Privacy Policy

Effective: April 12, 2026

IntNav Inc. ("IntNav", "we", "us") builds software for image-guided interventional navigation and related clinical workflows. This Privacy Policy describes how we handle personal information when you use our website (intnav.com) and our application at intnav.com/app (collectively, the "Service").

We designed IntNav to minimize the personal and health information that ever leaves your device. Medical images are processed locally in your browser and are never uploaded to our servers unless you explicitly choose a cloud feature that requires it.

1. Information we collect

When you create an account or sign in, we collect only the information needed to provide the Service:

• Account data — email address, display name, and profile image (from the sign-in provider you choose: email, Google, or LinkedIn).
• Professional profile data — role, specialty, institution, and other information you choose to add (for example, your LinkedIn headline).
• Usage data — anonymized metrics such as which features are used, error reports, and session length. We do not combine this with medical images.
• Authentication tokens — stored in your browser to keep you signed in.

2. What we do NOT collect

• DICOM images or patient pixel data — processed locally in your browser. Never uploaded to our servers.
• Patient-identifying information (PHI) — patient names, MRNs, and dates of birth stay on your device.
• Your browsing history outside IntNav.
• Location, contacts, device identifiers, or advertising IDs.

3. How we use information

• To authenticate you and keep your account secure.
• To present your professional profile and enable collaboration features you opt into.
• To improve the Service based on aggregated, anonymized usage.
• To communicate important account and service notices (for example, email verification, security alerts).

We do not sell personal information. We do not use your data for advertising. We do not share your profile with third parties without your explicit action.

4. Google user data

If you sign in with Google, we receive only your name, email address, and profile picture through Google's OpenID Connect scopes (openid, profile, email). IntNav's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to train AI models, and we do not share it with third parties for advertising or other unrelated purposes.

5. LinkedIn user data

If you sign in with LinkedIn, we receive your name, email address, profile picture, and headline. We use this to populate your professional profile in IntNav.

6. Storage and security

• Account data is stored with Supabase (US region), a SOC 2 Type II certified infrastructure provider.
• All data is transmitted over HTTPS/TLS.
• Medical images remain on your local device via IndexedDB and the File System Access API. We cannot read them.
• Session tokens are scoped to this origin and expire automatically.

7. Your rights

You may at any time:

• Sign out and clear local data.
• Request deletion of your account and associated profile data by emailing support@intnav.com.
• Export your profile data.
• Withdraw consent for any optional processing.

8. HIPAA, GDPR, and other laws

IntNav is designed for medical professionals. Because we do not collect PHI on our servers, our current operating model is a "reference architecture" rather than a HIPAA-covered storage service. Institutions requiring a HIPAA Business Associate Agreement (BAA) for clinical production use should contact us at support@intnav.com.

EU/UK users: you have rights under GDPR/UK-GDPR including access, rectification, erasure, and objection. Contact us to exercise these rights.

9. Children

IntNav is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new effective date at the top of this page. Material changes will be notified by email to active account holders.

11. Contact

Questions or requests about this Privacy Policy:

• Email: support@intnav.com
• Website: intnav.com