Privacy policy

Who we are

DanceFitness.fit ("DanceFitness", "we", "us") is a Toronto-based software service that turns a dance studio's TV into a real-time class energy display using a webcam and on-device AI motion sensing. This page explains what we collect, how we use it, who helps us process it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

• Studio account info. Studio and room names, and the email address and name of the owner and any staff invited to the studio dashboard. Provided at sign-up or when we set up the studio for you.
• Enquiries and sign-ups. The email address you give us on the website (and, at sign-up, how you heard about us), so we can reply and send the trial emails described below.
• Class statistics. Per-class records: start time, duration, calorie estimate, peak and average energy, the most dancers detected at once, points, and time spent in each energy zone. We also keep a motion fingerprint: one list of 64 numbers summarising how the class's overall energy moved over time, with no per-dancer data. Kept for the lifetime of the studio account.
• Highlight photos. Up to five small photos per class (480 × 270 px) taken automatically by the TV at peak-energy moments. They show the room and can include recognizable people. We use them in the studio's dashboard, the class summary email, the "hype reel" video made from them, and the class recap page (see below). We do not run face recognition or any other analysis on them. Photos are taken only after the studio owner confirms that members have been told about the camera, and owners can switch them off at any time. Photos and hype reels are deleted automatically after 30 days.
• Website analytics. On our marketing website, sign-up pages and the studio dashboard we use Google Analytics, which sets cookies, to count visits and see which pages and links work. No advertising features are switched on. It does not run on the pages members see: the class page opened from the TV's QR code, class recap pages, or the TV display. A cookie banner lets you choose. If you visit from the EU, the UK or Switzerland (or we can't tell where you are), Google Analytics only loads after you press Accept. Elsewhere it loads by default, and Reject turns it off and deletes its cookies. It never loads if your browser sends a Global Privacy Control signal. We remember your choice in your browser. You can change it at any time with Cookie settings (also at the bottom of every page).
• Sign-in cookies. When a studio owner or staff member signs in to the dashboard we set the cookies needed to keep them signed in. They aren't used for anything else and don't need consent.
• Error monitoring. We use Sentry to catch errors in the website and dashboard. When something breaks, it sends the error and technical details (the page, browser and device type). It doesn't record sessions or set cookies.
• Operational logs. Standard server logs (IP address, browser, timestamps) for security and debugging, kept for up to 90 days.

What we don't collect

• No video recording or streaming. The live camera feed is analysed on the TV itself with TensorFlow.js. It is never streamed or recorded; the only images that leave the TV are the highlight photos above.
• No body or face data. The body-position points the AI finds are used on the TV and thrown away; we don't store them. We don't run face recognition or anything that identifies individual dancers, and we don't link dancers across classes. The live leaderboard uses anonymous track numbers.
• No payment card data. Payments are handled by Stripe; we never see card numbers.
• No advertising trackers. No Facebook pixel or ad networks, and we don't sell personal information.

How we use it

• To run the service: the live display, dashboard, summaries, recap pages and hype reels.
• To email studio owners: class summaries, weekly and monthly recaps, trial and billing notices, and occasional product emails. Every marketing email has an unsubscribe link, and owners can switch recap and marketing emails off in their settings.
• To improve the product and publish anonymous benchmarks built from class statistics combined across many studios, never identifying a studio or a person.
• To keep the service secure and fix problems.

Class recap pages

Each class gets a shareable recap page with its statistics and top highlight photo, at a long, unguessable web address. Anyone the studio shares that link with can view it, and apps that show link previews (messaging and social apps) may display the photo. Recap pages are hidden from search engines. The photo disappears from the page when it is deleted after 30 days; previews that other apps have already saved are outside our control.

Who processes data for us, and where

Our database and file storage are hosted by Supabase in its Canada Central region (Quebec). These service providers process data on our behalf, some of them outside Canada (mainly in the United States):

• Vercel — website hosting and server code (United States)
• Cloudflare — DNS
• Resend — sending email (United States)
• Stripe — payments (United States and elsewhere)
• Google Analytics — website analytics (United States)
• Sentry — error monitoring (United States)

The TV and demo pages also download the open-source AI model from public content networks, which see the device's IP address as with any web request. Data handled outside Canada is subject to the laws of those countries.

Member awareness and consent

Studios are responsible for telling their members that AI motion sensing runs during class and that highlight photos may be taken. Owners confirm this in their dashboard settings, and no highlight photos are taken until they do. Owners can also switch highlight photos off entirely. The TV shows the live camera view with the detected body outlines, so anyone in the room can see when it's running.

A member who doesn't want to be on camera can stay outside the camera's view; the display works with whoever is visible.

Your rights under PIPEDA

You have the right to:

• Know what personal information we hold about you
• Request a correction or deletion of that information
• Withdraw consent for data collection at any time
• File a complaint with the Office of the Privacy Commissioner of Canada

Email dancefitness.fit@gmail.com with any of these requests. We respond within 30 days.

Data retention

• Account data: kept as long as the studio account is active. Studio owners can delete their studio and all its data at any time in Settings → Delete your studio; or ask us and we do it within 30 days.
• Class statistics and motion fingerprints: kept for the lifetime of the account.
• Highlight photos (up to 5 per class) and hype reels: deleted automatically after 30 days.
• Enquiry and sign-up emails: until you ask us to delete them (unsubscribing stops the emails but keeps the record).
• Operational logs: up to 90 days.

Security

Data in transit is protected by TLS. Data at rest is encrypted by Supabase and Vercel. Access to production data is limited to authorised operators using magic-link authentication. Database row-level security policies enforce that each studio can only see its own data.

Children

DanceFitness is built for adult dance fitness classes. We don't knowingly collect data from anyone under 18. Studios that run classes with children should switch highlight photos off in their dashboard settings and get parents' consent before using DanceFitness in those classes.

Changes to this policy

We'll post any material changes here and email studio owners at least 30 days before the changes take effect.

Contact

DanceFitness.fit · Toronto, Ontario, Canada
Email: dancefitness.fit@gmail.com