App privacy policy
Navis has no accounts, no ads, no analytics and no crash reporting. It talks to the music server you choose, and uses a few online services for extras like artist photos, lyrics and mixes. Each one is listed here, and each can be switched off.
Last updated 18 October 2026
This policy covers the Navis app for Android, Linux and Windows, made by Porthorion, an independent developer (“we”, “us”). Questions and requests: [email protected].
The short version
- Navis is a player for your own music server (Navidrome or another Subsonic or OpenSubsonic server). Your library comes from that server, not from us.
- We run no service that receives your listening data. No sign-up, no analytics, no telemetry, no crash reports, no advertising identifiers.
- Online services connect directly from your device. They are on by default. During setup, Navis shows an Integrations step listing every service (it appears even if you skip the rest of setup), and you can switch each one off there or later in Settings. The Integrations page shows what each service receives and which hosts it uses.
- With Online services switched off, Navis only talks to your own server.
Your music server
When you add a server, Navis stores its address and your username in the app’s database on your device, and your password in your platform’s secure credential store where one is available (see Sign-in details). It uses them to browse, stream, download, sync likes, ratings and playlists, and send plays to the server’s own scrobbling. That server is run by you or by whoever gave you access, so what it records is up to its operator. We never receive these details or this traffic.
Images your server points to: your server can provide artwork or artist images as links to other websites. Navis loads those images directly from wherever they are hosted, so those hosts see your IP address and the request.
Data that stays on your device
Downloaded music, the cached copy of your library, playlists, settings, play history, and cached lyrics and artwork are stored only on your device. On desktop, the app’s database lives in Navis’s own application-data folder. Uninstalling Navis or clearing its data removes them, except music you chose to download to a folder of your own. On Android, Navis’s data is excluded from cloud backup. You can clear cached data in Settings.
Online services
Each service below connects from your device directly to the hosts named. Like any internet connection, the service sees your IP address along with the request, and handles that data under its own privacy policy.
| Feature | Service and hosts | What it receives | Their policy |
|---|---|---|---|
| Artist photos, fan counts, top tracks, similar artists, missing albums, New Releases, Trending Now | Deezer: api.deezer.com, and Deezer’s image servers (dzcdn.net) for pictures |
Artist, album and track names it looks up; requests for public chart data and images | Deezer privacy policy |
| Same Vibes and Instant Radio mixes, artist top songs | Last.fm: ws.audioscrobbler.com |
Artist and track names it looks up. Requests use the API key included with Navis, or your own key if you enter one | Last.fm privacy policy |
| Scrobbling, now playing, loves and weekly playlists (only after you add your ListenBrainz token) | ListenBrainz: api.listenbrainz.org |
Your ListenBrainz user token; while Scrobbling is on, the tracks you play (title, artist, album, duration, play time and what’s playing now); while Likes is on, songs you like, sent as loved; requests to read your weekly playlists | MetaBrainz privacy policy |
| Synced lyrics | LRCLIB: lrclib.net |
Title, artist, album and duration of the song you’re playing | lrclib.net |
| AutoEQ headphone profiles for the equalizer, only when you ask for them | GitHub: api.github.com and raw.githubusercontent.com (the AutoEQ project’s files) |
Requests for the public profile list and the profile you choose | GitHub privacy statement |
| Internet radio | The stations you play | A normal streaming request; live now-playing information from the station (Icecast/ICY or AzuraCast) | Each station’s own policy |
| Update checks and updates | Porthorion: downloads.porthorion.com (the default) |
A request for the signed list of the latest release and, if you update, the download itself | Website privacy policy |
| Update checks and updates, only if you choose GitHub as the update source | GitHub: github.com, and objects.githubusercontent.com or release-assets.githubusercontent.com, where GitHub serves release files |
The same requests, made to the Navis releases on GitHub | GitHub privacy statement |
Navis does not scrobble to Last.fm.
How Navis identifies itself
Some services ask apps to identify themselves. Navis’s requests to your music server, LRCLIB, ListenBrainz, Last.fm, Deezer, the AutoEQ catalogue on GitHub, and the artwork downloader carry a User-Agent with the app’s name and version, the website address and the support address, for example Navis/1.5.0 (+https://navis.porthorion.com; [email protected]). It contains nothing about you or your device. Audio streaming on desktop identifies itself only as “Navis Desktop”. Update checks and update downloads use a generic User-Agent and don’t send the app version.
Internet radio and Online services
With Online services switched off, Navis refuses radio stations that don’t come from your own server, without contacting them. Stations provided by your server still play.
ListenBrainz
ListenBrainz is only used once you add your own ListenBrainz token. Plays made while you’re offline are queued on the device and sent after you reconnect. Disconnecting ListenBrainz, or signing out of your server, deletes the token. Your listening history then lives in your ListenBrainz account, under MetaBrainz’s terms, and can be managed or deleted there.
Update checks
When update checks are on, Navis fetches the list of the latest release from downloads.porthorion.com when you open it or come back to it, at most once an hour, and when you pull down to refresh Home or Library. If you choose GitHub as the update source, it asks github.com instead, and downloads updates from the GitHub hosts listed above. The list is signed, and Navis checks the signature, and the size and SHA-256 checksum of any update it downloads, before installing it, whichever source it came from. The request is a plain request for public information: it doesn’t include the app version, which Navis compares on your device, or any identifier for you or your device. The technical request data (such as IP address and user agent) is handled as described in the website privacy policy. We don’t use it to track you.
To stop automatic checks, turn off Check Automatically in Settings > Integrations > Updates; Source there chooses between Porthorion Downloads and GitHub. You can still check by hand with Check for Updates in Settings > About. Turning off Online services also stops update checks.
Sign-in details
Server addresses and usernames are stored in the app’s database on your device. Your server password and your ListenBrainz token are stored in your platform’s secure credential store when one is available: Keystore-backed storage on Android, Windows Credential Manager on Windows, and the Secret Service (such as GNOME Keyring or KWallet) on Linux. A Last.fm API key you enter yourself is stored in the app’s database.
Diagnostics
Navis avoids logging sign-in details and removes passwords, tokens and other authentication values from its diagnostics. Network errors may still include a service name or other non-secret details needed to troubleshoot them.
Android Auto
If you use Navis in your car through Android Auto, your library and playback controls are shown by Google’s Android Auto app on your phone and the car’s display, under Google’s terms.
Legal basis
Where data protection law applies (including the UAE Personal Data Protection Law and the GDPR / UK GDPR):
- Connecting to your server is necessary to provide the app you asked for.
- Online services are on by default to provide features you’d expect from a music player, such as artwork, lyrics and mixes. We rely on our legitimate interest in providing those features, with only the minimum data each one needs, no identifiers about you, a clear list at setup, and a switch for each. You can object at any time by switching a service off.
- Update checks rely on our legitimate interest in telling you about bug-fix and security releases. You can switch them off.
Your rights
Because we don’t receive or store your personal data, there is normally nothing for us to access, correct or delete. For data held by your music server or a third-party service, contact its operator or use its account settings. You can still email [email protected] with any question, and you may complain to your local data protection authority.
Children
Navis is a general-audience music player and is not directed at children. We collect no personal data from anyone.
Changes
If Navis starts handling data differently, we will update this policy before the change ships and change the date at the top of this page.