, given when you accept this policy, and only to provide the feature you asked for. We never share either with Google, Meta, or any advertising partner, and we never use them to train machine learning models. You can withdraw consent at any time by deleting the custom aspect, ceasing to use the coach, or deleting your account.
You are never required to use either feature. Navora’s core ritual works entirely without them.
5. The AI intention coach (Navora+ Infinite)
Navora+ Infinite includes an optional AI coach. If you use it, you pick a life aspect and describe, in your own words, what you’re facing. The coach replies with a short acknowledgement and three suggested intentions you can send.
How your words are handled:
- The text you type is sent from the app to our server, and from there to Anthropic PBC (the company behind Claude), which generates the suggestions. Anthropic acts as our data processor under a data processing agreement.
- We do not store what you typed. It is not written to our database and it is not written to our server logs. We keep only a counter of how many coach requests you made today, so we can apply a fair-use limit.
- The coach is available to Navora+ Infinite subscribers only, and that is enforced on our server — not just in the app.
- Anthropic does not use API inputs to train its models. Anthropic may retain inputs for a limited period for trust, safety and abuse-detection purposes, in line with its commercial terms.
- We do not send Anthropic your name, email address, or account identifier — only the life aspect and the text you wrote.
- Your coach input is never shared with Google, Meta or any advertising partner.
Anthropic’s privacy policy: https://www.anthropic.com/legal/privacy Anthropic processes data in the United States — see section 8 on international transfers.
If you would rather no text you write ever leaves your device, simply don’t use the coach. Every other feature in Navora — sending intentions, streaks, insights, check-ins — works without it, and none of them transmit a word you’ve written.
Our legal basis is consent: you choose to use the coach, and you can stop at any time.
6. Advertising and tracking
6.1 Google AdMob (free tier only)
The free tier displays ads served by Google AdMob (Google Ireland Limited). To serve, cap and measure ads, AdMob may receive your advertising identifier, IP address, device type, OS version, coarse location derived from IP, and your interactions with the ads. Google acts as an independent controller for this data.
Google’s privacy policy: https://policies.google.com/privacy
Navora+ and Navora+ Infinite subscribers see no ads at all.
6.2 Meta — in-app SDK
We use the Meta SDK for iOS (Meta Platforms Ireland Limited) to measure the effectiveness of our own advertising — for example, to know that someone who saw a Navora ad went on to install the app. Meta may receive your device identifier, IP address, and records of app events such as “app installed” or “subscription started”.
6.3 Meta — server-side purchase reporting (Conversions API)
Please read this even if you declined the ATT prompt. When you buy a subscription, our server also reports that purchase directly to Meta through its Conversions API. That report contains:
- your email address, hashed with SHA-256 (Meta cannot read the address itself, but can match it against a hash of an address it already holds);
- your account ID, hashed with SHA-256;
- the purchase amount and currency;
- your advertising identifier (IDFA) and device metadata, where the app has them — that is, where you granted ATT permission.
The hashed email and account ID are sent regardless of your ATT choice, because this is a server-to-server report of a sale rather than device tracking. We pass Meta your ATT preference (advertiser_tracking_enabled) with every event so that Meta applies it.
We do this to measure our own advertising accurately. Our legal basis is consent where required, and otherwise our legitimate interest in understanding whether our marketing works. You can object at any time (section 12) and we will exclude you.
Meta’s privacy policy: https://www.facebook.com/privacy/policy
6.4 App Tracking Transparency
Before we or our partners track you across other companies’ apps and websites, iOS shows Apple’s ATT prompt. If you decline, we do not track you, your IDFA is not shared, and you see non-personalised ads. You can change your mind any time in Settings → Privacy & Security → Tracking.
6.5 Consent in the UK and EU
If you are in the UK or EEA we ask for your consent to advertising and measurement identifiers through a consent prompt. You can change your choices in Navora → Settings → Privacy. Withdrawing consent does not affect processing that already happened.
