Privacy Policy

Data Accessed

When you choose to sign in with Google, FuturePath requests access only to your basic Google profile via OAuth. The specific data we receive from Google is limited to:

• Email address — to identify your account and allow you to log in.
• Display name — to personalize your in-app experience (e.g., greeting you by name).
• Profile photo URL — to display your avatar within the application.
• Google User ID (UID) — a unique identifier used internally to associate your cloud-saved plans with your account.

We do not request access to your Google Drive, Gmail, Google Calendar, contacts, or any other Google service data.

Data Usage

Google user data is used solely for the following purposes:

• Authentication: Your Google UID and email are used to authenticate you and create or locate your FuturePath account.
• Account personalization: Your display name and profile photo are shown within the app UI so you can identify your signed-in account.
• Cloud data association: Your Google UID serves as the primary key in our Firestore database, linking your saved retirement plans to your account so they can be retrieved across sessions and devices.

Google user data is never used for advertising, profiling, re-marketing, or any purpose unrelated to providing and improving the FuturePath service.

Data Sharing

We do not sell, rent, or share your Google user data with any third parties for their own purposes. Your data is shared only in the following limited, service-essential circumstances:

• Firebase / Google Cloud (infrastructure): Your account data (email, display name, UID) and saved plans are stored in Firebase Authentication and Firebase Firestore, both operated by Google. This data is processed solely to provide the cloud sync feature and is governed by Google's own data processing terms.

No other third parties receive your Google user data.

Data Storage & Protection

• Account data (email, display name, UID, profile photo URL) and your saved retirement plans are stored in Firebase Firestore, a managed cloud database operated by Google with enterprise-grade security.
• Firestore security rules enforce strict per-user access control: only an authenticated user can read or write their own documents. No other user — including FuturePath administrators — can access your plan data.
• All data transmitted between your browser and Firebase is encrypted in transit via HTTPS/TLS.
• Data at rest is encrypted by Google Cloud's default server-side encryption.

Data Retention & Deletion

• Your account data and saved plans are retained as long as your account is active.
• You may request deletion of all your data — including your Google-derived account information and all saved retirement plans — at any time by emailing contact@essentialx.us with the subject line "Delete My Account". We will permanently delete your data within 30 days of receiving your request.
• Revoking FuturePath's access in your Google Account permissions will prevent future sign-ins but does not automatically delete data already stored. Please also send a deletion request email to ensure complete removal.