Privacy Policy
NaviFin is a client application for Jellyfin media servers. This policy explains what data the app stores and what, if anything, leaves your device. NaviFin is an independent client and is not affiliated with or endorsed by the Jellyfin project.
What data NaviFin stores on your device
- Server URL(s): stored locally to reconnect automatically at launch. NaviFin can hold several Jellyfin servers, each keyed separately.
- Username: stored locally alongside each server URL.
- Password / access token: stored in the iOS/tvOS/macOS Keychain with a device-only protection class. It never leaves the device in plaintext.
- Custom access headers (optional): if your server sits behind a proxy (for example Cloudflare Access), the headers you enter are stored in the Keychain and sent only to that server.
- Watch history and resume points: NaviFin reads and writes your watch state to your own Jellyfin server, so resume points stay correct across devices. A small local cache is kept for offline use. Not transmitted to any third party.
- Recent searches: the last few search queries, stored locally. Cleared when you delete the app.
- Settings: playback preferences (streaming quality, subtitle and audio defaults, Skip Intro behaviour), stored locally.
- Offline downloads (iPhone & iPad): media you download for offline playback is stored on the device and removed when you delete it or the app.
What leaves your device
- Requests to your Jellyfin server(s) only. NaviFin sends API requests (browse, search, stream, report playback) exclusively to the server URLs you configure. Your servers are under your control.
- Watch-state sync. Playback progress and watched markers are reported to your own Jellyfin server so your library stays in sync. This is the same data the official Jellyfin clients report, and it goes only to your server.
- Nothing else. NaviFin contains no analytics SDK, no crash reporter, no advertising framework, and no telemetry. Zero data is sent to the developer. The only services NaviFin ever talks to are the Jellyfin servers you sign in to.
Data retention
All data NaviFin stores lives on your device. Deleting the app deletes all NaviFin data, including credentials, cached watch state, downloads, and settings. NaviFin does not store anything on a server of ours: it has no backend.
Children
NaviFin does not knowingly collect data from children. The app’s age rating reflects that content comes from your own server.
Changes to this policy
If this policy changes, the updated version will be posted at this URL with a revised “Last updated” date.
Contact
Privacy questions: support@navifin.app