Last updated June 11, 2026
Navah is operated by Epiphany Made LLC. We never sell your information.
You’re trusting Navah with details about your family, so here is exactly how your information is handled — in plain language, with no overclaiming.
To do its job, Navah stores your conversations and the family details you share (names, sizes, appointments, reminders, and so on). This information is stored securely on our servers. It is not end-to-end encrypted — we are honest about that. Our team can access stored data only when needed to operate, support, or fix the service.
Six fields are encrypted at rest with AES-256-GCM: a family member’s medical notes, insurance ID, last name, maiden name, seminary and seminary year. That is the whole list, and we would rather name it than imply more. Everything else — appointments, reminders, conversations, notes — is stored unencrypted at the field level and protected by per-household isolation enforced in the database itself.
We do not sell your information, and we do not share it for advertising — ever. We share data only with the service providers we need to run Navah, and only so they can provide their part of the service:
If you opt in to receive Navah by text, you consent to recurring automated text messages — daily briefings, reminders, replies, and account and billing notices. Message frequency varies. Message and data rates may apply. Reply STOP at any time to cancel, or HELP for help.
We do not share or sell your mobile phone number, or your SMS consent, with any third party for their own marketing. Your mobile information is disclosed only to the messaging carriers and our messaging provider (Twilio) for the sole purpose of delivering the messages you asked for. No mobile opt-in data is shared with third parties or affiliates for marketing purposes.
Text Navah EXPORT MY DATA. You get a link to a single file containing every row Navah stores for your household, with the encrypted fields decrypted — they are yours. Live credentials (login tokens, unspent codes) are listed but their secret value is replaced, and the file says so. The link opens once and expires after 24 hours. On a phone with no browser, email hello@navah.ai and we will send it another way.
Text Navah DELETE MY DATA. Navah texts back a six-digit code; reply DELETE and that code within 30 minutes and your household is erased — every table, in one transaction, all of it or none of it — and Navah confirms when it is done. DATA STATUS tells you where a request stands. You can also email hello@navah.ai and we will do it by hand within 30 days.
Two things are deliberately kept, and we would rather say so than surprise you. The first is a dated record that a deletion was requested and completed — the kind, the status, the dates and how many rows went. It carries no phone number, no name and no content. The second is the record that a number replied STOP, if you ever did: deleting that would let us text you again by mistake, which is the opposite of what you asked for.
Encrypted backup snapshots are a separate thing and we will not pretend otherwise. They rotate out on their own schedule and exist only to restore the whole database after a failure — we do not use them to bring one household back, and a restored copy is re-erased.
We keep your information for as long as your account is active, so Navah can keep remembering for you. One nuance worth stating: to keep recall sharp, Navah archives older event-type memories and long-past appointment notes — they stop being surfaced in conversation, but they are still stored and they still appear in your export, and they are still erased when you ask. Nothing is quietly thrown away, and nothing is kept after you say delete.
Navah is for parents. You may store details about your own children to manage your household — that information is treated with the same care as everything else here, and the same encryption applies to sensitive fields.
Email hello@navah.ai anytime. We’d rather you ask than wonder.
← Back to Navah