Privacy policy

Who we are

DanceFitness.fit ("DanceFitness", "we", "us") is a Toronto-based software service that turns a dance studio's TV into a real-time class energy display using a webcam and on-device AI motion sensing. This page explains what we collect, how we use it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

The categories below are the only personal or sensitive data we touch:

• Studio account info. Email address and full name of the owner and any staff invited to the studio dashboard. Provided when an operator creates the studio.
• Session metadata. Per-class records (timestamp, duration, calorie estimate, peak energy, average energy, max persons detected). Stored indefinitely for the lifetime of the studio account.
• Highlight frames. Up to five small JPEGs per class (480 × 270 px, ~14 KB each) captured automatically at peak-energy moments, ranked by how high the class energy hit. Used for the post-class highlight reel in the dashboard and summary email. Aggregate room-level frames only — no individual identification or biometric extraction. Auto-deleted after 30 days.
• Operational logs. Standard server logs (IP, user agent, timestamps) retained for security and debugging. Deleted after 90 days.

What we DON'T collect

• No continuous video. The webcam feed never leaves your TV. Motion sensing runs entirely on-device using TensorFlow.js — pixel data is never transmitted to our servers.
• No biometric identifiers. We do not run face recognition, fingerprinting, or any technique that identifies individual dancers.
• No tracking cookies or third-party analytics. No Google Analytics, no Facebook pixel, no advertising trackers.
• No payment card data. If/when billing launches, payments will be handled by Stripe — we never see card numbers.

Where data is stored

All data is stored in Supabase's Canada Central region (Quebec). Our hosting (Vercel) and DNS (Cloudflare) may route requests through edge infrastructure outside Canada for performance, but the database of record stays on Canadian soil.

Student consent

Before activating DanceFitness in a class, the studio owner acknowledges in their dashboard that they have informed students that AI motion sensing is active during class. A persistent on-screen indicator on the TV display also communicates this in real time.

If a student does not want to be in the camera frame, they can simply position themselves outside the camera's view. The system tracks aggregate class energy from whichever dancers are visible.

Your rights under PIPEDA

You have the right to:

• Know what personal information we hold about you
• Request a correction or deletion of that information
• Withdraw consent for data collection at any time
• File a complaint with the Office of the Privacy Commissioner of Canada

Email dancefitness.fit@gmail.com with any of these requests. We respond within 30 days.

Data retention

• Account data: kept as long as the studio account is active. Deleted within 30 days of cancellation upon request.
• Session metadata: kept for the lifetime of the account.
• Highlight frames (up to 5 / class): auto-deleted after 30 days.
• Operational logs: 90 days.

Security

Data in transit is protected by TLS 1.3. Data at rest is encrypted by Supabase and Vercel. Access to production data is limited to authorised operators using magic-link authentication. Database row-level security policies enforce that each studio can only see its own data.

Children

DanceFitness is built for adult dance fitness classes. We don't knowingly collect data from anyone under 18. Studios offering kids' programming should obtain parental consent and may want to disable highlight-frame capture (contact us).

Changes to this policy

We'll post any material changes here and email studio owners at least 30 days before the changes take effect.

Contact

DanceFitness.fit · Toronto, Ontario, Canada
Email: dancefitness.fit@gmail.com