Privacy Policy

Self Personal Health, Inc. (doing business as Navi or Navi Care™) ("Navi," "we," "us," or "our") helps people find mental and behavioral health care by matching them with appropriate providers and platforms.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you:

• Visit or use our website at www.withnavi.co or any page that links to this Policy;
• Fill out our online forms, surveys, or quizzes;
• Communicate with a Navi Navigator or other team member by phone, text, email, or other channels; or
• Interact with us in any other way that links to this Policy.

We call these activities the "Services."

This Privacy Policy does not describe how independent health care providers, health systems, or health plans handle your medical records. In some cases, Navi acts as a service provider or "business associate" to them; in those situations, your information may be governed by their Notice of Privacy Practices and our contracts with them, not by this Policy.

This Privacy Policy is for general information only and is not legal advice.

1. Who We Are & How to Contact Us

Contact us if you have questions about this Policy or want to exercise any privacy-related rights.

2. How This Policy Relates to HIPAA

Navi is not a medical practice and does not provide clinical care. We help you understand your options and connect with mental and behavioral health providers and platforms.

Depending on the context, your information may be:

Protected Health Information ("PHI") under HIPAA

When Navi has a Business Associate Agreement (BAA) with a health care provider, health system, or health plan and we receive information about you to perform services for them, that information may be PHI.

In those cases, our use and disclosure of that information is governed by HIPAA, the BAA, and that provider's or plan's Notice of Privacy Practices, not this Privacy Policy.

Personal information covered by this Privacy Policy

When you interact directly with Navi (for example, you find us yourself, complete a form on our website, or schedule a navigation call) and we are not acting on behalf of a particular HIPAA-covered entity, your information is treated as personal information under consumer privacy laws and this Policy.

If you are unsure which category applies, you can ask your provider or health plan, or contact us.

3. Information We Collect

We collect information:

• Directly from you;
• From others involved in your care or relationship with Navi; and
• Automatically when you use our website or other online tools.

3.1 Information You Provide

You may choose to provide:

Contact information

• Name, email address, phone number, city/state or ZIP code
• Your relationship to a child or dependent (e.g., parent, guardian)

Navigation and intake information

• Age or age range and, if you choose, gender identity
• Insurance details (e.g., plan name, member ID, photo of your insurance card)
• Preferences and constraints (budget, language, virtual vs. in-person, availability)
• Information about your or your child's mental or behavioral health needs, symptoms, diagnoses, past or current treatment, level of urgency, or other details you choose to share so we can recommend appropriate options

Communications with us

• Emails, text messages, and messages sent through our website
• Information you share in calls with Navi staff (which may be noted for follow-up; we will disclose if a call is recorded where required by law)
• Feedback, testimonials, or survey responses

Professional / business information

For clinicians, platforms, schools, health plans, or other partners: name, title, organization, work email, work phone, and related professional details

Payment information (if applicable)

If we ever charge you directly, our payment processors may collect billing address, payment method, and transaction details. Navi does not store full payment card numbers on our own systems.

Job and contractor applications

Resume/CV, cover letter, employment history, education, references, licenses or credentials, and any other application materials you choose to provide.

You can choose not to provide certain information, but that may limit our ability to help you find care or respond to your requests.

3.2 Information We Receive from Others

We may receive information about you from:

Providers, platforms, schools, and health plans

When a partner (for example, a therapy platform, clinic, pediatric practice, school, or health plan) refers you to Navi for navigation, they may share limited information so we know who you are, how to reach you, and why you were referred.

This may include your name, contact details, general reason for referral, age or age range, state, insurance or benefit context, and basic clinical or logistical notes needed to navigate you to care.

Parents, guardians, or family members

If a parent, guardian, or other family member contacts us on your behalf (for example, for a child or teen), we may receive information about you from them.

Service providers

Vendors that support Navi (such as call/SMS platforms, scheduling tools, survey providers, or analytics providers) may collect information and share it with us so we can operate, monitor, and improve our Services.

Public sources and data providers

For professional contacts, we may receive business contact details from public websites, directories, or data providers, subject to applicable law.

