Privacy Policy

Last updated: 6/14/2026

This Privacy Policy explains how Nauffly (“we,” “us,” or “our”) collects, uses, and shares information when you use Javi, our production management application for video and photo teams, available at app.getjavi.com and as a mobile app (collectively, the “Service”).

By using Javi, you agree to the practices described in this policy.

Information We Collect

We collect the following types of information:

Account information. When you create an account or are invited to a workspace, we collect your name, email address, job title or role, and any profile details you provide.

Workspace content. Javi stores the data you and your team add to operate your production workflow — including gear and equipment records, kits, events, reservations, rentals, quick checkouts, clients, and related notes and documents.

Payment information. We use Stripe to process subscription billing. Your payment card details are entered directly into Stripe and are handled by Stripe under its own privacy policy; we do not store your full card number on our servers. We retain limited billing records such as your plan, subscription status, and transaction history.

Device and usage information. When you use the Service, we automatically collect basic technical information such as device type, operating system, app version, and log data used to operate, secure, and improve the Service.

Camera access. The app may request camera access to scan QR codes or barcodes on equipment. Images are processed on your device for scanning and are not stored or transmitted by us unless you choose to save a photo within the app.

Biometric login. If you enable fingerprint or Face ID sign-in, biometric verification is performed entirely by your device’s operating system. We do not receive, collect, or store your fingerprint or facial data. To support this feature, your login credentials are stored in your device’s secure keystore (Android Keystore or iOS Keychain) and are not transmitted to us.

How We Use Information

We use the information we collect to provide and maintain the Service; create and manage your account and workspace; process subscriptions and billing; send transactional emails such as account notifications, reminders, and receipts; secure the Service and prevent abuse; respond to support requests; and improve our features and performance.

How We Share Information

We do not sell your personal information. We share information only as needed to operate the Service, including with the following service providers:

Supabase, which provides our database, authentication, and backend hosting.

Stripe, which processes payments and subscription billing.

Resend, which delivers transactional email on our behalf.

Our hosting and content delivery providers, which serve the application.

Google Play and the Apple App Store, which distribute our mobile apps.

We may also share information if required by law, to protect our rights or the safety of others, or in connection with a business transfer such as a merger or acquisition. Members of your workspace can see content you add to that shared workspace.

Affiliate Links

Javi includes product information and links from B&H Photo through their affiliate program. If you click an affiliate link, B&H may receive information about that visit under its own privacy policy. We do not share your account information with B&H.

Data Retention

We retain your information for as long as your account or workspace is active, and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account or workspace, we delete or anonymize associated data within a reasonable period, except where retention is required by law.

Security

We use industry-standard measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To make a request, contact us using the details below. We will respond as required by applicable law. If you are in the European Economic Area or United Kingdom, our legal bases for processing include performing our contract with you, our legitimate interests in operating the Service, and your consent where required. If you are a California resident, we do not sell your personal information as defined under the CCPA.

Children’s Privacy

Javi is intended for business use by professionals and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children.

International Users

We operate in the United States, and your information may be processed and stored there or in other countries where our service providers operate. By using the Service, you understand your information may be transferred to countries with different data protection laws than your own.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date, and significant changes may be communicated through the Service.

Contact Us

If you have questions about this Privacy Policy or your information, contact us at javi@nauffly.com.