Privacy Policy

This policy explains what personal data INFNIT® collects, why, where it is kept and for how long, and the rights you have. We have written it to be read, not skimmed past.

1. Who we are

INFNIT® is operated by Faisal Alnakib, a sole trader registered with HM Revenue & Customs in the United Kingdom, trading as INFNIT®. Contact: info@infnit.net. If INFNIT® becomes a limited company, we will update this policy and tell you. We are the data controller for the personal data described here.

• Email: info@infnit.net
• Postal address: available on request from info@infnit.net.

2. The short version

• We collect as little as we can: your email address, the race you are interested in and your watch brand.
• We do not use analytics, advertising trackers or cookies. Our web server keeps a basic log, including your IP address, for 30 days (see 3.6).
• Race files you upload are emailed to INFNIT's mailbox and deleted after processing.
• We never sell your data, and we never use your watch or activity data without your explicit consent.

3. What we collect and why

3.1 Pilot sign-up

When you join the pilot, we store:

• your email address;
• the race you are interested in and your watch brand. If you choose Other race, we also store the race name you type and, if you give it, the race date;
• when you gave consent and which version of this policy you agreed to.

We use this only to confirm your sign-up, to send you information about the pilot, or the race file you asked us to enrich, and to deliver your files. Legal basis: your consent, which you can withdraw at any time by emailing info@infnit.net or using the link in any email we send.

We confirm every sign-up by email (double opt-in). If you don't confirm within 48 hours the link expires, and unconfirmed sign-ups are deleted automatically after 7 days.

3.2 Race files you upload

After you confirm your email you can send us a race file (GPX or FIT, up to 10 MB) for enrichment, using your confirmation link, which works once and for 7 days. When you do:

• our website checks the file in memory and emails it to INFNIT's mailbox (info@infnit.net, hosted by Microsoft 365, see below) together with your email address, race, race name and date if you gave them, and your watch brand. The file is not saved on our web server;
• we keep the file only while we process it, and delete it, and the email it came in, as soon as your enriched file is ready;
• we keep a route fingerprint (a short code that identifies the course, not you) so we can recognise the race;
• your enriched files are available through a private link sent only to you, which expires after 30 days, when the files are deleted.

Legal basis: providing the service you asked for.

3.3 Sending a race file without joining the pilot

On the home page you can send us a race file without signing up. You enter your email, the race or challenge name, optionally its date, start time and target finish time, and your watch brand. We email you a 6-digit code to check the address is yours (valid for 15 minutes, 5 attempts). Your file stays in your browser until the code is right. We keep your email, a scrambled version of the code and the details you typed for at most 30 minutes, then delete them. When the code is right, our website checks the file in memory and emails it to INFNIT's mailbox with those details and the time you agreed. The file is not saved on our web server. We keep the file and the email only while we process it, and delete both as soon as your enriched file is ready.

Legal basis: your consent, given by ticking the box, and providing the service you asked for.

3.4 Activity and health data

INFNIT® Race does not collect your watch activity, heart rate or other health data. If we ever offer a feature that needs it, we will ask for your separate, explicit consent first, and explain exactly what is collected and why.

3.5 Emails you send us

We keep your email address until you unsubscribe or ask us to delete it, and in any case no longer than 2 years after your last contact with us.

3.6 Server logs

When you visit infnit.net, our web server records basic technical information: your IP address, browser type, the page requested, the date and time, and the referring page. We use it only to keep the site secure and to count visits. These logs stay on our own server in Nuremberg, Germany (EU), are never shared or sold, and are deleted automatically after 30 days. Our server backups may retain these logs for up to 7 further days before they are overwritten. We don't use cookies or third-party tracking.

Legal basis: legitimate interests (keeping the site secure and counting visits).

4. What we don't do

• No analytics or advertising cookies, and no tracking pixels.
• No IP address logging beyond the web server log in 3.6, which is deleted after 30 days.
• No selling, renting or sharing of your data for marketing.
• No public route library: your files are never published.

5. Where your data is kept

Our website and its database run on servers in Germany (EU), provided by Hetzner Online GmbH. Our email is provided by Microsoft 365.

These providers process data on our behalf under their data processing terms and may not use it for their own purposes.

Links to Instagram and Strava on our website take you to those services, which have their own privacy policies. We don't embed their content or trackers.

6. International transfers

Our systems are in the European Union. If you are in the UK, your data is protected by the UK's adequacy arrangements with the EU. If you are in Saudi Arabia, Oman or elsewhere outside the EU and UK, the data you send us is transferred to our servers in Germany (EU) so that we can provide the service. We transfer only what the service needs, protect it in transit and at rest, and limit access to INFNIT®. Where your local data protection law (including Saudi Arabia's PDPL and Oman's Personal Data Protection Law) sets conditions for transfers abroad, we follow them, and you can contact us at info@infnit.net with any question about how your data is handled.

7. How long we keep it

8. Your rights

You can ask us to:

• see the data we hold about you;
• correct it;
• delete it;
• stop using it, or withdraw your consent at any time;
• give you a copy in a portable format.

Email info@infnit.net. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), your local EU data protection authority, or, in Saudi Arabia, the Saudi Data & AI Authority (SDAIA).

9. Security

All connections to our website use HTTPS. Our server accepts administrative access only with cryptographic keys, the database is not reachable from the internet, and passwords and tokens are stored in hashed form.

10. Children

INFNIT® is not intended for anyone under 18, and we don't knowingly collect their data.

11. Changes to this policy

If we change this policy, we will update the version and date above. If a change affects how we use data you have already given us, we will tell you by email before it takes effect.