The short version. We collect what you give us to run your account, we keep each member's data separate, we do not sell it and we do not show ads. Some features send data to outside services to work, such as the AI providers behind the Think Tank and the service that delivers push alerts. You can ask us to correct or delete your information at any time.
1. Who this policy covers
This policy explains how the owner and operator of NAV Desk ("NAV Desk", "we", "us") handles information when you visit navdesk.net or use the app. NAV Desk is not a financial institution and does not hold your accounts. It never receives your tsp.gov, bank or brokerage passwords.
2. Information we collect
Information you give us
- Account details: your name, email address, optional username and password. Passwords are stored only as a salted, one-way hash; we cannot read them.
- Financial figures you enter: balances, holdings, shares, purchase prices, price watches, transfer history, retirement inputs, debts, net-worth items and similar numbers, depending on which features you use.
- Linked account data, only if you choose to link an account through Plaid: the institution name, account names, types and last digits, balances, holdings and, for cards and loans, amounts owed. Plaid may also make recent transaction data available as part of the connection. The connection key Plaid gives us is stored encrypted. You sign in inside Plaid's own window; we never receive that password.
- Screenshots you upload, for example of a TSP statement, so the app can read the numbers for you to confirm.
- Questions and messages you type or speak to the Think Tank, and messages you send us.
- Setup answers and preferences, such as which features you switched on and which help topics you have seen.
- Agreement records: the date and version of the documents you accepted, and the name you typed if you requested Advanced access.
Information collected automatically
- Visit log: when a page is loaded we record the time, the page, IP address, browser and device type (user agent), the referring page and, if you are signed in, your account name. We keep a rolling log of recent visits and running totals.
- Sign-in records: the time of your last sign-in and a count of sign-ins.
- Technical logs: error and diagnostic logs, including device and browser details if device sign-in setup fails.
- Cookies and local storage: a sign-in cookie that keeps you signed in (up to about 30 days), a short-lived cookie during sign-in with Google or Apple, and small settings saved in your browser such as light or dark mode. We do not use advertising cookies or third-party tracking pixels.
Information from others
- If you choose to sign in with Google or Apple, that provider tells us your email address, name and an account identifier.
What we do not collect
- Passwords for tsp.gov or any financial institution.
- Social Security numbers, full account numbers or payment card numbers. Please do not enter them anywhere in the Service or include them in screenshots.
- Your fingerprint or face. Device sign-in happens on your own phone; we receive only a public key that confirms it was you.
3. How we use information
- To create and secure your account and keep you signed in.
- To show your figures, run the calculations and rule checks, and produce your reports.
- To answer your Think Tank questions, using your own figures as context.
- To send the alerts and reports you are set up to receive, and service messages about your account.
- To approve new accounts, respond to you and provide support.
- To detect misuse, limit repeated sign-in attempts, fix problems and understand how much the site is used.
- To meet legal obligations and enforce our agreements.
We do not sell your personal information, we do not share it for advertising, and we do not use your financial figures to market other products to you.
4. When information leaves NAV Desk
We share information only as needed to run the Service:
- AI providers. When you ask the Think Tank a question, use voice, or upload a screenshot to be read, the content of that request, including relevant figures from your account, is sent to the AI model providers we use (currently Anthropic and Google) so they can generate the response. Their handling of that data is governed by their own terms.
- Push notification delivery. Push alerts are delivered through the ntfy notification service on a topic name unique to your account. Alert text passes through that service. Anyone who learns your topic name could read alerts sent to it, so keep it private. Alerts are written to avoid more detail than they need.
- Account linking. If you link an account, Plaid connects to your financial institution on your behalf and passes us the read-only data described above. Plaid's handling of your information is governed by its own privacy policy. You can remove a link at any time.
- Network and hosting providers. Traffic to navdesk.net passes through Cloudflare, which protects and routes connections. Pages load fonts from Google Fonts, which sees your IP address when your browser requests them.
- Market data sources. To fetch prices we send ticker symbols, and the text of a company-name search, to market data providers. We do not send them your identity or balances.
- Sign-in providers. If you use Google or Apple to sign in, that provider learns that you signed in to NAV Desk.
- Legal and safety. We may disclose information if the law requires it, or to protect the rights, safety or security of members, the public or the Service.
- Business changes. If the Service is reorganised or transferred to a new operator, your information may transfer with it, under this policy or one no less protective. We will tell you first.
- With your direction. Otherwise, only when you ask us to.
5. Who inside NAV Desk can see your data
Each member's data is stored separately, and one member can never see another's. The people who operate NAV Desk have administrative and technical access to the systems where data is stored, and may use it to run, support, secure and repair the Service.
6. How long we keep information
- Account and financial data: for as long as your account is open.
- After you ask us to close your account: we delete or de-identify your data within 30 days, except for backup copies, which age out within 90 days, and anything we must keep to meet a legal obligation or resolve a dispute.
- Visit log: a rolling set of the most recent visits; older entries are dropped automatically.
- Agreement records: kept for as long as needed to show what was agreed.
7. Security
We use measures such as encrypted connections (HTTPS), hashed passwords, signed sign-in cookies, limits on repeated sign-in attempts, optional biometric unlock on phones and per-member separation of data. No system is perfectly secure, and we cannot guarantee that information will never be accessed without permission. If we learn of a breach affecting your information, we will notify you as the law requires.
8. Your choices and rights
- See and correct: most of your information is visible and editable in the app.
- Delete: ask us to close your account and delete your data.
- Copy: ask us for a copy of the information we hold about you.
- Alerts: unsubscribe from the notification topic on your phone, or ask us to stop sending.
- Optional features: you need not use the Think Tank, voice, or screenshot import; if you do not, that content is not sent to AI providers. Account linking is also optional, and you can remove a link you made.
Depending on where you live, you may have further rights under state or national privacy laws, such as the right to know, correct, delete or object. To make any request, write to info@navdesk.net from the email address on your account. We will not treat you differently for exercising a right.
9. Children
The Service is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
10. Where data is processed
NAV Desk is operated from the United States, and the outside services described above may process data in the United States and other countries. If you use the Service from elsewhere, including Canada, your information will be processed in the United States.
11. Changes to this policy
We may update this policy. We will post the new version with a new date and, for material changes, tell you in the app or by email before they take effect.
12. Contact
Privacy questions and requests: info@navdesk.net.
NAV Desk is an independent tool. It is not affiliated with, sponsored by, or endorsed by the Thrift Savings Plan (TSP) or the Federal Retirement Thrift Investment Board (FRTIB). Questions: info@navdesk.net