Privacy

Controller

Nara AI Systems AB, org. no. 559520-0931, Övre Olskroksgatan 6, 416 67 Göteborg, Sweden, is the controller. Contact: hello@mydancingbook.com.

What we process

Account. Your email address, first name if you give it, birth year, the terms you accepted, your trial and plan, the computers signed in to your account, and the service emails we send you about them. Purpose: your account, trial and plan, and the age rule below. Basis: the agreement. Kept until the account is deleted.

Sign-in and security. Sign-in codes, sessions, records of sign-ins and account changes, and the IP address and technical details of each connection to our services, including checks against automated abuse on our forms. Purpose: signing you in and keeping our services safe. Basis: the agreement for signing you in, otherwise legitimate interest in keeping our services safe. Kept at most 90 days.

Trial records. A record of past free trials. Purpose: giving the free trial once. Basis: legitimate interest in preventing misuse of the free trial. Kept twelve months after the account is deleted.

Feedback. What you send with Send feedback: your message, the pictures you attach, technical details of the app, and your account if you choose to include it. Pictures may show other people. Purpose: fixing the app, and answering you when you include your account. Basis: legitimate interest in fixing the product, and the agreement for the answer. Kept twelve months after receipt.

Support. Emails to the contact address and our answers. Basis: the agreement, our legal duty for requests about your rights, otherwise legitimate interest in answering you. Kept twelve months after the last message.

News. News emails, if you ask for them and confirm by email. Basis: consent. Kept until you withdraw it.

Song search. When you search for a song in the app, the search goes to MusicBrainz, run by the MetaBrainz Foundation, under its own privacy policy.

Website visits. Cloudflare Web Analytics counts visits to this website without cookies or cross-site tracking. We see aggregated totals. Basis: legitimate interest in running this website and knowing how it is used.

Backups. Deleted data can remain in our provider's backups for up to 7 days.

Required data. An email address is required for an account. Without one we cannot open it. First name and news are optional.

Google

With Continue with Google, Google gives us your email address and first name. We use them to sign you in and to show your first name in the app.

Google Drive. If you connect Google Drive, the phone app reads your MyDancingBook folder there and adds the class videos you send to it. This passes directly between your phone and your Google Drive. We do not receive it, store it or share it. MyDancingBook's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Recipients

Our processors are Supabase (account and feedback data), Cloudflare (our websites, security checks, Web Analytics and feedback), Resend (service emails) and Microsoft (support mailbox). They act on our instructions. When we invite you to early access, Google or Apple receives the address you gave for it.

Transfers outside the EU

Some of these processors may process data outside the EU, including in the United States. These transfers rest on the EU-US Data Privacy Framework or the EU standard contractual clauses, Commission Decision (EU) 2021/914, published at eur-lex.europa.eu.

Your rights

You have the right of access, rectification, erasure, restriction and portability, and the right to withdraw consent at any time, without affecting processing before the withdrawal. You exercise them through the contact under Controller.

You can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), imy.se/en/complaint, or to the authority in the country where you live.

Right to object

Where we rely on legitimate interest, you have the right to object at any time on grounds relating to your particular situation. We then stop unless we show compelling legitimate grounds that override yours.

Automated decisions and age

We make no automated decisions about you that have legal or similarly significant effects.

You must be 16 or older to have an account, and 18 or older to buy a plan.

The test version

If you apply for early access, we keep your email address, the devices and cloud services you name, and any other address you give us for an app store invitation, to plan the early access and to invite you. Your Google or Apple address goes to Google or Apple when we invite you through their test programmes. We delete these details when the early access ends, or earlier when you leave the list. Basis: steps you ask for before the agreement.