Account
email address, the sign-in identity you used (Sign in with Apple, or email and password), display name, account creation date
- Why
- To create and run your account.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Until you delete your account.
Legal
Privacy policy
The short version
Bachat’Up is a catalogue of bachata events, with two optional features on top: Passport, your record of where and how you dance, and Dance Floor, a way to find practice partners and festival company. You can browse the catalogue without an account. If you make one, we keep what the app needs to work: who you are, what you said you were going to, and where to send your reminders. Passport and Dance Floor hold only what you add to them, are private until you choose otherwise, and you can leave them at any time. Everything lives in the EU. Nothing is sold, nothing is shared with advertisers, and there is no tracking of any kind. You can export it all, or delete it all, from inside the app.
1. Who is responsible
Bachat’Up (“we”) is the data controller for the personal data described here. You can reach us about anything in this policy, including any request about your rights, at privacy@bachatup.com.
For the event listings themselves, the organizer who submits an event is the controller of that event’s data and we act as processor for it.
For anything about safety — a report, a block, a decision we took about your account or your content, or an appeal — write to hello@bachatup.com.
2. What we collect, why, and on what basis
This is the whole inventory for version 1.1 of the app. It matches the privacy manifest shipped inside the app binary.
Profile
dance role, style preferences, the city and country you declare, optional bio, optional profile photo, time zone, and whether Hide my card is on (Dance Floor)
- Why
- To tailor the catalogue to where you are and what you dance, and to show your name and photo on the parts of the app that are shared.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Until you delete your account.
RSVPs
the event, whether you said Interested or Going, and when
- Why
- To build your own list and to send the reminder you asked for; organizers see attendance counts. If you join Dance Floor, other Dance Floor dancers can see that you are going to an event (Dancers Going), unless you hide your RSVPs or turn on Hide my card.
- Legal basis
- Contract, Art. 6(1)(b); legitimate interest for organizer counts, Art. 6(1)(f); consent for Dancers Going, Art. 6(1)(a) (given when you join Dance Floor)
- Kept for
- 2 years after the event date, then deleted.
Artist follows
the artist and when you followed
- Why
- To surface events featuring artists you follow.
- Legal basis
- Legitimate interest, Art. 6(1)(f)
- Kept for
- Until you unfollow or delete your account.
Event views and ticket taps
which event, when, and which part of the app you came from
- Why
- First-party measurement in our own database: organizers get counts for their events, and popular events can be surfaced. This is not an advertising or tracking product and no third party receives it.
- Legal basis
- Legitimate interest, Art. 6(1)(f)
- Kept for
- Views are deleted after 90 days. Ticket taps are unlinked from your account after 90 days; only anonymous daily totals remain.
Approximate location
a coordinate rounded to about 1 km
- Why
- Only to answer “what is near me” for events and, on Dance Floor, for dancers, and to sort by distance, at the moment you tap it.
- Legal basis
- Consent, Art. 6(1)(a)
- Kept for
- Never stored. It is held in the app’s memory for the session and is gone when the app closes.
Notifications
your notification preferences and quiet hours, plus one row per device holding the push token, the platform, a randomly generated install identifier, the device name and the app version
- Why
- To deliver the reminders and alerts you switched on, and to stop sending to devices you signed out of.
- Legal basis
- Contract, Art. 6(1)(b), after the operating system permission you grant
- Kept for
- Until you sign out, turn notifications off, or delete your account. A notification we sent you (on Dance Floor, with the other dancer’s name) is kept for 30 days after it was sent.
Consent records
which consent, your decision, the policy version and the timestamp, including your acceptance of the community rules
- Why
- To prove that a choice was offered and respected, and to ask again when this policy changes materially.
- Legal basis
- Legal obligation, Art. 6(1)(c)
- Kept for
- Until you delete your account.
Things you write
event corrections, event reports, organizer submissions and verification links, your bio
- Why
- To fix and moderate the catalogue, and to review organizer applications.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Corrections: 1 year after they are resolved. Event reports: 1 year. Organizer verification: while you hold the role, plus one year; an application we turned down, 1 year after the decision.
Interest in features that are not live yet
which upcoming section you tapped, and when
- Why
- To notify you when that part of the app opens.
- Legal basis
- Consent, Art. 6(1)(a) — the tap itself
- Kept for
- Until 90 days after that feature launches.
Passport
your quiz answers, the dance shape they draw (musicality, technique, dedication, experience), your archetype, the history of earlier quizzes, your Passport visibility, your share link and whether you asked for the weekly recap
- Why
- To draw your Passport, show how you grow, and let you share it if you choose.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Until you reset your Passport or delete your account. Earlier quiz results are deleted after 5 years; your latest one is kept.
Stamps and check-ins
the events you tell us you attended, how each one was confirmed (you said so, you checked in at the venue, or dancers who were verified there confirmed they danced with you), and when
- Why
- To build your stamps, countries and experience.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Until you remove the stamp, reset your Passport or delete your account, and at most 10 years after the event.
Check-in location
your precise location, read once when you tap Check in at an event
- Why
- To confirm that you are at the event. The server compares it with the venue and discards it immediately; only the fact that you checked in is kept.
- Legal basis
- Consent, Art. 6(1)(a)
- Kept for
- Never stored.
