Privacy Policy — MyNaavi Foundation

MyNaavi Foundation ("MyNaavi," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

01 Information We Collect

We collect information you provide directly to us, including:

Name and email address when you create an account
Google account information when you connect Google services (Calendar, Gmail) via OAuth
Health data you choose to share (e.g., via Epic MyChart integration)
Calendar events, reminders, and preferences you create within MyNaavi
Communications and support requests you send to us

02 How We Use Google User Data

When you connect your Google account to MyNaavi, we access only the data necessary to provide the service:

Google Calendar — to read, create, and update calendar events on your behalf
Gmail — to read and summarize relevant emails when you explicitly request it

We do not sell, share, or use Google user data for advertising. We do not transfer Google user data to third parties except as required to operate the service (e.g., our backend infrastructure). Our use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements.

03 How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the MyNaavi service
Personalize your experience and deliver AI-assisted insights
Send you service-related communications
Respond to your comments and questions
Monitor and analyze usage patterns to improve functionality

04 Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

With service providers who assist us in operating the platform (e.g., Supabase for data storage), under strict confidentiality obligations
If required by law or to respond to legal process
To protect the rights, property, or safety of MyNaavi, our users, or the public
With your consent

05 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at the address below.

06 Security

We implement industry-standard security measures including encrypted data storage, secure HTTPS connections, and OAuth 2.0 for third-party integrations.

MyNaavi Foundation was founded by professionals who have designed and delivered solutions meeting the most demanding government security requirements in Canada. Privacy is not a checkbox — it is a structural design constraint built into every layer of the product.

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

07 Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate data
Request deletion of your data
Revoke Google OAuth access at any time via your Google Account settings
Opt out of non-essential communications

MyNaavi is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

08 Children's Privacy

MyNaavi is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

09 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the service after changes constitutes acceptance of the updated policy.

10 Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

✉️

hello@mynaavi.com MyNaavi Foundation · Ottawa, Ontario, Canada