Privacy Policy

1. Introduction DanceJourney ("we", "us", "our") provides tools for dancers to find roommates, rides, strictly partners, and other event-related opportunities. We are committed to protecting your privacy and handling your personal data in a transparent and lawful way. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use DanceJourney, in accordance with applicable data protection laws including the EU/UK GDPR, CCPA/CPRA, LGPD, PIPEDA, and the Australian Privacy Act. By using DanceJourney, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will seek your explicit consent for specific processing activities. 2. Data Controller and Contact For most processing activities described in this policy, DanceJourney is the data controller. If you have questions or would like to exercise your privacy rights, you can contact us using the contact information provided in the app or on the DanceJourney website. 3. Data We Collect We collect and process the following categories of personal data: • Account and identification data - Email address - Password (stored only as a salted, hashed value by our authentication provider) - Display name - Auth provider identifiers (e.g., Google, Facebook) • Profile data - WSDC number (if provided) - Birthday (used for age-related features and legal requirements) - Private lesson scheduling link (if provided) - Contact methods you choose to add (e.g., phone number, email, Facebook profile, custom contact types) - Contact visibility preferences (e.g., Public, Connections, None) - Communication preferences (e.g., preferred contact method, whether to receive email notifications) • Event and opportunity data - Events you attend or follow - Strictly posts, room posts, ride posts, groups, and event passes you create or interact with - Your visibility settings for event attendance and opportunities • Relationship and interaction data - Relationships between users (watching/watched, connections, blocks) - Notifications generated when other users express interest in your posts - Feedback you submit about the app • Technical and usage data - IP address and approximate location (derived from IP, where allowed by law) - Device, browser, and operating system information - Log data such as timestamps, pages visited, and basic usage events - Cookies and similar technologies used for authentication, localization, and basic analytics • Data from third parties - Authentication providers (e.g., Google, Facebook) may provide us with your basic profile information (such as email and name) when you choose to sign in via OAuth. - Dance-related data sources (e.g., WSDC) may be used to look up and display public competition information associated with your WSDC number, where available. 4. Legal Bases for Processing We process your personal data on the following legal bases (depending on your jurisdiction): - Contract: To provide and maintain your DanceJourney account and core features you request. - Legitimate interests: To operate, secure, and improve the service, prevent abuse, and understand how features are used, provided these interests are not overridden by your rights. - Consent: For optional features such as certain email notifications, specific contact visibility choices, and where required for cross-border transfers or marketing. You may withdraw consent at any time via your settings or by contacting us. - Legal obligations: To comply with applicable laws, respond to lawful requests, and enforce our Terms of Service. 5. How We Use Your Data We use your information to: - Create and manage your account and profile. - Authenticate you and keep your sessions secure. - Display your profile, opportunities, and event attendance to others according to the visibility settings you choose (Public, Watchers, Connections, Nobody, or similar). - Enable you to create, edit, and delete opportunities (strictlies, rooms, rides, groups, event passes) and to express interest in others' posts. - Show you relevant opportunities from other dancers, including highlighting posts from people you watch or are connected with. - Send you transactional emails and notifications (e.g., account verification, password reset, important service updates, and opportunity notifications if you opt in). - Enforce blocks and safety settings so that users you block (or who block you) cannot see or contact you through the app. - Maintain the security and integrity of the platform, including monitoring for abuse, spam, or suspicious behavior. - Analyze aggregated, de-identified usage patterns to improve features, performance, and user experience. - Comply with legal obligations and enforce our Terms of Service. 6. Data Sharing and Disclosure We do not sell your personal data. We share your information only as necessary to provide the service and as described below: • Other users - Certain profile information, opportunities, and event attendance may be visible to other users depending on your visibility settings. - Users you connect with, or who follow you, may see more of your activity than other users, as configured in your settings. • Service providers (processors) We use third-party providers to help us operate DanceJourney, including: - Hosting and infrastructure (e.g., Supabase/PostgreSQL, edge functions) - Authentication and security services - Email delivery and notification services - Error monitoring and logging These providers are contractually required to process personal data only on our instructions and to implement appropriate security measures. • Third-party integrations - If you use OAuth providers (such as Google or Facebook) to sign in, those providers will process your data under their own privacy policies. We receive only the information needed to create and authenticate your account. - If you choose to share or link to external services (e.g., a private lesson scheduling link, social media profiles), those services process your data under their own terms and policies. • Legal compliance and protection We may disclose your information if we reasonably believe it is necessary to: - Comply with a law, regulation, legal process, or governmental request. - Enforce our Terms of Service or other agreements. - Protect the rights, property, or safety of DanceJourney, our users, or the public. • Business transfers If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to ongoing protections consistent with this Privacy Policy. 