Privacy Policy

The controllers of your personal data are Minna Jylhä, Markus Hirvonen, and Olli Paananen, who together operate the YODS online dance studio. Membership payments are invoiced by Majestic Rugged and Wild Oy (business ID 3474761-2). For any privacy question, email privacy@dancewithyods.com.

• Account: name, email, hashed password, email-verification status.
• Profile (optional, you choose): self-reported dance level, dances and topics you’re curious about, and a free-text note about what you’d like to learn with us. Skippable; you can edit or remove these any time from My profile.
• Usage: lessons watched or marked complete, course intros opened.
• Your input: journal entries, course ratings and comments.
• Subscription: Stripe customer ID and subscription status.
• Technical: IP address on sign-in / registration / password-reset endpoints for abuse prevention.

• Contract (GDPR art. 6(1)(b)): running your account, delivering lessons, billing, showing your progress.
• Legitimate interest (art. 6(1)(f)): preventing abuse (rate limiting, verification), keeping the service secure.
• Legitimate interest (art. 6(1)(f)): sending you occasional emails about YODS: news, updates, and information relevant to your membership. Every such email has an unsubscribe link and you can opt out at any time.
• Consent (art. 6(1)(a)): publishing your feedback on the site (when you tick the public option).
• Legal obligation (art. 6(1)(c)): keeping invoice records required by accounting law.

Processors used:

• Infrastructure: hosting, database, content delivery, file storage and error-monitoring providers that run the service and store your content (in the EU, or in the US under Standard Contractual Clauses / the EU–US Data Privacy Framework).
• Email: a provider that sends your account emails (verification, password reset) and newsletters / member updates (EU).
• Google Analytics 4: usage analytics (only with consent).
• Stripe: payment processing.
• Google Gemini: live AI coach + uploaded-clip analysis. Your microphone audio (and camera, if you enable video) is streamed to Gemini during a coach session; uploaded video clips are sent to Gemini for the written analysis (US, SCCs).

Some of our providers, including Stripe and Google plus certain infrastructure providers, process data in the United States under Standard Contractual Clauses and / or the EU–US Data Privacy Framework.

Account data: kept while your account is active and for up to 30 days after deletion. Invoice records: retained per Finnish accounting law (6 years). Rate-limit records: up to 24 hours.

AI coach memory: short notes the coach saves about your dancing (level, recurring focus areas, goals you mention) are kept across sessions while your account is active and erased when you delete it. To access or erase specific notes without closing your account, email privacy@dancewithyods.com.

Under GDPR you have the right to:

• access a copy of your data
• correct inaccurate data
• delete your account and personal data
• receive your data in a portable format
• object to processing based on legitimate interest
• lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To use any of these rights, email privacy@dancewithyods.com.

Strictly necessary: session cookie + CSRF token. Required for the service.

Analytics (consent required):Google Analytics 4 loads only if you click “Accept” on the cookie banner. GA sets `_ga` / `_ga_*` cookies. Clear site data to re-prompt.

The “Last updated” date at the top reflects the current version.