If anything here is unclear, please email hello@navifounders.com and we'll explain in plain language. We genuinely prefer hearing from you to hearing from a regulator.
1. Who we are
Navi Founders is an eight-week one-to-one mentorship programme for ambitious teenagers (ages 13–18). The website at navifounders.com is operated by its founders, Matyas and Morris, based in Denmark. We are the data controllers for the personal information described in this policy. Navi Founders is not currently a registered legal entity; it's the two of us, working together.
You can reach us at hello@navifounders.com for any question about your information, including to use the rights set out in section 9. For anything you believe is a security issue, please email security@navifounders.com.
2. Who this policy applies to
- Parents and guardians who visit the site, send us a question, book a call, or submit an application or scholarship application.
- Students aged 13–18 whose details a parent provides on the application forms. We ask that the forms be filled in by a parent or guardian - the contracting party for the programme is always the parent.
- General visitors to navifounders.com.
We do not intentionally collect information from children under 13. If you believe a child under 13 has sent us information, please email us and we will delete it.
3. What we collect, and why
We've kept this short and specific. Everything below is something we actually do today - not a generic list.
a. Booking a free call
When you book a call on the apply page, we collect: whether you're a parent or a student, the student's name and email, the parent's name and email, the student's age, the student's current school year, your written answers to four short questions about the student, and the time slot you choose.
We use this only to confirm your booking by email, help Matyas prepare for the call, and decide together with you whether the programme is a good fit.
Legal basis: Steps you take at your own request before entering a contract (GDPR Art. 6(1)(b)). The optional fourth question relies on our legitimate interest in running an efficient booking flow (Art. 6(1)(f)).
b. Founding-cohort application
When you apply to the founding cohort on the application page, we collect: whether you're a parent or a student, the student's name and email, the parent's name and email, the student's age and current school year, your written answers to two short questions, and the interview time you choose.
We use this only to review the application, arrange the interview with the student, and decide together with you whether the founding cohort is a good fit. We email you to confirm.
Legal basis: Steps you take at your own request before entering a contract (GDPR Art. 6(1)(b)), and our legitimate interest in running an efficient application process (Art. 6(1)(f)).
c. Scholarship application
When you apply for the scholarship on the scholarship page, we collect the same parent and student basics as above, plus six written answers. Two of those - why you need a scholarship, and what receiving it would change for the student - invite you to write in more depth.
We use scholarship answers only to assess your scholarship application. They are read by Matyas. We do not publish, share, or use scholarship content for any other purpose.
Please only include details that are relevant to a scholarship decision. You do not need to tell us about health, disability, religion, ethnicity, political views, family circumstances, or anything similarly sensitive. If something like that is genuinely relevant and you choose to share it, we'll treat it confidentially and use it only for the scholarship decision.
Legal basis: Steps taken at your request before a possible contract (Art. 6(1)(b)) and our legitimate interest in running a fair scholarship process (Art. 6(1)(f)). If you voluntarily share special-category information (Art. 9), we rely on your explicit consent - you can withdraw it at any time by emailing us, and we'll delete that information.
d. The "Ask Navi" assistant
If you use the assistant on the questions page, we collect the messages you type, the assistant's replies, an approximate location based on your IP address, and the number of model tokens used. We use this to answer your question and to review the assistant's quality.
The messages you type are sent to Anthropic (United States), who runs the AI model that generates the reply. Please don't enter personal, sensitive, or confidential information into the chat. If you'd rather speak to a person, email hello@navifounders.com or book a call.
Legal basis: Your decision to use the assistant (Art. 6(1)(a) - consent for the chat itself) and our legitimate interest in operating and improving it (Art. 6(1)(f)).
e. Visitor analytics
When you load a page on navifounders.com, we record some technical information about the visit: a random per-pageview ID, an approximate location based on your IP address (the IP is truncated before storage so we can see roughly where in the world a visitor came from, but not a specific household), your browser and operating system, the page you viewed, where you came from, and engagement signals like time spent, scroll depth, and clicks.
We do not set a persistent identifier in your browser for analytics, we do not record a device fingerprint, and we do not store your precise IP or location. We send a small per-page beacon to our own internal analytics dashboard for the same overall purpose.
Legal basis: Our legitimate interest in understanding how the site is used so we can improve it (Art. 6(1)(f)). Because the information is aggregate-level and contains no persistent or device-level identifiers, no consent banner is required.
f. Contacting us directly
If you email us, we'll hold your message and our reply for as long as we need to respond and keep a reasonable record of the conversation. Legal basis: Our legitimate interest in handling correspondence (Art. 6(1)(f)).
g. Site security and operations
Our server keeps short-lived access logs containing IP addresses and request paths for security and troubleshooting. The admin area is protected by a session cookie that's only set when an administrator signs in. Legal basis: Our legitimate interest in keeping the site secure (Art. 6(1)(f)).