3.3 Information We Collect Automatically

When you visit our website or use our digital tools, we and our service providers may automatically collect:

Device and usage information

• IP address
• Browser type and settings
• Device type and operating system
• Pages you visit, links you click, how long you stay on pages, and how you navigate the site
• Date and time of your visit
• General location derived from your IP address

Cookies and similar technologies

We use cookies, pixels, and similar tools to:

• Keep the site working and remember basic preferences;
• Understand how people move through the site; and
• Improve our content and user experience.

You can change your browser settings to block or delete cookies. Some parts of the site may not work properly if cookies are disabled.

4. How We Use Information

We use the information we collect for the following purposes, where allowed by law:

Provide navigation and referral services

• Understand your needs, constraints, and preferences
• Identify providers, platforms, or programs that are likely to be a good fit
• Send your information to those providers or platforms when you ask us to
• Help coordinate next steps, including scheduling and follow-up
• Track whether care was scheduled so we can measure and improve our impact

Operate and improve our Services

• Host and secure our website and technology systems
• Diagnose and fix technical issues
• Monitor performance and usage patterns
• Develop and improve navigation workflows, tools, and user experience

Communicate with you

• Respond to your questions and requests
• Provide updates related to your navigation (options, referrals, scheduling)
• Send informational content related to mental and behavioral health navigation
• Send administrative and legal notices (for example, updates to this Policy or our Terms of Use)

Support our partners

• Share referral information with providers, platforms, schools, or payors when you ask us to connect you
• Provide partners with de-identified or aggregated data so they can understand volumes, trends, and gaps in access

Conduct analytics and product development

• Analyze patterns across users and referrals (for example, where demand is highest, where people drop off, what kinds of providers are most needed)
• Use de-identified or aggregated information to build better tools, matching logic, and reporting

Support security, legal, and compliance

• Detect, prevent, and investigate fraud, abuse, or security incidents
• Protect our rights, property, safety, and the rights, property, and safety of our users and partners
• Comply with laws, regulations, subpoenas, or other legal processes
• Enforce our Terms of Use and other agreements

For any other purpose with your consent

Where we clearly explain a new use and you agree.

We may de-identify or aggregate information so it can no longer reasonably be linked to you. We may use and share de-identified or aggregated information for any lawful purpose.

5. Cookies & Analytics

We use cookies and similar technologies, and we work with analytics providers, to understand how people use our website and to improve it.

These tools help us see, for example:

• Which pages are visited most;
• How people move from page to page; and
• Where they drop off or encounter issues.

Analytics providers act as our service providers. They may collect information such as IP address, browser type, pages visited, and time spent, and provide us with aggregated reports.

You can:

• Adjust your browser settings to block or delete cookies; and
• Use privacy features in your browser or device to limit tracking.

Our Services do not currently respond to "Do Not Track" browser signals. If the law requires us in the future to recognize a specific browser-based signal, we will update this Policy.

6. How We Share Information

6.1 No Sale or Rental of Personal Information

We do not sell or rent your personal information to third parties.

We also do not allow third parties to use the mental or behavioral health details you share with us to market their own products or services directly to you without your permission.

SMS consent is not shared with third parties.

6.2 When We Share Information

We may share personal information in the following situations:

With providers, platforms, and programs you ask us to contact

When you request that we connect you to a provider, platform, school, or program, we share the information they reasonably need to follow up and provide care (for example, your name, contact information, insurance details, and key clinical or logistical information you have shared for this purpose).

With service providers acting on our behalf

We work with vendors that help us operate our Services, such as:

• Website hosting and cloud infrastructure
• Call, SMS, and email communication platforms
• Scheduling and intake tools
• Analytics and reporting services
• Survey tools and CRM systems

These companies are allowed to use your information only to perform services for us and are subject to contractual confidentiality and security obligations.

With partners in de-identified or aggregated form

We may share de-identified or aggregated information (that cannot reasonably be used to identify you) with partners (for example, to show how many people in a certain region we navigated, or how many ultimately scheduled care).

With professional advisors and legal / regulatory authorities

We may share information with our lawyers, auditors, insurers, and regulators as needed to protect our business, comply with law, or respond to legal process.