7. Who we share data with
- Supabase — our authentication and database provider, hosting your account, intention records, ratings and custom aspects on our behalf as our processor. https://supabase.com/privacy
- Anthropic PBC — processes your coach input to generate suggestions, as our processor. Only if you use the coach. https://www.anthropic.com/legal/privacy
- Apple — Sign in with Apple, App Store purchases and subscriptions, and push notification delivery. https://www.apple.com/legal/privacy/
- Google (AdMob) — serving ads to free-tier users (section 6.1).
- Meta — advertising measurement, via the in-app SDK and server-side Conversions API (sections 6.2–6.3).
- Professional advisers and authorities — where legally required, or to establish, exercise or defend legal claims.
- A buyer or successor — if we sell or reorganise the business, subject to this policy.
We do not sell your personal data.
8. International transfers
Your account, your intention records, your ratings and your custom aspects are stored in the United Kingdom. Our Supabase database runs in the eu-west-2 (London) region, so this data does not leave the UK in the ordinary course of using Navora.
Two things do go to the United States:
- Coach input, if you use the AI coach, is processed by Anthropic in the US.
- Technical and advertising data (device and advertising identifiers, hashed email for purchase reporting) goes to Google, Meta and Apple, which may process it in the US.
For those transfers we rely on a UK/EU adequacy decision where one applies (including the EU–US Data Privacy Framework and its UK Extension, where the recipient is certified), and otherwise on the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses, together with a transfer risk assessment. Email info@digiruu.com for a copy of the safeguards we use.
9. How long we keep data
| Data | Retention |
|---|---|
| The text of your intentions | Never stored. Discarded the moment you send. |
| What you tell the AI coach | Not stored by us. Retained briefly by Anthropic for abuse detection under its own terms. |
| Account data, first name, intention records (aspect + timestamp), custom aspects, ratings, check-ins | For as long as your account is open |
| All of the above, after you delete your account | Deleted from live systems within 30 days; purged from encrypted backups within 90 days |
| Coach usage counters | 30 days |
| Purchase and subscription records | 7 years, to meet UK tax and accounting obligations |
| Support emails | 2 years from the last message |
| Usage data | 14 months, then deleted or aggregated so it can no longer identify you |
10. Security
Our strongest security measure is that we do not hold your most sensitive data at all: the text of your intentions is never transmitted or stored, so it cannot be breached, subpoenaed, or read by an employee.
For the data we do hold, we use encryption in transit (TLS) and at rest, row-level security so that no user can access another user’s records, hashed passwords, access controls limiting employee access to what is necessary, and regular review of our providers. No system is completely secure, but we take these obligations seriously and will notify you and the ICO of a personal data breach where the law requires it.
11. Children
Navora is rated 16+ on the App Store and is not intended for anyone under 16. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has given us personal data, email info@digiruu.com and we will delete it.
12. Your rights (UK and EU)
You have the right to access your data, rectify it, erase it (you can do this yourself in Account → Delete account), restrict or object to our processing — including objecting to direct marketing and to the Meta purchase reporting described in section 6.3 — receive it in a portable format, and withdraw consent at any time, including consent for notifications, tracking, the AI coach, and special category data. We do not make solely automated decisions with legal or similarly significant effects.
To exercise any of these, email info@digiruu.com. We will respond within one month.
If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), or your local supervisory authority in the EEA.
13. Notice for US residents (California and other states)
We do not sell personal information for money. However, our use of Google AdMob and Meta may constitute “selling” or “sharing” personal information for cross-context behavioural advertising under the CCPA and similar state laws.
California residents have the right to know, delete, correct, and opt out of the sale/sharing of their personal information, and not to be discriminated against for exercising those rights. To opt out, decline the App Tracking Transparency prompt, or email info@digiruu.com with “Do Not Sell or Share My Personal Information”. We honour Global Privacy Control signals where technically feasible.
14. Changes to this policy
We will update this policy from time to time. If we make a material change we will notify you in the app or by email before it takes effect. The date at the top shows when it was last revised.
15. Contact
Digiruu Ltd Suite 6 Mercer Manor Barns, Sherington, Newport Pagnell, Buckinghamshire, England, MK16 9PU info@digiruu.com