Privacy Policy
How we collect, use, and protect your information
Last updated: May 24, 2026Contents
1. Introduction
NextStep ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nextstep-civic.org and use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.
2. Information We Collect
Information you provide directly:
- Account registration details (name, email address, password)
- Profile information (photo, bio, interests)
- Contact form submissions (name, email, phone, message)
- Newsletter subscription email
- Event RSVPs and participation records
- Log data (IP address, browser type, pages visited, time spent)
- Device information (operating system, screen size)
- Cookies and similar tracking technologies
- Location data (city/region level, if permitted)
- Google OAuth data if you choose to sign in with Google (name, email, profile photo)
- Firebase Authentication data
3. How We Use Your Information
We use the information we collect to:
- Create and manage your NextStep account
- Display your civic engagement progress, badges, and leaderboard standing
- Send you event reminders, newsletters, and platform updates (with your consent)
- Respond to your contact form inquiries
- Improve our website, features, and user experience
- Analyze usage trends and monitor platform performance
- Comply with legal obligations
- Prevent fraud and ensure platform security
4. Cookies and Tracking
We use cookies and similar technologies to enhance your experience. These include:
- Essential cookies: Required for the site to function (authentication sessions, preferences)
- Analytics cookies: Help us understand how visitors use the site
- Functional cookies: Remember your settings such as dark mode preference
5. Data Sharing and Disclosure
We may share your information with:
- Firebase / Google: Our backend infrastructure provider for authentication and data storage
- Kit (formerly ConvertKit): Our newsletter delivery platform
- Law enforcement: When required by law or to protect the rights and safety of our users
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at nextstep.civic@gmail.com. We will respond within 30 days.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Opt out of marketing communications at any time
- Data portability (receive a copy of your data)
8. Security
We implement reasonable security measures to protect your information, including encrypted data transmission (HTTPS), Firebase's secure authentication system, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
NextStep is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email. Your continued use of the platform after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
NextStep
Email: nextstep.civic@gmail.com
Website: nextstep-civic.org