NavventoPrivacy Policy and personal data processing
This policy explains what personal data the Navvento application (the "App") processes, what we use it for, who we share it with, how long we keep it and how you can exercise your rights. It applies to the App for iOS and Android and to this website. It complies with Colombia's Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015), and with the privacy requirements of the Apple App Store and Google Play.
- Data controller
- Data we process
- What we don't do
- What we use your data for
- Authorization and basis for processing
- Who sees your information inside the App
- Providers we share data with
- International transfers
- How long we keep the data
- Deleting your account
- Your rights and how to exercise them
- Security
- Minors
- Phone permissions
- Changes to this policy
- Contact
1. Data controller
The controller of your personal data is Stephania Rodríguez Patarroyo, domiciled at Calle 51 Norte # 8N-47, Cali, Valle del Cauca, Colombia. Email: app@navvento.com. Phone: +57 320 661 0454.
2. Data we process
| Category | What data | Where it comes from |
|---|---|---|
| Account | Email address, name, profile photo and the identifier of the Google or Apple account. If you use Apple's "Hide My Email", we receive only the forwarding address. | Google or Apple, when you sign in. |
| Profile | Display name, phone number with its prefix, photo, bio and, if you choose to give them, date of birth, sex and education level. The date on which you accepted the terms and your consent about photos. | You, at sign-up and when editing your profile. |
| Content | Posts, comments, polls and their votes, events, links, images and PDF documents you upload; direct messages; images of spaces, channels and schedules. | You and the other members of your spaces. |
| Community | Spaces you belong to, your role and permissions, requests to join, channels you belong to, conversations you muted, people you block, your own invitation code in each space and who invited you (we know it from the code or link you joined with). | Your use of the App and the decisions of the space's owner and team. |
| Schedule and appointments | Your schedule if you offer appointments (hours, services, image) and the appointments you book or receive. | You and whoever books with you. |
| Notices | Your phone's push notification token, platform (iOS or Android) and the history of notices and of what you read. | Your phone, if you turn notifications on; the App. |
| Preferences | Language, time zone and theme (light or dark). | Your phone and your settings. |
| Diagnostics | Crash and error reports: type of error, App version, phone model and operating system. Personal data such as emails, tokens and content is removed before they are sent. | The App, automatically when something fails. |
3. What we don't do
- We don't sell or rent your personal data.
- We don't show third-party advertising or use your data for advertising.
- We don't track you across other companies' apps or sites.
- We don't access your location, your contacts, your microphone or your files beyond what you choose to share.
- We don't use your content to train artificial intelligence models.
4. What we use your data for
- Providing the service: creating and maintaining your account, showing your spaces, channels, posts, messages, directory and schedule, and managing your appointments.
- Invitations: giving you your own code to invite other people to your space and recording who invited each member, so that the space's owner and team know it and to measure internally how each space grows.
- Notifying you: sending you in-App and push notifications about activity in your spaces, messages and reminders of events and appointments.
- Writing help (optional): only if you accept it in the App, and only when you ask to improve the text of a post, we send that text (the body and, if the post carries them, the poll questions, event titles and link names) to the artificial intelligence provider to generate the suggestion. Without your acceptance nothing is sent, and you can withdraw it by writing to us.
- Security: verifying your identity, applying each space's permissions, allowing blocking and moderation, and preventing abuse.
- Stability: detecting and fixing App failures.
- Support: answering your support and privacy requests.
- Legal compliance: responding to requests from competent authorities.
5. Authorization and basis for processing
By completing sign-up in the App and accepting the Terms and Conditions you give us your prior, express and informed authorization to process your data for the purposes of this policy. Optional data (date of birth, sex, education level, bio, photo) is processed only if you choose to give it, and you can delete it whenever you want. You can revoke the authorization at any time by deleting your account or writing to us, except where there is a legal duty to keep some data.
Date of birth and sex are not sensitive data under Colombian law, but they are optional: you don't have to give them to use the App.
6. Who sees your information inside the App
- Members of your spaces: see your display name, your photo and your profile inside that space, and what you post in the channels they have access to.
- The owner and the team of a space: manage who joins, the roles and the channels; they can pin, archive or moderate posts in their space. Only the owner and those with permission to manage members see who invited each member; the rest of the members don't.