7. International Data Transfers DanceJourney may process data in countries other than your own. Where required by law (e.g., under GDPR, LGPD), we implement appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, to ensure an adequate level of protection for your data. 8. Data Retention We keep your personal data only for as long as necessary for the purposes described in this policy or as required by law. In general: - Account and profile data: Retained while your account is active. If you delete your account, we will delete or irreversibly anonymize your personal data within a reasonable period, subject to limited retention of logs or backups for security, fraud prevention, and legal compliance. - Event and opportunity data: Retained while relevant to active or recent events and for a reasonable period afterward for safety, auditing, and troubleshooting. - Logs and security data: Retained for a limited period sufficient to investigate incidents, maintain security, and meet legal obligations. - Feedback and support communications: Retained as needed to understand historical issues, improve the service, and demonstrate compliance. Where we are required by law to retain data for a longer period (for example, in response to a legal request), we will do so only for the minimum time necessary. When we no longer need data, we will delete or anonymize it. 9. Data Subject Rights Depending on your jurisdiction, you may have some or all of the following rights: - Right of access: To request a copy of your personal data we hold. - Right to rectification: To request correction of inaccurate or incomplete data. - Right to deletion/erasure: To request deletion of your personal data, subject to legal and legitimate interest limitations. - Right to restriction: To request that we limit certain types of processing. - Right to data portability: To receive your data in a structured, commonly used, and machine-readable format where technically feasible. - Right to object: To object to processing based on legitimate interests or to direct marketing. - Rights related to automated decision-making: We do not engage in automated decision-making that produces legal or similarly significant effects without human involvement. For residents of specific regions: - EU/UK (GDPR): You have the rights above and may lodge a complaint with your local data protection authority if you believe we are not complying with data protection laws. - California (CCPA/CPRA): You have the right to know what personal information is collected, used, disclosed, and to request deletion or correction of certain information. We do not "sell" personal information as defined by the CCPA/CPRA. You have the right to not be discriminated against for exercising your rights. - Brazil (LGPD): You have rights including confirmation, access, correction, anonymization, blocking, deletion, portability, and information about shared use of data. - Canada (PIPEDA): You have the right to access and correct your personal information and to challenge our compliance with PIPEDA. - Australia (Privacy Act): You may request access to and correction of your personal information and lodge a complaint with the Office of the Australian Information Commissioner. To exercise your rights, please contact us using the details provided in the app or on our website. We may need to verify your identity before processing your request. 10. Cookies and Similar Technologies We use cookies and similar technologies to: - Keep you signed in and manage sessions. - Remember your language and locale preferences. - Improve performance and security. - Understand aggregated usage patterns in a privacy-preserving way. You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of DanceJourney. 11. Security Measures We take appropriate technical and organizational measures to protect your personal data, including: - Transport Layer Security (TLS) for data in transit. - Role-based access controls and least-privilege principles. - Hashing and salting of authentication credentials handled by our auth provider. - Database-level security policies (including row-level security) to limit who can see or modify data. - Regular monitoring for suspicious activity and abuse. No system can be 100% secure, but we work continuously to reduce risk and respond to vulnerabilities. 12. Data Breach Response If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will: - Investigate and contain the incident promptly. - Assess the scope and impact. - Notify you and relevant authorities as required by applicable law, providing information on what happened, what data may be affected, and what steps we are taking. - Take steps to prevent a recurrence, including technical fixes and process improvements. 13. Children and Minimum Age DanceJourney is not intended for children who are not legally permitted to use online services in their jurisdiction. As described in our Terms of Service, by using the service you confirm that you meet the minimum age requirements (typically at least 13 years old, and in some jurisdictions 16 years old). If we learn that we have collected personal data from someone not legally permitted to use the service, we will delete that data and may delete the account. 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or features. If we make material changes, we will provide a prominent notice in the app or via email where appropriate. Your continued use of DanceJourney after changes become effective signifies your acceptance of the updated policy. 15. Contact If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the support or contact options provided within the DanceJourney app or on our website.