Privacy Policy

1. Who this policy covers

This Privacy Policy explains how NavFi Inc (“NavFi,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the NavFi mobile application, this website, and any related services we provide (together, the “Services”).

NavFi is a personal financial planning tool. It helps you build a spending and payment plan from the financial information you give us and from the accounts you choose to connect. NavFi is not a bank, and we do not move money on your behalf, provide financial, legal, or tax advice, or make lending or credit decisions.

By using the Services you agree to the practices described here. If you do not agree with this policy, please do not use the Services. Your use of the Services is also governed by our Terms of Service.

2. Information we collect

Account information you give us. When you create an account you provide your name, email address, and a password, or you sign in through Google or Apple, in which case we receive an identifier from that provider. You may also add a phone number and a profile photo. If you sign up through a referral, we record the code used.

Identity information. During onboarding we ask for your Social Security Number or Individual Taxpayer Identification Number. We store it in encrypted form and display only the last four digits back to you. We do not share it with any third party, we do not use it to run credit checks or make credit decisions, and it is not sent to our optimization service or to any AI provider. It is permanently deleted when you delete your account.

Financial information you enter. The details that drive your plan: income, recurring expenses, budgets, savings goals, debts, and any accounts or cards you enter manually, along with planning preferences such as your cash floor and payment timing.

Financial account information you connect. If you link a bank or credit card account, that connection is handled by our data provider, Plaid Inc. You enter your bank credentials directly with Plaid — we never receive or store them. Plaid then shares with us information such as account names and types, balances, transaction history, and, where available, credit card and loan details. Plaid’s handling of your information is governed by its own End User Privacy Policy, which we encourage you to read.

Payment information. Subscriptions are processed by Stripe. Your card details are submitted directly to Stripe; we receive only limited information such as subscription status, billing period, and a payment identifier. We do not store full payment card numbers.

Camera and photo library. If you choose to set a profile photo, the app asks for permission to use your camera or photo library. We access only the image you select, and only at the moment you select it.

Location. Features that show nearby merchants you can afford use your device’s location. On iOS the app is capable of requesting background location access so it can surface nearby merchants while the app is not open. Location access of either kind is requested only with your permission, you can withdraw it at any time in your device settings, and the rest of the app continues to work without it.

Biometrics. You can lock the app with Face ID, Touch ID, or a fingerprint. This check is performed entirely by your device. We never receive, see, or store your biometric data — the device tells the app only whether the check passed.

Device and usage information. We automatically collect technical information such as device model and operating system, app version and build, IP address, general location inferred from that address, time zone, crash and diagnostic reports, and in-app activity such as which screens you open and which features you use.

Communications. If you email us, subscribe to our newsletter, or contact support, we keep those messages and the contact details you provide.

3. How we use your information

We use the information described above to:

• create and maintain your account and authenticate you when you sign in;
• generate, update, and explain your financial plan, including balances, budgets, payment schedules, and alerts;
• keep your connected accounts and transactions in sync and classify transactions against your plan;
• process subscriptions, billing, and related customer service requests;
• send you service messages and push notifications about your plan, and — where you have opted in — product news and marketing;
• monitor, troubleshoot, secure, and improve the Services, including diagnosing crashes and measuring feature usage;
• detect, investigate, and prevent fraud, abuse, and activity that violates our terms or the law; and
• comply with legal obligations and enforce our agreements.

We do not use your financial account data for advertising, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.

4. AI-assisted features

NavFi includes an in-app assistant that answers questions about your plan. To generate a response, we send the relevant parts of your question and your plan context to a third-party AI provider that processes it on our behalf under contractual terms limiting how that information may be used. Your Social Security Number or ITIN is never included.

Responses are generated automatically and may be incomplete or inaccurate. They are provided for general information only and are not financial, legal, or tax advice. Please avoid sending the assistant sensitive information that is not needed to answer your question.

5. How we share information

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. We share information only in the circumstances below.

