| What we do | Status |
|---|---|
| Sell your personal data | Never |
| Show you advertising | Never |
| Track you across the internet | Never |
| Store your notes, meds, mood on our servers | Never — device only |
| Store or log your AI conversations | Never — discarded immediately |
| Expose your data to AI providers without a proxy | Never — we use a secure server-side proxy |
| Use privacy-friendly analytics | Yes — anonymous counts only |
| Receive messages you send us | Yes — to reply to you only |
| Process payments via Stripe | Yes — for Plus/Supporter plans only |
NeuroNav is an Australian not-for-profit organisation based in New South Wales, building free AI-powered accessibility tools for people with disabilities and vulnerabilities. We operate the website at neuronav.com.au and the NeuroNav web application.
Contact: [email protected] · ABN: 78 956 079 096
The following data is stored exclusively in your browser's local storage. It never leaves your device and is never sent to our servers:
We have no server-side database for personal app data and no ability to access any of this information. Clearing your browser's local storage removes it permanently.
We use Plausible Analytics — a privacy-friendly, EU-based analytics tool. Plausible uses no cookies, does no fingerprinting, and collects no personal data. We receive only aggregate counts (e.g. "500 people visited the home page this week"). We use this solely to understand which features are most used so we can improve the app.
If you contact us via our website form or by email, we receive your name, email address, and message. We use this only to respond to your enquiry. We do not add you to any mailing list without your separate consent. Contact form submissions are processed through Netlify Forms.
If you create a NeuroNav account, we store your email address (hashed) in your browser's local storage for authentication purposes. Account data is not stored on our servers. Password reset and email verification are handled via temporary cryptographic tokens sent to your email through Resend (see Section 9). We never store your password in plain text.
If you subscribe to a Plus or Supporter plan, payments are processed by Stripe (Stripe, Inc., USA). NeuroNav does not receive or store your credit card details — all payment information is handled directly by Stripe. We receive only a subscription status confirmation. Stripe's privacy policy is available at stripe.com/au/privacy. Stripe is subject to the Payment Card Industry Data Security Standard (PCI-DSS).
When you use an AI feature (such as "Explain this letter"), your text is processed through a secure server-side proxy operated by NeuroNav and hosted on Netlify. The data flow is:
Key facts about this process:
AI processing is governed by:
If you enable medication reminders, NeuroNav requests permission to send browser notifications. These reminders are generated entirely on your device using the Web Notifications API — no notification content or timing data is sent to our servers.
Several of the services NeuroNav uses are based overseas, primarily in the United States. Under APP 8 of the Privacy Act 1988 (Cth), we are required to disclose cross-border data transfers:
These providers are bound by their own privacy policies and applicable US and international data protection frameworks. By using AI features or subscribing, you consent to these cross-border transfers. You can avoid all AI processing by using only the non-AI features of NeuroNav (medications, routines, emergency card, etc.) which never leave your device.
NeuroNav may be used to store health-related information such as medication names, mood logs, and disability-related notes. Under the Health Records and Information Privacy Act 2002 (NSW), we are committed to the Health Privacy Principles (HPPs). In particular:
Because NeuroNav stores your personal app data only on your own device and does not transmit it to our servers, the risk of a data breach on our end is very low. However, if we become aware of a data breach affecting any personal data we do hold (account email, payment records held by Stripe, or Netlify server logs) that is likely to result in serious harm, we will:
To report a suspected data breach, contact us immediately at [email protected].
All communication between your browser and our website is encrypted via HTTPS/TLS. Our AI proxy uses server-side API keys stored as Netlify environment variables — these are never exposed in browser source code. Your locally stored app data is protected by your device's own security and browser sandbox.
NeuroNav may be used by or on behalf of children with disabilities, always with parental or carer supervision. We do not knowingly collect personal information from children under 13. Our Kid Mode is designed for ages 8–17 with age-appropriate content and safeguards. If you believe we have inadvertently collected a child's personal information, contact us immediately at [email protected] and we will delete it promptly.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992. NSW residents may also contact the NSW Privacy Commissioner at the Information and Privacy Commission NSW at ipc.nsw.gov.au or 1800 472 679.
We may update this policy when our practices change. We will update the date at the top of this page and notify users of significant changes via the app.