BachataGrow (“we”, “our”, “the service”) is a platform that helps bachata dance teachers and students run classes, share video moves, track progress, and book private lessons. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have.
If you have any questions, you can reach us at [email protected].
1. Information we collect
1.1 Account information
When you sign in with Google, we receive your name, email address, profile picture, and Google account ID. We store this information to create and identify your BachataGrow account.
1.2 Content you create
- Classes, combos, moves, combo lists, notes, comments, and studio settings you create in the app.
- Videos you upload. Videos are stored in Cloudflare R2 object storage. Thumbnails and some legacy videos may be stored with Cloudinary.
- Enrollment and attendance records, private lesson credits, payments, and promo-code usage.
1.3 Usage and analytics
When students watch move videos we record aggregated watch events (session ID, position watched, duration, number of replays) and optional mastery reactions (“got it” / “practice” / “confused”). Teachers can see per-student engagement for their own classes. This data is scoped to the class the student is enrolled in.
1.4 Technical data
We receive standard server logs (IP address, user-agent, timestamps) and a minimal set of cookies needed to keep you signed in and to remember preferences such as language.
2. Google user data
BachataGrow uses “Sign in with Google” for authentication only. We request just the default OpenID Connect scopes (openid, email, profile) so that we can identify your account and display your name and profile picture.
2.1 What we do NOT do
- We do not read, write, or modify your Google Calendar.
- We do not access your Gmail, Drive, Contacts, or any other Google service.
- We do not store Google OAuth refresh tokens for offline access.
- We do not sell, rent, or share Google user data with third parties.
- We do not use Google user data for advertising or to train AI models.
2.2 Adding events to your calendar
When a class is scheduled or a private lesson is booked, we send you a transactional email that includes an “Add to Google Calendar” link and an .ics attachment. Clicking that link opens Google Calendar’s own event-creation page with the details pre-filled; you decide whether to save it. This does not require BachataGrow to have any permission on your calendar.
2.3 Revoking access
Because we only use basic sign-in scopes, there is nothing to revoke beyond signing out of BachataGrow. If you want to remove BachataGrow from the list of apps connected to your Google account anyway, you can do so from your Google Account → Connections page.
3. How we use your information
- To provide and operate the BachataGrow service.
- To authenticate you, keep your session active, and associate your activity with your account.
- To send transactional email (e.g. enrollment confirmations, lesson reminders, password/security notifications) via Resend.
- To help teachers understand how students engage with their uploaded moves, limited to the teacher’s own classes.
- To detect abuse, prevent fraud, and protect the safety of our users.
4. How we share your information
We do not sell your personal information. We share data only with the vendors we need to run the service, and only to the extent needed:
- Google — for sign-in only (OpenID Connect; no Calendar / Gmail / Drive access).
- Cloudflare R2 — to store uploaded videos.
- Cloudinary — for legacy video storage and image transformations.
- Stripe — to process payments. Card numbers never touch our servers.
- Resend — to send transactional email.
- Railway — our hosting provider.
- Upstash / Redis — for caching and real-time features.
We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users.
5. Data retention
We keep your account data for as long as your account is active. When you delete your account, we delete your personal information and uploaded content within 30 days, except where we are required to retain records (e.g. payment records for tax purposes).
6. Your rights and choices
- Access & export: request a copy of the data we hold about you.
- Correction: update your profile information at any time from your account settings.
- Deletion: delete your account and associated content.
- Revoke Google access: see section 2.3 above.
- Opt out of non-essential email: use the unsubscribe link in any marketing email. Transactional email (e.g. booking confirmations) cannot be opted out of without closing the account.
To exercise any of these rights, email [email protected].
7. Security
We use industry-standard security measures: HTTPS everywhere, hashed/encrypted secrets, role-based access control, and hosting on reputable cloud providers. No system is 100% secure; if we become aware of a breach that materially affects your data, we will notify you in accordance with applicable law.
8. Children’s privacy
BachataGrow is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, please contact us so we can remove it.
9. International users
BachataGrow is operated from the United States. If you access the service from outside the US, your data will be transferred to and processed in the US.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify you by email or an in-app banner. Continued use of the service after changes take effect constitutes acceptance of the revised policy.
11. Contact
BachataGrow
[email protected]