Your data rights

GDPR · CCPA · CPRA — exercise your rights below

Whether you're in the EU, UK, California, or anywhere else, you have rights over your personal data. Every right below is available to every NAVI user, with no discrimination — same features, same prices, same experience.

1. Access your data

GDPR Art. 15 · CCPA §1798.110

Download a JSON file containing all the data we hold about you: account, settings, courses, tasks, sessions, messages, notebooks, materials, uploaded files metadata, memory notes, subscription history, and usage logs.

→ Go to Settings → Privacy & Data and click Export my data.

2. Correct your data

GDPR Art. 16 · CCPA §1798.106

You can edit your name, institution type, year level, major, language, timezone, and study preferences at any time from Settings.

For data you cannot edit directly (e.g. account email tied to Google OAuth), email navibygeo@gmail.com.

3. Delete your data

GDPR Art. 17 · CCPA §1798.105

You can selectively delete or wipe everything:

  • Delete a single session, notebook, group, or file — from inside that item.
  • Delete all sessions / all materials — Settings → Privacy & Data.
  • Delete all Learning Memory notes — Settings → Personalization & Memory → Delete all memory.
  • Delete your account and everything in it — Settings → Privacy & Data → Delete Account. This is irreversible.

We delete data within 30 days of your request, with backups purged within 90 days. Some data (payment records, fraud-prevention logs) may be retained where law requires.

4. Restrict or object to processing

GDPR Art. 18, 21

Learning Memory (private notes NAVI builds about your study habits) is off by default. Toggle it any time from Settings → Personalization & Memory. When off, no new memory notes are created and existing memory is never used.

To restrict any other processing, email navibygeo@gmail.com and we'll respond within 30 days.

5. Data portability

GDPR Art. 20

The JSON export from Settings → Privacy & Data is machine-readable (UTF-8 JSON) and structured so you can import it into any compatible service or read it yourself.

6. Withdraw consent

GDPR Art. 7(3)

Where we rely on your consent (Learning Memory, optional email notifications, cookie preferences), you can withdraw it any time from Settings. Withdrawal does not affect lawfulness of processing done before withdrawal.

7. "Do not sell or share my personal information"

CCPA / CPRA

We do not and have never sold your personal information.

We also do not share your personal information for cross-context behavioural advertising. The only third parties who process your data are essential service providers (Supabase for database/auth, Vercel for hosting, OpenRouter for AI models, Resend for email, Kashier for payments) under data-processing agreements.

You don't need to opt out of something we don't do — but if you want a written confirmation of non-sale, email navibygeo@gmail.com.

8. Right against automated decisions

GDPR Art. 22

NAVI's AI assists your studying — it does not make decisions that produce legal effects or significantly affect you (e.g. grading, admissions, employment). Any AI output is advisory.

9. Lodge a complaint

GDPR Art. 77

If you believe we've mishandled your data, you can complain to:

We'd appreciate the chance to fix it first — please email navibygeo@gmail.com before escalating.

10. Children's data

GDPR Art. 8 · COPPA · CCPA §1798.120(c)

NAVI is intended for students aged 16 or older. If you are under 16 (or under 13 in the United States), you may not use NAVI without verifiable parental consent. Contact navibygeo@gmail.com if a child's account needs to be removed.

11. Authorized agents

CCPA §1798.135

California residents may use an authorized agent to submit requests. The agent must provide written, signed authorization from you. We may verify your identity directly.

12. Verifying your identity

When you exercise data rights, we verify the request comes from you by matching it to your signed-in NAVI account (or, for email requests, by sending verification to the email on file). We won't ask for more information than necessary.

Questions about this page? Email navibygeo@gmail.com. We respond to data requests within 30 days (or sooner where law requires).