Privacy
Policy

1. Who We Are

Navigator is a product of Infinity ("we," "us," or "our"). We are the data controller for the personal information collected through Navigator. If you have any questions about this Privacy Policy or our data practices, you can reach us at infinity11@socialmedia.com.

2. Information We Collect

We collect information in three ways: information you provide directly, information generated by your use of the Service, and information from third-party services.

Category	Examples	How we get it
Account data	Name, email address, password hash, profile photo	You provide it when signing up or updating your profile
Learning data	Skill goals, level selection, roadmap content, step completions, quiz responses, streak data, XP	Generated as you use Navigator
Usage data	Pages visited, features used, session duration, button clicks, errors encountered	Collected automatically via our analytics tools
Device data	IP address, browser type, operating system, device identifiers, time zone	Collected automatically when you access the Service
Communications	Emails you send us, support tickets, waitlist sign-ups, feedback	You provide it when contacting us
Payment data	Billing name, last 4 digits, card expiry (full card details held by our payment processor, not us)	Provided when you subscribe to a paid plan

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information.

3. How We Use Your Information

We use your information for the following purposes:

• Providing the Service — generating your roadmap, tracking your progress, sending streak reminders and XP updates
• Personalisation — tailoring AI-generated content to your skill level, learning style, and goals
• Account management — creating and maintaining your account, processing subscription payments, sending receipts
• Safety and security — detecting fraud, abuse, and security threats; enforcing our Terms of Service
• Product improvement — understanding how the Service is used so we can fix bugs and build better features
• Communications — responding to your support requests; sending product updates and important notices (you can opt out of marketing emails at any time)
• Legal compliance — meeting our obligations under applicable laws

We process your data on the following legal bases under applicable data protection law: (a) performance of a contract, (b) your consent where explicitly given, (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.

4. AI and Your Learning Data

Navigator uses large language models (LLMs) to generate personalised roadmaps and quiz questions. When you request a roadmap, the following information is sent to our AI infrastructure:

• The skill or subject you want to learn
• Your self-reported experience level
• Your selected learning mode (Full Roadmap, Sprint, YouTube-Based)
• Your available time per day and target timeframe

We do not send your name, email address, or any other identifying information to AI providers when generating roadmaps. AI-generated content is cached on our servers and associated with your account to power your experience.

We do not use your learning data to train third-party AI models. Our AI providers are contractually prohibited from using data we send them for model training purposes.

5. How We Share Your Information

We do not sell your personal data. We share information only in these limited circumstances:

• Service providers — companies that help us operate Navigator (hosting, analytics, payment processing, email delivery, AI inference). These providers access only the data needed to perform their specific function and are bound by data processing agreements.
• Streak partners — if you add a streak partner, limited progress information (streak count, daily activity status) is shared with that person. You control who you add.
• Legal requirements — if required by law, court order, or government authority, we may disclose your information. We will notify you of such requests where legally permitted to do so.
• Business transfers — if Navigator is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you before that happens and explain your options.

6. Cookies and Tracking

We use cookies and similar tracking technologies to keep you logged in, remember your preferences, and understand how the Service is used. The types of cookies we use:

• Strictly necessary — required for the Service to function (authentication tokens, session state). Cannot be disabled.
• Analytics — help us understand usage patterns and identify areas to improve. You can opt out via our cookie settings.
• Preferences — remember your settings, such as dark mode and notification preferences.

We do not use advertising or cross-site tracking cookies. You can manage cookie preferences at any time through your browser settings or our cookie banner.

7. Data Retention

We keep your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you delete your account
• Learning data (roadmaps, progress, notes) is retained until you delete it or your account
• Usage and analytics data is retained for up to 24 months
• Payment records are retained for 7 years to meet financial reporting obligations
• Support communications are retained for 3 years

After account deletion, we may retain anonymised, aggregated data that cannot identify you for product analytics purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to restrict processing of your data in certain circumstances
• Objection — object to processing based on our legitimate interests
• Withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email us at infinity11@socialmedia.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption in transit (TLS/HTTPS) and at rest for sensitive data
• Access controls limiting which employees can access personal data
• Regular security reviews and penetration testing
• Monitoring systems for unusual access patterns

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you and relevant authorities as required by law.

10. International Data Transfers

Navigator operates globally and your data may be processed in countries other than the one where you live. Where we transfer personal data outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your information to the same standard as in your home country.

11. Children's Privacy

Navigator is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at infinity11@socialmedia.com and we will take steps to delete that information.

Users aged 13–17 may use Navigator with parental consent. We recommend that parents review this Privacy Policy with their teens before account creation.

12. Third-Party Services

Navigator integrates with or links to the following categories of third-party services, each governed by their own privacy policies:

• Authentication — if you sign in via Google or another provider, their privacy policy governs the data they share with us
• Payment processing — we use a PCI-DSS compliant payment processor; we never store your full card details
• Website analytics — we use Ahrefs Web Analytics on our marketing website to count visits and see which pages are viewed and where visitors come from. Ahrefs' own privacy policy governs how it handles that data
• External resources — YouTube videos, articles, and tools linked in your roadmap are hosted by third parties and governed by their policies

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies before using them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email (where you have an account) or by a prominent notice within the Service before the change takes effect.

Your continued use of Navigator after a change becomes effective constitutes your acceptance of the updated policy. If you do not agree to the changes, please stop using the Service and delete your account.

14. Contact & Data Protection

For privacy-related questions, requests, or concerns, please contact:

• Email: infinity11@socialmedia.com

Navigator is a product of Infinity. We aim to respond to all privacy requests within 30 days. For urgent data security concerns, please mark your message as "Urgent — Data Security."