Privacy Policy

This Privacy Policy explains how Phase Academy (phaseacademy.io) ( “we,” “us”) collects, uses, stores, and shares personal information when you use the Service. It applies to visitors and registered users worldwide.

1. Information we collect

Account information. When you register, we collect your email address and an encrypted password hash. If you sign in with Google, we receive your email, name, and Google account identifier from Google’s OAuth service.

Profile and progress. Optional profile fields you enter, and your progress through learning paths and modules.

Field reports and calculator data (“Your Content”). The NETA-style field records, inspection checklists, calculator inputs and outputs, and notes you save. This data can include your clients’ equipment information (nameplate data, test readings, locations, dates, technician names). We treat this as confidential to your account.

Technical/log data. IP address, browser type, device type, timestamps, and error diagnostics, used to operate and secure the Service.

Cookies. Strictly necessary cookies and local storage used to keep you signed in and remember UI preferences. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

• Create and secure your account and authenticate you.
• Store, sync, and display Your Content across your devices.
• Track your learning-path progress at your request.
• Send transactional email (email confirmation, password reset, security alerts). We do not send marketing email without a separate opt-in.
• Detect and prevent abuse, fraud, and technical failures.
• Comply with legal obligations.

3. Ownership of report data

You own Your Content. Phase Academy claims no ownership of the field-report data, calculator inputs, project information, or client-equipment data you save. We store it on your behalf so you can retrieve, edit, duplicate, and export it.

4. Sharing and disclosure

We do not sell personal information or Your Content. We do not share Your Content with third parties for advertising or analytics profiling. We do not use Your Content to train machine-learning models.

We disclose personal data only in these limited cases:

• Service providers (sub-processors) that host and operate the Service on our behalf, under contractual confidentiality and security obligations. Current sub-processors include our cloud database and authentication provider (Supabase) and hosting/edge-network provider. A current list is available on request at contact@phaseacademy.io.
• At your direction — for example, when you generate a share link for a report, anyone with that link can view it until you revoke it.
• Legal process — to comply with a valid legal request, protect our rights or the safety of users, or in connection with a corporate transaction (with continued privacy protection).

5. Security

We use industry-standard measures including TLS in transit, encryption at rest for the database, hashed passwords, row-level access controls that isolate each user’s data, breached- password screening at sign-up (HIBP), and least-privilege service access. No system is perfectly secure; you are responsible for protecting your account credentials.

6. Data retention

We retain account and report data for as long as your account is active. When you delete a report, it is removed from live systems and purged from routine backups within 30 days. When you delete your account, we delete or irreversibly anonymize personal data within 30 days, subject to short technical backup windows and any records we are legally required to keep.

7. Your rights

Depending on where you live (including under the EU/UK GDPR and California’s CCPA/CPRA), you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to withdraw consent. You may also lodge a complaint with your local data-protection authority. You can exercise most of these rights directly from your profile page, or by emailing contact@phaseacademy.io. We do not sell or “share” personal information as those terms are defined under California law.

8. International transfers

The Service is operated from the United States. If you access it from outside the US, you understand that your information will be processed in the US and other countries where our sub-processors operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Third-party links and embeds

The Service may reference or link to third-party resources (standards bodies, manufacturer documentation, etc.). We are not responsible for the privacy practices of those third parties; review their policies separately.

11. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by in-product notice.

12. Contact

Privacy questions or requests: contact@phaseacademy.io.