Privacy policy

In accordance with the General Data Protection Regulation (GDPR) and French data protection laws.

Data controller

The data controller is Navia SAS, represented by Laurent Pitigliano.

DPO contact: contact@navia.app

Data collected

We collect the following data:

DataPurposeLegal basis
Email, first nameAccount creation, authenticationContract
Job, sector, motivationsJourney personalizationContract
Exercise responses and conversationsPersonalized AI coachingContract
Mini-game resultsAnalysis and recommendationsContract
Progress (XP, chapters)Journey gamificationContract

Artificial intelligence and your data

Navia uses artificial intelligence to personalize your coaching journey. Your data is:

  • Used only for YOUR journey — never shared with other users
  • Not used to train AI models — we use third-party APIs without fine-tuning on your data
  • Deletable at any time upon request

Sub-processors

We use the following sub-processors for service operation:

ProviderUsageLocation
SupabaseDatabase, authentication, storageEU (AWS Frankfurt)
VercelWeb hosting, CDNGlobal (edge)
OpenRouterArtificial intelligence APIUSA
Google (Gemini)Image generationUSA

Contractual guarantees (standard contractual clauses, DPA) govern each data transfer outside the EU.

Data retention

  • Account data: retained as long as the account is active, then deleted within 30 days of closure
  • Conversations and responses: retained as long as the account is active to ensure journey continuity
  • Shared results: public sharing pages remain accessible unless deletion is requested

Your rights (GDPR)

Under the GDPR, you have the following rights:

  • Right of access — obtain a copy of your data
  • Right to rectification — correct inaccurate data
  • Right to erasure — request deletion of your data
  • Right to data portability — retrieve your data in a structured format
  • Right to object — object to certain processing
  • Right to restriction — restrict the processing of your data

To exercise your rights, contact us at contact@navia.app. We respond within a maximum of 30 days.

Cookies

Navia exclusively uses technical cookies necessary for service operation:

  • Authentication cookie (Supabase Auth)
  • Session preferences

No advertising, analytics, or third-party tracking cookies are used. No consent is required for strictly necessary cookies (Article 82 of French data protection law).

Complaints

If you believe the processing of your data does not comply with regulations, you may file a complaint with the CNIL (French National Commission on Informatics and Liberty): cnil.fr.

Last updated: February 2026