Every energy log, symptom entry, journal note, medical record, checklist item, and gamification stat is stored under your account only. Our database enforces row-level security rules so that only you can read, edit, or delete records you created — not other members, not other survivors, not the public.

• Symptom logs, energy tracking, and mood check-ins → private to you
• Medical records, doctor notes, and workplace meeting logs → private to you
• Journal entries, reflections, and daily affirmations → private to you
• Communication drafts, meeting-prep notes, and accommodation requests → private to you

When you join Peer Connections or ask an Expert Q&A question, you choose a display name — your real name and email are never shown to other users. Anonymous questions stay anonymous publicly. Your account is still linked internally so our moderators can keep the space safe and respond to you, but that link is never exposed to other members.

• Choose your own anonymous display name
• Direct messages are readable only by the two people in the conversation
• Forum posts and expert questions are visible only to signed-in members, not the public web
• "Ask anonymously" hides your name from everyone except moderators

Navigator runs on the Base44 platform, which handles authentication, encrypted storage, and secure transport for us. Traffic between your device and our servers is encrypted with HTTPS/TLS. Data at rest is stored in an encrypted, access-controlled database. You sign in with a verified email + password or Google — we never see or store your password ourselves.

• HTTPS/TLS encryption for every request
• Encrypted database storage with row-level security
• Email verification and OTP for account creation
• Passwords are hashed and managed by the auth provider — never stored by us

We use strict per-record access rules. Here's exactly who can read each type of data:

When you chat with the AI Coach, your message is sent to a large language model provider to generate a response. We do not share your identity with the model — only the text of your prompt and, where helpful, non-identifying context (like your journey stage). Conversations you save appear only in your own account. You can delete any conversation at any time.

• Prompts are used to generate your response, not to train public models
• No name, email, or account ID is sent with your prompt
• Saved conversations are private to you and deletable at any time

You are always in control of your data. From your Profile you can update your name and notification preferences, sign out, or permanently delete your account and everything tied to it.

• View and edit your profile at any time
• Turn email reminders and weekly summaries on or off
• Delete individual records, logs, drafts, or messages
• Permanently delete your account and all associated data from Profile → Danger Zone

Transparency matters as much as security. Here's what Navigator never does with your information:

• We never sell or rent your personal information
• We never share your identity with employers, insurers, or the public
• We never post to the community on your behalf
• We never share your health data outside the tools you use it in
• We never require you to disclose your diagnosis to use the app