Privacy Policy

This Policy describes how DanceCraft ("we," "us," or "our") processes personal information when you use our websites, mobile applications, and related services (collectively, the "Services"). If you disagree with this Policy, please do not use the Services.

Who we are

DanceCraft operates the Services for dance instructors and students. Contact: info@dancecraft.app.

Information we collect

• Account and profile data: name, email address, time zone, profile photo, instructor or student roles, city or region you set for discovery, optional contact details you choose to share (such as a WhatsApp number), and—for teachers—payment contact details you provide so students can pay you outside the app (for example an e-transfer email).
• Lesson and booking data: dance styles, availability, pricing, booking requests, lesson times and durations, in-person studio addresses you add, online meeting links, roster relationships, homework assignments, and progress tracking metadata tied to your account.
• Content you upload or create: photos, lesson recap videos, student progress videos, voice memos, lesson notes, private coaching notes, in-app chat messages, and related transcripts or summaries generated from voice memos when you use those features.
• Location-related data: if you allow location access on a mobile device, we may use it once to suggest a city label for your profile or Discover filter—we store the city name, not your device's live coordinates from that flow. Teachers who add studio locations may also store street addresses (and coordinates returned by our address lookup provider) for those places.
• Device and technical data: account identifiers, push-notification tokens, app version, platform, and similar data needed to keep you signed in, deliver notifications you enable, and operate secure infrastructure.
• Product analytics (mobile app): when enabled, we collect how you interact with the app—such as screens viewed, taps, and product events—linked to your account identifier so we can understand usage and improve the product. You can turn this off anytime in the mobile app under Edit profile → Share usage analytics. We do not use this data for cross-app advertising or sell it to data brokers.
• Subscriptions (teachers): on iOS and Android, teacher plans are purchased through the App Store or Google Play. We receive subscription status and purchase history from Apple/Google (via our subscription partner RevenueCat) to unlock paid features. We do not receive or store your payment card number.
• Support and feedback: if you submit in-app feedback, we collect your message plus diagnostic context you send with it (such as app version, device model, and the screen you were on) so we can respond and troubleshoot.
• Optional integrations (Zoom, Google Meet, Microsoft Teams, and similar): if you choose to connect a provider, we exchange OAuth authorization codes via our secure backend and store provider tokens and identifiers needed to schedule or update meetings on your behalf until you disconnect. We typically learn your provider account email (or display name provided by that service) solely to confirm which integration is linked.
• Optional Instagram integration (teachers): if you connect a Professional Instagram account, we collect post identifiers, captions, image or video thumbnail URLs, permalinks, timestamps, and your Instagram username. We display recent posts on your public DanceCraft profile (web and in-app), cache them for up to six hours, and re-fetch on a similar schedule while connected. Cached data is removed when you disconnect in app settings or when Meta sends a data-deletion request; otherwise we retain cached rows for up to thirty days after the last successful sync, whichever comes first. You may revoke access anytime via in-app disconnect or Instagram → Settings → Apps and Websites. See our data deletion instructions.

How we use information

We use personal information to:

• Provide, secure, troubleshoot, and improve the Services;
• Schedule lessons, send push or email notifications you opt into, and display accurate availability;
• Store and display content you upload, including lesson media and progress tracking;
• Transcribe or summarize voice memos and polish lesson summaries using automated tools when you use those features;
• Process teacher subscriptions and enforce plan limits;
• Create or sync online meetings where you explicitly select a conferencing provider;
• Understand product usage through analytics when you have not opted out (not sold for unrelated advertising).

Tracking and advertising

We do not sell personal information. We do not use your data to track you across other companies' apps or websites for advertising, and we do not share it with data brokers for that purpose. Product analytics described above is used only to improve DanceCraft.

Legal bases (where applicable)

If GDPR or comparable laws apply, we rely on performance of our contract with you where necessary to operate the Services, legitimate interests balanced against your privacy (such as fraud prevention), and consent where explicitly requested (including certain integration authorizations processed by Zoom, Google, or other providers' OAuth screens).

Sharing

• Teachers and students within your lessons: each party sees the lesson information required to attend (times, participant names where shared, integration meeting links you attach, homework, and progress content you choose to share, etc.).
• Service providers: we use vetted subprocessors under contract to operate the Services—for example hosted database and authentication (Supabase), media storage (Cloudflare R2), transactional email (AWS SES), mobile push delivery (Expo / Apple or Google push services), product analytics (PostHog, when not opted out), subscription management (RevenueCat and the relevant app store), address autocomplete (Google Places), and speech or text processing for voice-memo features (such as Deepgram and OpenAI). They process data only on our instructions and for the purposes described in this Policy.
• Conferencing and social providers: when you authorize Zoom, Google, Microsoft, Meta/Instagram, or similar providers, personal data travels subject to those vendors' policies and OAuth consent screens at the point of connection.
• Payments outside the app: if a teacher shares an e-transfer email or phone number for student payments, students see that information to pay the teacher directly—we are not the payment processor for those transfers.

We do not sell personal information.

Retention

We keep information while your account is active and only as long as needed afterward for legal, billing, dispute, or contractual obligations tied to inactive accounts unless you request deletion where required by applicable law.

Security

We encrypt sensitive provider credentials server-side using modern algorithms, restrict employee access to production systems with least privilege principles, and employ transport layer security for client connections. No method is 100% secure; please report suspected incidents to info@dancecraft.app.

Your privacy choices

• Usage analytics: toggle off "Share usage analytics" in the mobile app (Edit profile).
• Push notifications: control these in your device Settings or in-app where offered.
• Location: deny location permission and enter your city manually instead.
• Integrations: disconnect Zoom, Google Meet, Teams, or Instagram in app settings at any time.
• Account deletion: you may delete your account from Edit profile in the mobile app, subject to retention described below.

Your privacy rights

Depending where you reside, privacy laws—including the GDPR in the EU/UK and analogous U.S. state laws—may grant you rights to access, correct, delete, or port personal information, to object to certain processing, to withdraw consent, and/or to lodge a complaint with your data protection authority.

Data subjects wishing to exercise these rights may email info@dancecraft.app with the subject line "Privacy request." Identify the email associated with your account and describe your request—we respond within timelines required by applicable law unless an exception legitimately applies.

Under applicable law—for example GDPR in the European Economic Area or UK—you may also lodge a complaint with the data protection authority in your country if you believe our processing violates the law.

International transfers

We may process personal information where our infrastructure operates, applying appropriate safeguards when crossing borders (standard contractual clauses or equivalent mechanisms).

Children's privacy

DanceCraft targets adult instructors and supervised students consistent with parental consent where necessary. Parents or guardians with questions may contact info@dancecraft.app.

Changes

We revise this Policy as our Services evolve. Material updates will appear with a refreshed "Last updated" date; continued use afterward constitutes acknowledgement except where law requires additional consent steps.