As part of a business transaction

If Navi is involved in a merger, acquisition, financing, reorganization, or sale of all or part of our business, information may be transferred as part of that transaction, as allowed by law and subject to appropriate protections.

With your direction or consent

Any other sharing that you explicitly authorize.

7. Your Choices & Rights

Your rights depend on how you interact with us and where you live, but generally include:

7.1 Communication Preferences

Email

You can unsubscribe from marketing or newsletter emails by clicking the "unsubscribe" link in those emails.

You will still receive important service-related emails (for example, navigation updates or legal notices).

Text messages (SMS)

You can opt out of promotional text messages by replying STOP to any message.

We may still send you operational texts directly related to services you're using (for example, verification codes or appointment reminders) where allowed by law. Standard message and data rates may apply.

Cookies and analytics

You can use your browser settings to block or delete cookies. Some features of our site may not work correctly if cookies are disabled.

7.2 Access, Correction, and Deletion

Depending on applicable law, you may have the right to:

• Request confirmation that we process your personal information;
• Request a copy of certain personal information in a portable format;
• Ask us to correct inaccurate personal information; and
• Ask us to delete personal information, subject to legal and contractual obligations (for example, where we must keep certain records for legal or compliance reasons).

To submit a request, email privacy@withnavi.co and include:

• Your full name;
• The email address and phone number you used with Navi; and
• What you are asking us to do (for example: access, correction, deletion).

We may need additional information to verify your identity before we act on your request. If we cannot fulfill your request, we will explain why, unless we are legally prevented from doing so.

If your information is being handled as PHI on behalf of a provider or health plan under HIPAA, your rights (access, amendment, restriction, etc.) are primarily exercised through that provider or plan, as described in their Notice of Privacy Practices.

7.3 State-Specific Rights

Some U.S. states provide additional rights to their residents (for example, to know more about how their information is used, or to request correction or deletion). If those laws apply to you, you can exercise your rights by contacting us at privacy@withnavi.co.

We will not discriminate against you for exercising your rights where such protections are required by law.

8. Children's Privacy

Navi often works with children, teens, and families. We expect parents or legal guardians (or another authorized adult, such as a school or provider) to be the main point of contact for minors.

• Our website and general marketing are not designed for unsupervised use by children under 13.
• We do not knowingly collect personal information directly from children under 13 online without verifiable parental or guardian consent.
• If we learn we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it.
• If you believe we may have collected information from a child under 13 without your consent, please contact us at privacy@withnavi.co.

When we act as a business associate for providers or plans that serve minors, information about those minors may be PHI governed by HIPAA and the provider's or plan's Notice of Privacy Practices.

9. Data Security

We use reasonable physical, technical, and administrative measures designed to protect personal information from loss, misuse, and unauthorized access or disclosure. These measures may include:

• Encryption in transit and at rest for appropriate systems;
• Access controls and role-based permissions;
• Safeguards and contractual terms for vendors and service providers; and
• Internal policies, training, and monitoring.

No system is perfectly secure. We cannot guarantee that your information will never be accessed or used in an unauthorized way. You are responsible for keeping any account credentials you use with Navi secure.

Standard email and text messaging are not always fully secure channels. By choosing to communicate with us by email or SMS, you understand those risks and agree that we may respond using the same method unless you ask us to use a different channel.

10. Data Retention

We keep personal information for as long as reasonably necessary to:

• Provide the Services you request;
• Support navigation workflows and partner relationships;
• Comply with legal, regulatory, and contractual requirements;
• Resolve disputes and enforce our agreements; and
• Maintain business records consistent with our retention policies.

We may retain de-identified or aggregated information that cannot be linked back to you for longer periods.

When information is no longer needed for these purposes, we will delete it, de-identify it, or securely store and isolate it until deletion is possible.

11. International Visitors

Our Services are intended for people located in the United States.

If you access our Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your home country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will:

• Update the "Last updated" date at the top; and
• Where required by law or where changes are material, provide additional notice (for example, by email or a notice on our website).

Your continued use of the Services after the updated Policy becomes effective means you accept the changes.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, contact us at:

You can also use the contact information listed on www.withnavi.co.