Privacy Policy

Navilife · Last updated: 11 June 2026

Navilife ("we", "us", the "app") is a personal productivity app for planning and tracking tasks. This policy explains what information we collect, how we use it, and the choices you have — including how we handle data from Google services when you connect your Google Calendar.

This policy is operated by Loc Dang. For any privacy question or request, contact us at yourideaassistant@gmail.com.

Information we collect

• Account information — when you sign in (including via Google Sign-In), we receive your email address, name, and profile picture.
• Your content — the tasks, notes, schedules, categories, stories, priorities, completion history, and preferences (timezone, theme, notification settings) that you create in the app.
• Google Calendar data — if you choose to connect Google Calendar, we access your calendar events to keep them in sync with your Navilife tasks (see "Google user data" below).
• Push notification subscriptions — if you enable browser notifications, the subscription endpoint your browser provides.

Google user data

Connecting Google Calendar is optional and off by default. When you connect it, you grant Navilife the https://www.googleapis.com/auth/calendar.events scope, which we use solely to:

• Create, update, and delete calendar events that correspond to your Navilife tasks (one event per scheduled task), and
• Read your calendar events so changes you make in Google Calendar can be reflected back on your Navilife tasks (two-way sync).

We request the narrowest scope that supports this feature. We do not use Google Calendar data for advertising, and we do not sell it.

How we use information

• To provide the core product: storing and displaying your tasks and schedule.
• To sync tasks with your Google Calendar, when you have connected it.
• To send notifications and (if enabled) reminder/digest emails you have opted into.
• To operate, secure, and improve the app.

We do not sell your personal information or share it for advertising.

How information is stored and shared

Your data is stored in our database hosted on Supabase. Google OAuth refresh tokens are stored encrypted at rest and are accessible only to our backend (service-role) functions — never exposed to the browser or to other users. We use the following service providers ("sub-processors") strictly to run the app:

• Supabase — database, authentication, and backend functions.
• Vercel — application hosting.
• Google — Google Sign-In and the Google Calendar API.
• Resend — sending reminder/digest emails (only if you enable them).

We disclose information only to these providers, or where required by law. We do not transfer Google user data to third parties except as necessary to provide and improve the feature, comply with law, or as part of a merger/acquisition, consistent with the Limited Use requirements above.

Data retention and deletion

• You can disconnect Google Calendar at any time from Settings; this revokes our access and deletes the stored Google tokens. You can also revoke access from your Google Account permissions.
• You can request deletion of your account and all associated data by emailing yourideaassistant@gmail.com. We delete it within 30 days.
• We retain your content for as long as your account is active.

Security

We use industry-standard measures including encryption in transit (HTTPS) and at rest, and strict access controls so that each user can only access their own data.

Children

Navilife is not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Loc Dang — yourideaassistant@gmail.com