Privacy Policy

Navuni is operated by an individual sole proprietor based in the United States (“Navuni,” “we,” “us,” or “our”). You can reach us at contact@navuni.app. This policy explains how we handle information when you use the Navuni website and free delivery-spending audit.

1. What Navuni does

Navuni is a spending and habit-awareness tool. It is not medical, nutritional, investment, credit, tax, or other financial advice. This is an early validation product and may run in a clearly labeled preview mode that shows sample data instead of reading your screenshots.

2. Information we process

Screenshots and order details. When automatic screenshot reading is enabled and you choose to upload screenshots, we receive the image files and process them to pull out delivery-order details such as platform, restaurant, date and time, and amounts. Screenshots may incidentally contain other information (a name, address, order ID, or partial card details). Please crop or hide anything not needed for the audit. While Navuni is in preview mode, screenshots are not uploaded or analyzed at all. The audit uses sample data or the orders you type in.

Extracted or entered results. When you use the calculator without an account, order details are shown only in your browser and are not saved in our database. Screenshots themselves are never stored.

Account and audit history. If you create an account, we store your email address and, when you complete an audit while signed in, a record of that audit: the date, the totals and projections, and a per-order summary (restaurant, date, time, and amount) so you can review it later. We do not store the screenshots. You can change your password, and deleting your account permanently removes your audit history along with it.

AI coach. If you use the optional AI coach after an audit, we send the computed figures from that audit (the totals, projections, order counts, and averages) together with the name of your single most-ordered restaurant, so the tips can name your go-to spot, to our third-party AI provider to generate a short headline and a few personalized money-saving tips. We do not send your screenshots, the order-by-order details, any other restaurant names, or addresses to the coach. When you are signed in, the generated tips are stored alongside that audit in your history so we do not regenerate them, and they are removed when you delete that audit or your account. The tips are general spending guidance, not financial, investment, or medical advice.

Waitlist information. If you join the waitlist, we collect your email address, an optional monthly delivery-spending band, whether you indicated you might pay $59.99 per year, and the date and time of signup.

Feedback. If you send feedback through our feedback form, we store the topic you selected, your message, the date and time, and (only if you choose to provide it) your email address so we can reply. We may also forward a copy of your feedback to our own support inbox by email so we can act on it. Email contact@navuni.app anytime to have your feedback deleted.

Product and security data. We process limited, non-identifying product events (for example, whether an audit was started, completed, or failed) plus counts and flags. We use a product analytics tool (PostHog) to understand how the site is used, such as page views, referrers, and country, browser, and device type. It sets a first-party cookie so it can tell one visit from another, and it does not track you across other websites. We do not record your screen, and we never send email addresses, screenshots, restaurant names, totals, or images to it. This cookie is optional and is only set if you accept it: see Cookies and your choices below. We also use a cookieless traffic and performance tool that measures aggregate page-performance metrics (Web Vitals such as load and interaction timing) to help keep the site fast; it does not set cookies or identify you. Our hosting provider also processes technical data such as IP address, browser and device information, request headers, and timestamps needed to deliver and secure the service.

Abuse and security monitoring. To keep the free tier working and to spot misuse, we keep a short-lived internal log of security-relevant events, for example when a rate limit or a monthly limit is reached, when a sign-up is blocked for using a temporary email address, or when something fails. These records hold the type of event and basic technical details, never your email address, screenshots, or order amounts, and they are deleted automatically after 90 days.

Abuse-prevention record. To enforce free usage limits (such as one free AI audit and coach plan per month) and stop them being reset by deleting and recreating an account, we keep a small record tied to a one-way scrambled fingerprint of your email address (a keyed hash), together with the dates you last used those free features. We do not store your actual email address in this record, and the fingerprint cannot be reversed back into your email. This record is kept independently of your account so it is not erased when an account is deleted, which is what lets the limit work as intended.

3. How screenshot extraction works

When automatic extraction is enabled, uploaded screenshots are sent from your browser to our server (hosted by our cloud provider), converted to an API-compatible format, and sent to a third-party AI provider to read the order details. Navuni does not intentionally write the screenshot files to durable storage; they are held only in memory while the request is processed and then released.

