Navigaze security
Last updated 13 November 2026
A plain-language account of what leaves your phone and glasses, where it goes, how it is protected, how long it is kept, and how to delete it. The privacy policy remains the authority on what we process and why.
At a glance
- Everything Navigaze sends to our servers travels over encrypted connections.
- Your own API keys, your Strava sign-in and your licence key stay on your phone and are left out of the cloud backup.
- Your position is not stored unless you choose to be shown to other riders, and then only for about 10 minutes.
- Navigaze is not open source. Instead, every release publishes a software bill of materials and a vulnerability report, below.
- Found a problem? Write to [email protected].
What leaves your phone and glasses
| What | Where it goes | Do we keep it? |
|---|---|---|
| Your location, destinations and search text, in the requests the app makes | Some requests go to our server, which passes them to the routing, traffic, search or data provider using our own account, so the provider sees our server and not your phone. Others go straight from your phone to open map and data providers, which then see your IP address and the request. | Not kept against you. Our servers may cache request coordinates without an identifier for up to 14 days; a Pro user’s last speed-limit lookup is held for up to 1 hour. |
| Community alerts: your position about once a minute while the app is open and alerts are on, and the reports you submit | Our community alerts server. A position ping is dropped on arrival unless you chose to be shown to others; then it is held about 10 minutes, rounded to roughly 110 metres. | Reports expire after 30 minutes to 90 days depending on the kind, and each confirmation renews them. |
| Short voice clips (Pro voice search) | Your phone to our server, which passes the clip to a speech-recognition provider. | Not kept by us. |
| Cloud backup (Pro) | Your phone to our server: saved places, recent destinations and searches, saved routes and settings, tied to your Even account ID. Your licence key, your own API keys, your Strava sign-in, trip logs and workouts are left out. | Until you switch backup off. It expires 2 years after the last backup. |
| Strava, if you connect it | The sign-in passes through our server once to complete the connection. | Up to 10 minutes on our server, then only on your phone. |
| Group rides (Convoy) | The Convoy relay. Chat, positions and the route are encrypted on your phone before they are sent. Voice is relayed live and mixed by the relay, so it is not end-to-end encrypted. | No. Rooms exist only in the relay’s memory and close when the ride ends or goes quiet. |
| Account and billing (Pro) | Licence key, and your first name and email address from PayPal, which takes the payment. | While you are a customer, then up to 7 years for tax and accounting. |
| Diagnostics | App version, platform, plan, which HUD mode is open, errors and timings. Never coordinates, addresses, search text, email addresses or keys. One switch in Settings turns it off. | Up to 90 days as daily records and 13 months as a summary; reports up to 30 days. |
Tip: give a private ride a password.
In transit
- Navigaze connects only to encrypted addresses (HTTPS and secure WebSockets). The one exception is a device on your own network that you set up yourself, such as Home Assistant or a music server, which you may have configured without encryption.
- Payment notifications are checked with PayPal before we act on them. One that fails the check is ignored.
- Convoy access passes are signed and last 5 minutes.
At rest
- Server-side data sits in our cloud hosting provider’s managed storage, which encrypts stored data.
- On your phone, Navigaze keeps its settings and keys in the app’s own storage.
Deleting your data
- Cloud backup. Switch it off in Settings and confirm. That deletes the stored backup and its copies.
- Everything else. Email [email protected]. We may ask for your licence key or install identifier to find your data. We keep only what the law or billing requires, such as payment and tax records.
- Uninstalling the app does not delete data held on our servers. Most of it expires on its own; the table above and the privacy policy give each period.
- You can cancel Pro in the app or at PayPal.
Software bill of materials
We are not open-sourcing Navigaze. To show you what you are running, every release of Navigaze, and each server it talks to, publishes a software bill of materials (CycloneDX, machine-readable), generated from the exact build, together with a vulnerability report listing every known advisory against those components and its status.
Read the bills of materials and vulnerability reports on sufiplugins.com
Reporting a security problem
Email [email protected] with “Security” in the subject, and say what you found and how to reproduce it. Please report it to us privately first, avoid touching other people’s data, and give us a reasonable time to fix it before you publish. Our contact details are also at /.well-known/security.txt.
Navigaze is provided by Sufi Plugins, LLC, Maryland, USA. Contact: [email protected]. Navigaze is not affiliated with Even Realities. · Privacy · Terms · Navigaze