• Service providers. Companies that perform work for us under contract and may use your information only to provide that service — including cloud hosting and infrastructure, bank data aggregation, payment processing, push notification delivery, analytics and crash reporting, email delivery, mapping and place search, and the AI provider described above.
• At your direction. When you connect an account or otherwise ask us to share information with a third party.
• Legal and safety. When we believe disclosure is reasonably necessary to comply with law, regulation, legal process, or a governmental request; to enforce our terms; or to protect the rights, property, or safety of NavFi, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will take reasonable steps to require that it remain protected under terms consistent with this policy.
• Aggregated or de-identified information. We may create and use information that no longer identifies you — for example, aggregate usage statistics — and share it freely, provided we do not attempt to re-identify it.

6. Cookies and similar technologies

This website uses a small amount of browser storage for basic functionality — for example, remembering that you have already subscribed to our newsletter so we do not prompt you again. Our mobile app uses device identifiers and mobile SDKs for analytics, crash reporting, and push notifications.

You can clear browser storage through your browser settings, limit ad and analytics identifiers in your device’s privacy settings, and turn off push notifications at any time.

7. How long we keep information

We keep your information for as long as your account is active and for as long afterwards as we need it to provide the Services, resolve disputes, meet legal, tax, and accounting obligations, and enforce our agreements. When information is no longer needed for those purposes, we delete it or de-identify it. Backup copies may persist for a limited period before they are overwritten in the ordinary course.

8. How we protect information

We use administrative, technical, and organizational safeguards designed to protect your information. These include encryption of data in transit, encryption at rest of your Social Security Number or ITIN, access controls that limit who on our team can see what, and credential handling that keeps your bank logins with our data provider rather than with us.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password, enable device-level app locking if your device supports it, and tell us promptly at support@navfi.money if you believe your account has been compromised.

9. Your choices

• Disconnect an account. You can unlink a connected bank or card in the app at any time. Doing so stops future syncing; data we already received is handled as described in this policy.
• Review and correct your data. The financial details that drive your plan can be edited directly in the app.
• Delete your account. You can delete your account from within the app, or by emailing support@navfi.money. Deletion removes your account and its associated records from our live systems, and we ask Plaid to release your bank connections as part of the process.
• Notifications and marketing. Turn off push notifications in your device settings, and unsubscribe from marketing email using the link in any such message. We may still send you essential service messages about your account.
• Device permissions. Grant or revoke location, camera, photo library, and biometric permissions at any time in your device settings.

10. US state privacy rights

Depending on where you live, state privacy laws may give you the right to request access to the personal information we hold about you, a copy of it in a portable format, correction of inaccurate information, and deletion of it; to limit our use of sensitive personal information; to opt out of the sale or sharing of personal information and of targeted advertising and certain profiling; and to be free from discrimination for exercising these rights. As described in § 5, we do not sell or share personal information for targeted advertising.

Some state laws treat certain categories we handle — including your Social Security Number or ITIN, your financial account information, and precise location — as sensitive personal information. We use those categories only to provide the Services as described in § 3, and not to infer characteristics about you.

To exercise any of these rights, email support@navfi.money from the address associated with your account. We may need to verify your identity before acting, and we will respond within the time required by applicable law. You may use an authorized agent where the law allows it. If we decline your request, you may ask us to reconsider by replying to our response.

11. Children

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@navfi.money and we will delete it.

12. Where your information is processed

NavFi is operated from the United States and our service providers store and process information there. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

13. Third-party sites and services

The Services may link to websites and services we do not operate, including your financial institution, our payment processor, and app stores. This policy does not apply to those services, and we are not responsible for their content or privacy practices. Please review their policies before providing them with information.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and if the changes are material we will provide additional notice — for example, in the app or by email — before they take effect. Your continued use of the Services after an update means you accept the revised policy.

15. Contact us

If you have questions about this policy or about how your information is handled, email us at support@navfi.money. We aim to respond to every privacy request promptly.