Navori — Privacy Policy
Last updated: 23 August 2026
Navori is an app for finding and joining activities with other people. This policy explains what we collect, why, who else sees it, and how long we keep it.
We have tried to write it in plain language. Where we had a choice between a vague sentence that covers us and a specific one that tells you what actually happens, we chose the specific one.
1. Who is responsible for your data
Controller: Şükrü Caner Özdil, an independent developer trading as Navori.
Contact: privacy@navori.app
We are not a company and we do not have a registered office. The email address above is how you reach the person responsible for your data, for any request under this policy.
If you are in the UK or the EU/EEA and you think we are handling your data wrongly, you can complain to your national data protection authority. You can do that without contacting us first, though we would rather you gave us a chance to fix it.
2. Navori is for adults
Navori is for people aged 18 and over. We do not knowingly allow anyone under 18 to use it.
If our systems or a report suggest an account belongs to someone under 18, we put that account on hold and a person reviews it. We do not ask for identity documents and we will not accept them if you send them.
See our Child Safety Standards for how we handle this and how to reach us about it.
3. What we collect
You give us
| Data | When | Required? |
|---|---|---|
| Email address and Google account name | When you sign in with Google | Yes — it is how you sign in |
| Username, display name | Sign-up | Yes |
| Date of birth | Sign-up | Yes — we use it to check you are 18+ |
| Profile photo | If you upload one | No |
| Nationalities, places you live, hobbies, countries visited | If you fill them in | No |
| Activities you create, and their location | When you create one | Location yes, for the activity to be findable |
| Messages, photos, polls, expenses, checklists you post | As you use the app | No |
| Reports you submit about other people | If you report someone | No |
We collect as you use the app
| Data | Why |
|---|---|
| Which activities you join, RSVP to, or check in at | To run the activity |
| Who you follow and who you block | To run those features |
| Karma ratings you give and receive | Community rating feature |
| Your device's approximate or precise location | Only when you use the map or ask for nearby suggestions |
| Moderation counters — warnings, suspensions, reports about you | To enforce our community rules |
We do not collect
We do not use advertising identifiers, we do not run ad networks or third-party analytics SDKs, and we do not sell or rent your data to anyone. We do not build advertising profiles.
Some interests can say more about you than a hobby
Interests are optional, and you pick them from a list we provide — you cannot type your own. But a few of the options on that list can reveal something the law treats as sensitive: for example LGBTQIA+ Rights or Pride may suggest your sexual orientation, Politics, Activism or Feminism may suggest your political opinions, Disability Rights may suggest a health condition, and Vegan may suggest a philosophical belief.
Three things you should know:
- Choosing any interest is entirely optional. Navori works without them.
- Interests you choose are shown on your profile to other people. They are not private.
- You can add or remove any interest at any time, and removing one removes it everywhere.
We do not use your interests for advertising, we do not sell them, and we do not use them to make decisions about your account.
4. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Run your account and show you activities | Performance of a contract |
| Keep the community safe: moderation, reports, suspensions, preventing banned people from coming straight back | Legitimate interests — protecting our users and the service |
| Check that users are 18 or over | Legal obligation and legitimate interests |
| Show your location on a map, suggest nearby places | Your consent, given through your device's location permission |
| Send you notifications about your activities | Performance of a contract |
| Respond to legal requests and defend legal claims | Legal obligation, and establishing or defending legal claims |
You can withdraw location consent at any time in your device settings. The rest of the app keeps working.
5. Automated checks, and when a person is involved
Navori uses automated systems to help keep the community safe. You should know what they do and what they cannot do.
Photos. Every photo uploaded to Navori is checked automatically for explicit content before it is shown to anyone. The first check runs on your own device and most photos never leave it for this purpose. A photo is sent to an image safety provider only if the on-device check flags it as possibly explicit, or if the on-device check could not run on your device.
Reported messages. When someone reports a message, the message and a short window of the surrounding conversation are checked automatically to judge whether it breaks our rules.
Activity descriptions. Titles and descriptions of new activities are checked automatically.
What automation can and cannot do. An automated check can hide a photo, hide a message, issue a warning, or suspend an account for a fixed period under rules we set in advance. The severity of a penalty is decided by our own rules, not by the automated system.
Serious reports always go to a person. Reports involving physical or sexual harm, threats, stalking, or anyone under 18 are never decided by automation alone. A person reviews them.
