Controller: Pevalon Platforms GmbH, Bucherlweg 69/2, 8074 Raaba-Grambach, Austria. Register: FN 665716w. VAT: ATU82660158. Contact: privacy@navyo.org.
Data we process
We process account identifiers, authentication events, route requests, selected start/waypoint/finish coordinates, boat and polar settings, weather/model selections, map and landmask catalog access, support messages, issue reports, app diagnostics, and payment entitlement state.
Why we process data
We use data to provide Navyo accounts, signed map and weather access, route planning, support, fraud and abuse prevention, billing, legal compliance, and service reliability. Navyo does not use route, location, diagnostic, or installation data for advertising or tracking across other companies' apps or websites.
Route reliability reports
After a route attempt finishes, the mobile app automatically sends a small reliability summary. It can include the result, timing, route type, app version, selected route settings, a random installation identifier, and Start, Destination, and waypoint coordinates rounded to five decimal places. Routine summaries do not include full route lines, free-form error messages, weather files, contact details, or account credentials.
If every route option fails, Navyo may also send a bounded technical issue report with route context and diagnostic details needed to reproduce the failure. Sending and retrying these reports never blocks route recovery.
Processors and services
Navyo may use a Navyo-owned identity service, Stripe for web billing, Apple and Google for app-store subscriptions, Hetzner object storage for map/weather assets, email delivery providers for transactional mail, and hosting/logging providers for service operations.
Cookies and analytics
Navyo uses essential browser storage for planner preferences, route state, sign-in sessions, and security. If Google Analytics is enabled, it is optional and only runs after consent. Declining analytics does not affect planner access.
Analytics consent is stored in the browser and can be changed through the cookie settings control. Google Analytics may receive visit and device information after consent so we can understand which public pages and planner flows need improvement.
Location and route data
Location and route data can be sensitive. Coordinates in reliability reports are rounded before upload, but may still be treated as precise location under app-store definitions. We minimize retention by storing only what is needed for accounts, support reports, saved-route sync, diagnostics, and safety-related debugging. Users should avoid sending sensitive routes in manual support reports unless needed for troubleshooting.
Retention
Account and entitlement records are kept while the account is active and as required by law. Routine route outcomes are retained for up to 90 days; unsent outcomes remain on the device for up to 30 days so they can retry after reconnecting. Support reports and other diagnostics are retained only as long as needed to resolve issues and improve reliability. Billing records follow tax and payment-provider retention requirements.
Your rights
EU users may request access, correction, deletion, restriction, portability, or objection where applicable under GDPR. Signed-in users can request account export or deletion review through Navyo account tools as those become available, or contact privacy@navyo.org.
Children
Navyo is not directed to children. Users must meet the minimum age required in their jurisdiction and app-store terms.
Changes
We will update this page when product, processor, or legal requirements change.