Security and privacy

Report anything that looks like exposed data, a broken session, or a vulnerability. We triage security reports ahead of all other feedback.

How to report

Email contact@phaseacademy.io with “Security” in the subject line, or use the security and privacy category in the feedback form. Include what you observed and how to reproduce it. Do not include customer or site data, and please do not test against other people's accounts or attempt to access data that is not yours.

We aim to acknowledge within two working days and to keep you updated until the issue is closed. We will credit you if you would like us to.

What we store

• Your account email and sign-in method.
• Your optional onboarding answers and the recommendation derived from them.
• Learning path progress, bookmarks, and which labs you have opened.
• Lab sessions and field reports only when you explicitly choose “Sync privately to account”. Saving on your device keeps the data in your browser and it never reaches us.
• Feedback you submit, including any context you opted to include.

What we never do

• Send report contents, measured values, or lab inputs to analytics or logs.
• Sell or share your data with advertisers.
• Make your reports or sessions visible to other users unless you create a share link.

Export and deletion

Signed-in users can download everything stored against their account as JSON, and can delete reports, sessions, progress, activity, or all of it, from account settings. Deletion is immediate and cannot be undone. See the Privacy Policy for the full statement.