Privacy Policy

**Draft for legal review. Do not publish with placeholders.**

Effective date: `[DATE]` Version: `[VERSION]`

This Privacy Policy explains how `[NAVELLE LEGAL ENTITY NAME]` collects, uses, discloses, and protects personal information through Navelle's website, web application, communications, and related services.

## Information we collect

We may collect:

- Account information, such as email address, authentication information, display name, and country - Optional profile and wellness information - Optional symptom, mood, and wellness tracking information - AI messages and chat history when you enable Mennie - Saved content, preferences, and feature settings - Subscription and transaction status from our payment processor. Navelle should not store full payment-card numbers. - Device, browser, security, and operational information needed to provide and protect the service - Communications you send to Navelle

Consumer health data is described separately in our Consumer Health Data Privacy Policy.

## How we use information

We use personal information to provide accounts and requested features, personalize selected experiences, process subscriptions, communicate with users, secure and troubleshoot the service, comply with law, respond to privacy requests, and improve the platform using appropriately limited information.

We do not sell personal information. We do not use or disclose consumer health data for targeted advertising.

## Service providers

We use service providers for hosting, authentication, database services, storage, AI processing, payments, email, security, accessibility, analytics, and customer support. The final policy must identify the actual categories and material providers used at launch. Service providers receive only the information reasonably needed to perform contracted services.

## Cookies and analytics

Navelle may use essential cookies for authentication, security, preferences, and platform operation. Any optional analytics or marketing technologies must be disclosed and controlled through appropriate consent or opt-out tools. Do not deploy advertising trackers on authenticated pages or pages that reveal consumer health data.

## Payments

Payments are processed by Stripe or another provider identified at checkout. Navelle receives transaction and subscription status but should not receive or store complete payment-card information.

## Data retention and deletion

We retain information only as long as necessary for the purposes described in this policy, user-selected settings, security, legal compliance, and dispute resolution. Users may access account tools to delete eligible records and may submit a privacy request.

## Privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent; limit certain uses; opt out of sale or targeted advertising; or appeal a decision. Navelle does not discriminate against users for exercising privacy rights.

Submit requests through `[PRIVACY REQUEST LINK]` or `[PRIVACY EMAIL]`.

## Children's privacy

Navelle is intended for adults age 18 and older. We do not knowingly collect personal information from children under 18. If we learn that we collected such information, we will take appropriate steps to delete it.

## International processing

Navelle is operated from the United States. Information may be processed in the United States and other locations where approved service providers operate. Canadian users should review the cross-border processing section of the Consumer Health Data Privacy Policy.

## Security and breach response

We maintain safeguards designed to protect personal information and an incident-response process. No security method is guaranteed. We will provide notices required by applicable breach-notification laws.

## Changes

We may update this policy. The current version and effective date will appear at the top. We will provide additional notice or request consent when required.

## Contact

`[NAVELLE LEGAL ENTITY NAME]` `[MAILING ADDRESS]` `[PRIVACY EMAIL]`