1. Controller and contact
Navurex, operating the Navurex service from Italy, is the controller for personal data described in this notice. You can contact Navurex, including for privacy-rights requests, through the Contact page.
2. Data we process
- Account data: email address, account identifier, account creation time, optional display name and authentication metadata.
- Personalization data: saved matches, teams and competitions, primary team/league preferences, and your Free/Pro entitlement status.
- Pro waitlist data: your account email, account identifier, source, consent version and time you joined the waitlist.
- Contact data: the email, optional name, topic and message you submit through the Contact page.
- AI feature inputs: if you use an AI question/analysis feature, the question and relevant match/model context needed to generate the answer.
- Technical and optional analytics data: security, request and diagnostic information needed to operate the service. If you allow optional analytics, Navurex also records first-party product events such as page views, match opens, Save/Follow actions, sign-up/login completion, Pricing visits and Pro waitlist actions, together with random browser/session identifiers, page pathname (without query-string parameters), external referrer host and campaign parameters where present. Navurex Analytics V1 does not attach your account email or account identifier to those optional analytics events. Navurex does not currently use advertising pixels or profiling trackers.
3. Why we process data and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Create and operate your account | Account and authentication data | Performance of the service requested by you / steps at your request |
| Save favorites and personalize My Navurex | Preferences and account identifier | Performance of the service requested by you |
| Protect Navurex, prevent abuse and diagnose faults | Technical/security data | Legitimate interests in security, reliability and service integrity |
| Measure product usage and improve Navurex | Optional first-party analytics events and random browser/session identifiers | Your consent; optional analytics is disabled until you allow it |
| Answer support, legal or privacy requests | Contact data | Legitimate interests, legal obligations, or steps at your request depending on the request |
| Send Pro launch/availability updates | Waitlist email and account identifier | Your consent; joining the waitlist is optional |
| Generate AI match explanations or answers | Your question and relevant football/model context | Performance of the feature requested by you |
| Meet legal obligations or establish/defend claims | Relevant records | Legal obligation and/or legitimate interests |
4. Service providers and recipients
Navurex uses service providers to operate the product. These currently include Supabase for authentication, database services and storage of Navurex first-party analytics events, Vercel for hosting/infrastructure, and OpenAI for AI features when you choose to use them. Football fixtures, results and standings are obtained server-side from API-Football / API-Sports; Navurex does not need to send your account profile to that football-data provider to retrieve public match data.
For OpenAI API requests made by Navurex, the application is configured with store: false. Navurex does not intentionally persist your AI chat question in its own user-profile database. Provider processing remains subject to the applicable provider agreements and technical operation of the service.
5. International processing
Some infrastructure or technology providers may process data in countries outside the European Economic Area. Where required, Navurex relies on the safeguards made available by those providers and applicable data-protection law. The exact processing location can depend on the provider and account configuration.
6. Retention
- Account and profile: kept while your account is active and deleted or anonymized when no longer needed, subject to legal/security retention.
- Favorites and preferences: kept until you remove them or your account is deleted.
- Pro waitlist: kept until you leave the waitlist or the waitlist/launch communication purpose ends; records no longer needed for that purpose are removed.
- Contact requests: normally kept for up to 12 months after the request is resolved, unless a longer period is necessary for a legal dispute or obligation.
- Optional analytics events: normally retained for up to 13 months for product measurement, after which they may be deleted or aggregated. The random browser identifier used by the Navurex application is also rotated after approximately 13 months and is removed from browser storage if you choose Essential only.
- Authentication cookies: the refresh cookie is configured for up to 30 days; access tokens are shorter-lived. See the Cookie Policy.
7. Your rights
Depending on the circumstances, GDPR rights may include access, rectification, erasure, restriction, portability and objection. Where processing is based on consent, you can withdraw that consent at any time without affecting processing that occurred before withdrawal. You may also lodge a complaint with the Garante per la protezione dei dati personali or another competent supervisory authority.
Use the Contact page and select Privacy / data rights to make a request. Navurex may need reasonable information to verify that the request relates to your account.
8. Automated decisions and football predictions
Navurex models generate probabilities about football matches. They are not automated decisions about you and are not used to make decisions that produce legal or similarly significant effects on users.
9. Children
Navurex accounts are not intended for children under 14 in Italy. If a different minimum age applies where you live, that local requirement also applies. Navurex does not knowingly design the service to profile children.
10. Analytics choices
Optional analytics is disabled until you allow it. You can withdraw that choice at any time from the Cookie Policy. Withdrawing stops future optional analytics collection by the Navurex application and removes its analytics identifiers from browser storage; it does not retroactively delete already collected records where Navurex has a lawful reason to retain them for the stated retention period.
11. Changes to this notice
Navurex may update this notice when the service, providers or legal requirements change. The current version date appears at the top of this page. Material changes will be presented in an appropriate way before they take effect where required.