Privacy Policy

1. Overview

This Privacy Policy explains what information Energy Path ("we") collects when you use energy-path, how we use it, and the choices you have. We collect only what we need to run the service and help you learn.

2. Information we collect

We collect:

• Account information you give us: your first and last name, email address, and the optional institution, country, type of work, and academic level you choose to add. If you sign in with Google, Facebook, or LinkedIn, we receive your name, email, and profile photo from that provider.
• Activity information: a record of key events such as sign-up, login, logout, and the start of a study session, used for security and to operate the service.
• Certificate records: when you earn a certificate, we store your name and the course so the certificate can be verified.
• On-device storage: your sign-in session, theme, language, and lesson progress are kept in your browser (see the Cookie and Local-Storage Notice).

3. How we use your information

We use your information to:

• Create and run your account and provide the lessons and tools.
• Track and save your learning progress, and issue and verify certificates.
• Keep energy-path secure and prevent abuse.
• Contact you about your account or important changes to the service.

4. Our legal bases

Where data-protection law applies, we rely on: performing our agreement with you (to provide the service), your consent (which you can withdraw), and our legitimate interest in keeping the service secure and working well.

5. How we share information

We do not sell your personal information. We share it only with the service providers that help us run energy-path, mainly Google (Firebase Authentication, Firestore, and Hosting, and Google Cloud Run for our secured backend), and with the social sign-in provider you choose to use. We may also disclose information where required by law.

6. Certificates are public

Certificates can be verified by anyone who has the certificate link or scans its QR code. The verification page shows the holder name and the course. Please do not put information you want to keep private into your name.

7. International transfers

Our providers (Google) operate globally, so your information may be processed in countries other than your own. Where required, appropriate safeguards are in place to protect it.

8. Data retention

We keep your account information for as long as your account is active. You can ask us to delete it at any time. For details on retention and deletion, see Data and Compliance.

9. Security

We protect your information with measures including secure authentication and encryption in transit. For more on how we protect data, see Data and Compliance.

10. Children

energy-path is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16 without the involvement of a parent or guardian. If you believe a child has given us personal information, contact us and we will remove it.

11. Your rights

You have rights over your personal information, including to access, correct, delete, and export it. To learn what they are and how to use them, see Data and Compliance.

12. Cookies and local storage

energy-path uses only essential browser storage to run the site. See the Cookie and Local-Storage Notice for the full list.

13. Changes and contact

We may update this policy and will change the effective date when we do. Questions or requests? Contact us at admin@energy-path.org.