4. Who else sees your information
Most of your information stays on our own server, hosted in the European Union. We use a small number of additional service providers ("processors"). We do not sell your information, and we do not use it for advertising.
| Provider | What they do for us | Where |
|---|---|---|
| Hetzner | Hosting our server, including the database | EU |
| Resend | Sending the confirmation and notification emails for bookings and applications | United States |
| Anthropic | Powering the "Ask Navi" assistant on the questions page | United States |
| Cloudflare | A privacy-friendly human-check (Turnstile) on the chat assistant. Almost always invisible; only unfolds an interactive challenge if Cloudflare flags the visitor | United States |
Where information moves to a country outside the European Economic Area (currently: the United States), we rely on the European Commission's EU–US Data Privacy Framework where the provider is certified, and on Standard Contractual Clauses as a backup. You can ask us for a copy of the safeguards in place.
5. How long we keep it
| Information | How long we keep it |
|---|---|
| Booking enquiries and call applications | Up to 12 months after your last contact with us, unless you become a student or you ask us to delete sooner |
| Scholarship applications | Up to 12 months after the scholarship decision, unless you ask us to delete sooner |
| Records of enrolled students | For the length of the programme and up to 3 years after it ends, where needed for support, follow-up, or to defend or pursue a legal claim |
| "Ask Navi" conversations | Up to 12 months, for quality review |
| Visitor analytics | Up to 90 days, then automatically deleted |
| Server access logs | Up to 30 days |
| Records we're legally required to keep (e.g. tax records, where applicable) | For the period the law requires |
These periods are maximums. We delete sooner where we no longer need the information. The automatic deletions for analytics, conversations, and applications are run by our server daily.
6. Cookies and similar technologies
Our site uses a small number of technologies that sit on your device. We do not use advertising cookies, tracking pixels, social-media plugins, session-replay tools, or any third-party analytics.
Strictly necessary (always on)
- A per-tab conversation memory for the "Ask Navi" assistant. Only used if you actually send a message on the questions page, so a refresh doesn't lose your chat. Cleared when you close the tab.
Analytics
We don't store a persistent identifier in your browser for analytics. The per-pageview measurements described in section 3(d) are kept on our own server only and do not require a consent banner.
7. Marketing emails
We don't run a marketing mailing list. The only emails we send today are:
- A booking confirmation when you book a free call, and an acknowledgement when you submit a scholarship application.
- Replies when you write to us.
- If the student enrols, the practical updates needed to run the programme - for example, the weekly written update to parents.
If we ever start a separate optional newsletter, we'll ask for your separate, unticked consent and make it easy to unsubscribe in every message.
8. Photos, testimonials, and case studies
We don't use anything you write to us as a testimonial or case study without asking you first, in writing. If we ever want to feature a student's work, a parent quote, or a photo, we'll ask for separate, specific consent, and you can withdraw it at any time.
9. Your rights
Under EU and Danish data protection law you have the right to:
- Ask what information we hold about you and get a copy (access).
- Ask us to correct anything that's wrong (rectification).
- Ask us to delete your information when we no longer need it (erasure).
- Ask us to limit how we use it while we look into a concern (restriction).
- Object to processing we base on legitimate interests.
- Ask us to send your information to another provider in a portable format, where this applies.
- Withdraw any consent you've given (for example, for the chat assistant or for optional testimonial use), without affecting things we did with that consent before you withdrew it.
To use any of these rights, please email hello@navifounders.com. We'll respond within one month.
If you're not happy with how we've handled your information, you can complain to the Danish Data Protection Authority (Datatilsynet). If you live in another EU country, you can also complain to your own national data protection authority. We'd much prefer hearing from us first so we can put it right.
10. Children
The programme is for teenagers aged 13–18. Our forms are designed to be filled in by a parent or guardian, who is also the contracting party. We ask that you do not let a child under 13 submit a form, and that students aged 13–17 involve a parent in the decision to apply.
If we learn we hold information about a child under 13 without an appropriate basis, we will delete it.
11. Security
We host our site on our own server in the EU. The database is reachable only from inside the server. The admin area uses bcrypt-hashed passwords, session-only cookies, and a tight Content Security Policy. We monitor for abusive traffic and apply security updates regularly.
No system is perfect. If you believe you've found a vulnerability, please email security@navifounders.com.
12. Automated decision-making
We do not use automated decision-making or profiling that has a legal or similarly significant effect on you. A simple bot-detection score on visits helps us tell humans from automated traffic in our internal stats; it does not change anything you see, and it has no bearing on whether your application is accepted.
13. Changes to this policy
If we make a substantive change, we'll update the "Last updated" date at the top, and - where appropriate - let people we hold information about know directly.