Unhinged Nav Privacy Policy

Updated October 24, 2026. Unhinged Nav is operated by Giovanni Nicola. Contact: hello@unhingednav.com. This policy covers the Android beta and this website.

Navigation and location

Your location, destinations and route information are used for search, routing, route progress and turn-by-turn guidance. Navigation can use location while an active trip continues with the screen off or the app in the background, with Android's navigation notification and Stop control. Location permissions and Android controls apply. The current Android beta uses TomTom for primary place search and Mapbox for maps and routing. Search providers receive your query and the relevant search location or area; routing providers receive the route endpoints and requested routing options. Other enabled configurations may use Google Maps Platform. Fallback search services may include Photon/Komoot and OpenStreetMap/Overpass services.

Optional beta black box

After your one-time agreement, every navigation trip records automatically until it ends, including after app restarts. Diagnostics can include precise location/route history, GPS quality, speed, maneuvers, spoken navigation lines, voice-command transcripts/results, ratings and feedback, trip identifiers, app/build information and a persistent tester identifier. They are used to diagnose and improve the beta, not for advertising. Completed trips upload to our Supabase-hosted backend; failed uploads remain queued on your phone. Turning the black box off stops future collection and uploads but does not delete existing uploads or queued records.

Microphone and voice services

The black box does not make a continuous cabin-audio recording. Manual voice commands and voice feedback use the microphone. If you separately enable hands-free commands in Settings, the app automatically opens repeated short listening sessions while moving, between spoken directions, while the app is foregrounded and audio is free. These sessions can capture nearby speech. Listening pauses for calls and when the app is backgrounded. You can disable hands-free commands independently of diagnostics. Android's speech-recognition provider processes commands and may use network processing under its own settings and privacy practices.

Approved custom voices send navigation text to Hume through our server; that text may include road or place information. Optional telephone-number transcription, when explicitly requested, sends bounded microphone audio through our server to OpenAI. Server-side temporary audio is cleared after processing; we do not claim that third-party providers have zero retention. Provider policies and contractual settings apply.

Accounts and preferences

If you create an account, our authentication provider processes your email, authentication identifiers and credentials. The app can store navigation preferences associated with your account. Age confirmation records an 18-or-older affirmation; we do not ask you to upload identity documents for this beta. Adult Mode is optional and intended for adults.

Website waitlist

We collect the name, email, phone type, country and email-consent information you submit, plus campaign/referrer details when supplied. These are used for beta participation, invitations, updates, signup validation and abuse prevention. You can withdraw email consent or request deletion.

Retention and deletion

Account information is retained while your account is active. Waitlist information is retained while needed for the beta and consented updates. Diagnostic data is retained while needed to investigate beta behavior and is reviewed for removal when that purpose ends or a verified deletion request is processed. There is currently no fixed automatic expiry for the beta diagnostic archive. Provider-derived cached content is subject to the applicable provider's caching limits. We do not promise that turning off a setting or uninstalling the app erases server data.

Use Account and data deletion or the Privacy and account deletion section in app Settings to request account and associated-data deletion. A request is acknowledged before deletion is complete. We verify account and trip ownership, then process the request, including associated account records, diagnostic records we can securely associate with you, and requested waitlist data. Legacy guest trip records may require additional ownership information from the originating phone. We do not delete another person's data merely because someone enters their email. Request records are kept during processing and removed when no longer needed. Any legally required retention exception will be explained during processing. Provider backups and independently controlled recognition-service histories may follow their own retention/deletion schedules.

Security, service providers and sharing

App services use HTTPS. Backend administrator access is restricted, with row-level controls on diagnostic records; clients are not given a public trip-history browsing API. Supabase provides hosting/authentication; TomTom, Google Maps Platform where enabled, Mapbox, your Android speech service, Hume and, for optional number transcription, OpenAI process the data needed for their functions. Other search providers may receive location/search queries for fallback results. Provider SDKs may also process service/security/usage information under their policies. This policy is not a claim of an independent security certification.

We do not sell personal information or search placement, and do not use trip history for targeted advertising. We may disclose information when legally required. If you use the app outside the hosting/provider region, information may be processed in other countries.

Provider terms and policies

For the exact handling of audio by your selected Android recognition provider, review that service's settings and privacy policy. Third-party links do not replace Unhinged Nav's responsibility for its own data handling.