Our AI provider is a separate service provider. Under its standard API practices, API inputs and outputs are not used to train its models and are generally retained only for a limited period (about 30 days) for abuse monitoring, subject to exceptions such as legal or security needs. If we change AI providers, we will update this policy. AI can make mistakes. You review and correct every order before relying on the audit, and all sums and projections are calculated by our own software, not by the AI. In preview mode, no screenshots are sent to any AI provider.

The AI coach uses the same third-party provider under the same practices. It receives the computed figures from your audit plus the name of your single most-ordered restaurant (so a tip can name it), never your screenshots or order-by-order details. As with extraction, the AI does not perform the calculations, and its tips are general spending guidance you should not treat as financial or medical advice.

4. Why we use information

To provide the audit you request; calculate and show spending estimates; maintain the waitlist and send the updates you asked for; diagnose errors, secure the service, and prevent abuse; understand whether the product is useful; and comply with law. Where the GDPR or UK GDPR applies, our anticipated legal bases are performing the service you requested, your consent (for waitlist email and for the optional analytics cookie described in section 9), our legitimate interests in operating and securing the service, and legal compliance.

5. Service providers we use

We rely on a small number of third-party service providers to operate Navuni, including website hosting and delivery, database storage (waitlist, accounts, saved audit history, and feedback), AI screenshot reading and coaching when AI mode is enabled, transactional email, product analytics, cookieless traffic and performance analytics, and rate limiting. A current list of the specific providers is available on request at contact@navuni.app.

These providers process information on our behalf under their own terms and may process it in the United States or other countries. We may also disclose information when required by law, to investigate abuse or security incidents, or as part of a future business transfer. We do not sell your personal information or share it for cross-context behavioral advertising, and we do not use third-party advertising trackers.

6. How long we keep it

We do not intentionally retain screenshots or extracted order records after your request. Waitlist records are kept until we launch or you ask us to delete them, whichever comes first. Product and security logs are kept for a limited period, subject to provider settings and legal or security needs. If you unsubscribe, we may keep a minimal record so we don't email you again.

7. Your choices and rights

Email contact@navuni.app to access, correct, or delete the waitlist information tied to your email, or to withdraw email consent. Depending on where you live, you may have additional rights, including the right to complain to a data-protection authority. We may need to confirm you control the email address before acting, and we will not ask for unnecessary documents.

8. California

We collect the categories described above: identifiers (email, IP address), internet or network activity, the delivery-order information you provide, and intent responses such as spending band and willingness to pay. We use and disclose them only for the purposes in this policy. We do not sell personal information or share it for cross-context behavioral advertising, so Global Privacy Control or Do Not Track signals do not change site behavior.

9. Cookies and your choices

Navuni does not use advertising cookies, and we do not sell your information or share it for cross-context behavioral advertising. The only non-essential cookie we set is a first-party analytics cookie from our product analytics tool (PostHog), which lets it tell one visit from another and count returning visitors. It is used only to understand how the site is used and to spot errors and abuse. Our traffic and performance tools remain cookieless, and our sign-in cookies are strictly necessary to keep you logged in.

How we ask. We ask everyone, wherever you are visiting from. On your first visit we show a banner and set no analytics cookie at all unless you choose Accept. Declining, or simply not answering, means the cookie is never set.

How to change your mind. Select Cookie preferences in the footer of any page. Choosing Decline immediately stops all analytics that runs in your browser, and deletes the analytics cookie and related values already stored there. Our servers still record a small number of events about what the service did, for example that an audit was completed or that a limit was reached. Those are counts and flags tied to no cookie and no browser identifier, and they are covered by the sections above. Your choice is remembered in your browser rather than in a cookie, so it will not follow you to another browser or survive clearing your browser storage. If we add advertising cookies or cross-site tracking later, we will update this policy and ask for consent first.

10. Age requirement

Navuni is intended only for people who are at least 18 years old. We do not knowingly collect information from children. If you believe someone under 18 has provided information, email contact@navuni.app so we can delete it.

11. Security

We use reasonable safeguards, including encrypted HTTPS transport, server-only credentials, database access controls, and limited logging. No online service can guarantee absolute security.

12. International transfers

Information may be processed outside your state or country, including in the United States. Where required, we rely on appropriate legal transfer mechanisms. Email us for details.

13. Changes

We may update this policy as the service changes. We will post the revised version, update the effective date, and give additional notice where legally required.

14. Contact

Navuni · contact@navuni.app