Privacy Policy

Last updated: 10 Sep 2025


1. Basic Information
- App: Tap2Dance (Android / iOS)
- Email: contact@tap2-dance.com
- Legal age consent: Services are available to individuals 18+. Minors may provide personal information only with prior parental or guardian consent via email.

2. Internet Connectivity and Security
This app requires an active internet connection for core functions (authentication, profile/data sync, push notifications, crash diagnostics, optional image upload).  
All network communications are encrypted in transit using HTTPS/TLS.

3. Definitions
- Personal Data: Any information relating to an identified or identifiable individual.
- Processing: Any operation performed on personal data such as collection, storage, use, or deletion.
- User: Any individual using the Tap2Dance app.

4. What Data We Collect and Why
We only process data necessary for account, community, and safety features.

- Account identifiers: email, full name, username, and Firebase user ID (firebase_uid), used to create and manage the account. Authentication tokens are used only in transit and not stored in our database.
- Optional profile data: profile image, dance style preference, city, country, social links (Instagram, Facebook). Used to personalize the public profile if supplied by the user.
- User-generated content: posts, comments, photos uploaded to the news feed.
- Device and notification data: device push token (Expo/FCM) and platform (iOS/Android) to deliver notifications.
- App info and performance: crash logs and diagnostics via Firebase Crashlytics, not linked to user identity, used only to improve stability.
- Local-only data: favorites are stored locally on the device and not transmitted to servers.

Purposes: account creation/login, profiles, community features, delivering opted-in notifications, app reliability, and security.

5. Legal Bases (GDPR)
Data is processed based on: performance of a contract, user consent (for optional fields/notifications), legal obligations, and legitimate interests (security, service improvement).

6. Data Retention
Personal data is kept while the account is active or as required by law.  
On account deletion, associated content under our control is removed, except where retention is legally necessary.

7. Data Sharing and Recipients
Data is shared only with service providers needed to operate the app:
- Google Firebase Authentication (identity and account management; only firebase_uid stored).
- Google Firebase Crashlytics (crash logs, not linked to identity).
- DigitalOcean LLC (backend/database hosting in Frankfurt, EU).

We do not sell data or share it for targeted advertising. International transfers use safeguards such as Standard Contractual Clauses.

8. International Transfers
Servers are hosted in the EU (Frankfurt). If data leaves the EEA, appropriate safeguards are applied.

9. Account Deletion and User Controls
Users can delete accounts in-app, removing associated identifiers and content, subject to lawful retention.
This can be done in Profile -> Login And Security -> Delete Account.  
Additional deletion or privacy requests may be sent via email.

10. Your Rights
Users can request access, correction, erasure, restriction, objection, data portability, or withdraw consent.  
Requests should be sent to contact@tap2-dance.com and will be answered within 30 days.

11. Children’s Privacy
Not directed to individuals under 18. Parental consent is required for minors.

12. Security
We use TLS encryption, EU-based hosting, access controls, and regular security maintenance.

13. Cookies and Analytics
The app does not use cookies. If analytics are added in future, users will be notified.

14. Permissions and Platform Features
- Notifications: We use device notifications to alert you about new posts or comments in feeds you follow. You can disable notifications at any time in your device's system settings.
- Photos/Media (one-time picker): We access your device’s photo library only when you choose to attach an image to a post. Selected images are transmitted securely and not used for any other purpose.

15. Moderation and Reporting
Users and admins can report or delete posts/comments violating community rules. Reported content may be reviewed for safety.

16. Changes to This Policy
Policy may change in line with laws. Material changes will be communicated via app notifications or email.

17. Contact Us
Email: contact@tap2-dance.com  
If you believe that your data has not been handled properly, you may also contact the Croatian Personal Data Protection Agency or your local regulator.

© 2025 Tap2Dance. All rights reserved.