Privacy policy
In accordance with the General Data Protection Regulation (GDPR) and French data protection laws.
Data controller
The data controller is Navia SAS, represented by Laurent Pitigliano.
DPO contact: contact@navia.app
Data collected
We collect the following data:
| Data | Purpose | Legal basis |
|---|---|---|
| Email, first name | Account creation, authentication | Contract |
| Job, sector, motivations | Journey personalization | Contract |
| Exercise responses and conversations | Personalized AI coaching | Contract |
| Mini-game results | Analysis and recommendations | Contract |
| Progress (XP, chapters) | Journey gamification | Contract |
Artificial intelligence and your data
Navia uses artificial intelligence to personalize your coaching journey. Your data is:
- Used only for YOUR journey — never shared with other users
- Not used to train AI models — we use third-party APIs without fine-tuning on your data
- Deletable at any time upon request
Sub-processors
We use the following sub-processors for service operation:
| Provider | Usage | Location |
|---|---|---|
| Supabase | Database, authentication, storage | EU (AWS Frankfurt) |
| Vercel | Web hosting, CDN | Global (edge) |
| OpenRouter | Artificial intelligence API | USA |
| Google (Gemini) | Image generation | USA |
Contractual guarantees (standard contractual clauses, DPA) govern each data transfer outside the EU.
Data retention
- Account data: retained as long as the account is active, then deleted within 30 days of closure
- Conversations and responses: retained as long as the account is active to ensure journey continuity
- Shared results: public sharing pages remain accessible unless deletion is requested
Your rights (GDPR)
Under the GDPR, you have the following rights:
- Right of access — obtain a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to data portability — retrieve your data in a structured format
- Right to object — object to certain processing
- Right to restriction — restrict the processing of your data
To exercise your rights, contact us at contact@navia.app. We respond within a maximum of 30 days.
Cookies
Navia exclusively uses technical cookies necessary for service operation:
- Authentication cookie (Supabase Auth)
- Session preferences
No advertising, analytics, or third-party tracking cookies are used. No consent is required for strictly necessary cookies (Article 82 of French data protection law).
Complaints
If you believe the processing of your data does not comply with regulations, you may file a complaint with the CNIL (French National Commission on Informatics and Liberty): cnil.fr.
Last updated: February 2026