- Your invitation code: seen by whoever receives your invitation (in the link, the QR or the image you share). It contains neither your name nor your data.
- Direct messages: seen only by the two people in the conversation.
- Appointments: seen by the person who books and the person who offers the schedule.
Navvento does not publish your information outside the App.
7. Providers we share data with
We use providers that process data on our behalf (processors), under contract and only to provide the service:
| Provider | What for | Data |
|---|---|---|
| Supabase Inc. | Database, authentication, file storage and real time. | All the App's data. |
| Google LLC — Sign in with Google | Verifying your identity. | Account data. |
| Apple Inc. — Sign in with Apple | Verifying your identity. | Account data. |
| Google LLC — Firebase Cloud Messaging | Delivering push notifications (on iOS too, alongside Apple's service). | Phone token and the text of the notice. |
| Google LLC — Gemini API | Writing help, only if you accept it and when you ask for it. | The text of the post you want to improve. |
| Functional Software, Inc. (Sentry) | Crash reports. | Diagnostic data, with no personal data. |
| GitHub, Inc. | Hosting this website. | Technical data of your visit (IP address), which GitHub processes under its own policy. |
We may also hand over data to authorities when a law or a court order requires it.
8. International transfers
The providers above have servers outside Colombia, mainly in the United States. By accepting this policy you authorize that transmission, which we carry out with providers that offer adequate levels of protection and under contracts that oblige them to protect your data and use it only to provide us the service.
9. How long we keep the data
- Account, profile and community: as long as your account exists.
- Invitation code and who invited you: as long as you are a member of the space. Your code stops working if you leave the space or are blocked. If the person who invited you deletes their account, the record of who invited you is deleted.
- Files: those left unused (for example, a photo you replaced) are deleted automatically.
- Diagnostics: up to 90 days.
- Backups: up to 30 days, after which they are overwritten.
- When you delete your account, we delete your data immediately, except what the law requires us to keep.
10. Deleting your account
You can delete your account from the App, under Profile → Delete my Navvento account, or by asking for it by email. Your account, your profile, your personal data, your memberships and your permissions are deleted. What you posted, commented or wrote to others stays in the conversation or the channel, but without your name. If you own a space, you must first transfer it to another member. The complete steps are in Delete your account.
11. Your rights and how to exercise them
As the data subject you have the right to:
- Know, update and correct your personal data.
- Ask for proof of the authorization you gave us.
- Know how we have used your data.
- Revoke the authorization and ask us to delete your data.
- Access your data free of charge.
- File complaints with the Superintendence of Industry and Commerce (SIC) after having made your claim to us.
You can edit most of your data directly in the App. For any other request, write to app@navvento.com stating your name, your account email and what you are asking for. We answer inquiries within 10 business days and claims within 15 business days, extendable as the law allows.
12. Security
All communication between the App and our servers is encrypted (HTTPS/TLS). Access to data is controlled by permissions in the database: each person can read only what corresponds to them according to their spaces and channels. The information the App stores on your phone to work offline is encrypted and is deleted when you sign out. No system is 100% secure; if an incident affecting your data occurs, we will notify you and notify the authority as the law requires.
13. Minors
Navvento is intended for people aged 14 or older. If you are between 14 and 17, you need the authorization of your mother, father or legal representative to use the App and for us to process your data, as required by article 7 of Law 1581 of 2012 and article 12 of Decree 1377 of 2013. When processing teenagers' data we respect their best interests and their fundamental rights, and their representative can exercise the rights in this policy on their behalf.
We do not knowingly collect data from children under 14. If you know that one has given us data, write to us and we will delete it.
14. Phone permissions
- Camera: to take the photo of your profile, your space, a channel or your schedule, and to scan a space's QR. It is used only when you activate it.
- Photos: to choose an image from your gallery. We access only the images you choose. If, when sharing an invitation, you choose "Save image", the App saves that image to your photos.
- Notifications: for push notices. You can turn them off in your phone's settings.
15. Changes to this policy
If we change this policy, we will update the date above and, if the change is important, we will notify you in the App before it takes effect.
16. Contact
Write to us at app@navvento.com. The controller's other details are in section 1.