If you disagree. Every warning and suspension tells you why and how to reply. Write to us at support@navori.app and a person will look again. For age holds, the exact sentence that triggered the hold is shown to you in the app, so you know what to respond to.
6. Who else sees your data
We do not sell your data. We use a small number of service providers who process data on our instructions and are not allowed to use it for their own purposes.
| Category of provider | What they receive |
|---|---|
| Cloud hosting and database | Everything in your account. They store it for us |
| Sign-in provider | Confirms your identity when you sign in |
| Image safety provider | Only photos that the on-device check flags as possibly explicit, or where that check could not run. Most photos are never sent |
| AI provider | Reported messages and a short window of surrounding conversation; new activity titles and descriptions; text you type when asking for a generated checklist; and, when you ask for nearby suggestions, your coordinates together with the interests on your profile |
| Maps provider | Map tiles, your searches for places, and coordinates you look at |
| Weather provider | The coordinates of an activity, to show its forecast |
| Email provider | An alert telling us a new report needs review. It contains a report reference and its category. It carries no message text, no names, and no other user content |
Before a message goes for an automated check, usernames in it are replaced with placeholders. The text itself is sent as written, because that is what is being judged. Attachments are never sent for message checks.
Other users see what you would expect them to see: your profile, the activities you join, and what you post in them. If your profile is private, followers need your approval first.
We may also disclose data where the law requires it, or to establish, exercise or defend legal claims.
7. Where your data goes
Our providers are located in the United States and elsewhere outside the UK and the EEA. Where data leaves the UK/EEA, it is transferred under the European Commission's standard contractual clauses or another lawful transfer mechanism.
8. How long we keep it
| Data | Kept for |
|---|---|
| Your account and profile | Until you delete your account |
| Messages you posted in group chats | Kept after you delete your account, shown as "Deleted user" |
| Activities you created | Kept after you delete your account |
| Reports, and the evidence attached to them | 2 years, then deleted automatically. Longer if there is a live legal claim |
| Record of who on our team opened a report | Kept with the report |
| Signals that stop a suspended person from immediately signing up again | For as long as the suspension lasts, then deleted automatically. Indefinitely where the account was suspended for being under 18 |
| Backups | Up to 7 days. Our hosting provider keeps daily backups for 7 days; anything you delete disappears from those backups as they roll over |
Why some things survive deletion. If we deleted your messages when you deleted your account, other people's group conversations would be full of holes, and activities you organised would disappear from under the people who joined them. So those stay, with your name removed.
Why moderation records survive deletion. If someone reported you, or you reported someone, that record is kept so that we can answer a legal claim and so our safety records are not rewritten by the person they are about. They are deleted on the schedule above.
9. Preventing banned accounts from returning
If an account is suspended, we keep a one-way cryptographic signature of the email address and the device it used. A signature cannot be turned back into an email address or a device ID.
We keep it so that someone who is suspended cannot delete their account and sign up again the next minute with the same address, wiping the suspension.
Being straightforward about this: because the system can answer the question "is this address suspended?", this is still personal data about you — it is pseudonymous, not anonymous. That is why it is described here, why it is not linked to anything else once an account is deleted, and why it expires when the suspension does.
A device match on its own never blocks anyone. Phones get resold. It only puts a note in front of a human reviewer.
10. Your rights
You can ask us to:
- give you a copy of your data
- correct anything wrong
- delete your account and data
- restrict or object to how we use it, including our safety processing
- take your data elsewhere in a portable format
- withdraw consent where we rely on it, such as location
Deleting your account. You can delete it yourself in the app under Settings → Delete account. If your account is suspended or on hold, the option is on that screen too. If you cannot open the app at all, use the form at https://navori.app/delete-account or write to privacy@navori.app.
Before you confirm, the app tells you exactly what is deleted and what is kept. Deleting your account does not end an active suspension.
We answer requests within one month. We do not charge for this.
11. Security
Your data is held in a database where access rules are enforced by the database itself, not only by the app. Private profile details, moderation records, and safety tables are not readable by other users. Photos in private buckets are served through short-lived links.
No service can promise perfect security, and we are not going to pretend otherwise. If a breach affects your rights, we will tell you and the regulator as the law requires.
12. Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always shows the current version.
13. Contact
privacy@navori.app Navori Circle