Badges
which badges you earned and when
- Why
- To show your milestones.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- Until you delete your account.
Vouches
the skills you vouched for in dancers you are connected with on Dance Floor, and the vouches you received
- Why
- To show which parts of your Passport the community confirms.
- Legal basis
- Contract, Art. 6(1)(b)
- Kept for
- 3 years, or earlier if either of you removes it, blocks the other or deletes the account; the vouches you received are also deleted if you reset your Passport.
Dance Floor card
your Dance Floor photo, your confirmation that you are 18 or over, the community rules version you accepted, your status text, what you are open to, your weekly dance windows, whether you are dancing today, when you last opened the app (used to rest your card after two weeks without opening it, to place recently active dancers slightly higher in suggestions, and in community levels; never shown to other dancers), your community level, whether you show your shape on your card, and the Instagram handle or phone number you chose to add for sharing. If you answered that you are under 18, we keep that fact and when, with no year of birth
- Why
- To show your card to other Dance Floor dancers and suggest practice partners.
- Legal basis
- Consent, Art. 6(1)(a), for being visible; contract, Art. 6(1)(b), for the rest; legal obligation for the under-18 record
- Kept for
- Until you leave Dance Floor or delete your account. Status texts expire after 30 days. After you leave, a record that you left is kept for two days so a rejoin starts fresh. An under-18 answer is kept for one year.
Connections, messages and thanks
requests you send and receive (why you are connecting, the event, the optional note), connections, up to three messages per connection, your choice of how to keep in touch, the dances you confirmed, and thanks for a dance
- Why
- So that dancers who met can introduce themselves and swap contacts.
- Legal basis
- Consent, Art. 6(1)(a), for sending and receiving requests and messages
- Kept for
- Messages: 180 days after the conversation’s last activity. Ended or unanswered requests: 90 days. Thanks: 1 year. Dance confirmations: 2 years. All of it earlier if you leave Dance Floor: when you leave, the messages you sent are deleted. If a conversation ends because someone unmatches or blocks, the messages you received in its last 30 days are kept hidden for 30 days, only so you can still report them.
Card views
a daily count of how many times your card was viewed and the cities the viewers came from (a city appears only once three different dancers from it viewed your card) — never who viewed it. To count each viewer once, we keep for 30 days a coded key made with a secret key that only our servers hold. The coded key contains no name or account number, and nobody can read a viewer out of it; with the secret key we could only check whether one given dancer viewed one given card on one day, so it counts as pseudonymous data, and we never do that check
- Why
- To show you your own reach, privately.
- Legal basis
- Legitimate interest, Art. 6(1)(f)
- Kept for
- Counts 90 days; coded keys 30 days.
Blocks
the dancers you hid or blocked
- Why
- To keep them out of your view, and you out of theirs.
- Legal basis
- Legitimate interest (safety), Art. 6(1)(f)
- Kept for
- Until you unblock them or either account is deleted. The other person is never told.
Reports and moderation decisions
reports you send (reason, details, and a copy of the reported text or photo reference), and any decision we take about your account or content, with its reasons. If someone reports you, we keep a copy of the reported message, note, status or photo, and our decision
- Why
- To keep the community safe, to answer reports within 24 hours, and to meet our obligations under the EU Digital Services Act.
- Legal basis
- Legal obligation, Art. 6(1)(c), and legitimate interest, Art. 6(1)(f)
- Kept for
- Until one year after the decision, even if you leave Dance Floor or delete your account. A reported photo is kept for up to 30 days for the review. If we close your account, we delete its data seven months later, once the appeal period has passed.
Activity and safety log
a record of actions on your account, on Passport and Dance Floor, and of our moderation actions: what was done, by whom and when (for example that you joined or left Dance Floor, changed your Passport visibility or accepted the terms, or that we decided a report)
- Why
- To be accountable for what happens to accounts and content, and to investigate abuse and security problems.
- Legal basis
- Legitimate interest, Art. 6(1)(f), and accountability, Art. 5(2)
- Kept for
- 2 years. Under-18 answers, and moderation and report decisions: 1 year. If you delete your account, the entries are unlinked from you, apart from the record that the account was erased.
Age
Bachat’Up is for people aged 16 and over. At sign-up you confirm you are 16 or older. Dance Floor is for people aged 18 and over: joining it asks for your year of birth, which the app checks on your phone and never sends. We record only that you are 18 or over — or, for one year, that you answered you are under 18 — and no date of birth is stored. Making your Passport public also asks you to confirm you are 18 or over.
Your profile photo
If you set one, it is uploaded to our EU storage bucket and served from a public image URL, the same way any avatar in an app with shared surfaces is. Do not upload anything you would not want visible to another user of the app.
Your Dance Floor photo is different. It is stored in a private bucket in the EU and shown only to signed-in Dance Floor dancers who are allowed to see your card, through links that expire after ten minutes; other dancers’ phones keep it in memory only, never on disk. If you leave Dance Floor or replace the photo, nobody can see the old one any more and it is deleted within a day, unless it was reported or we removed it, in which case we keep it hidden for up to 30 days after our decision, for the review and any appeal. Your data export includes every Dance Floor photo we still hold.
Launch emails from this website
If you leave your email in the “Tell me at launch” form on bachatup.com, we keep that address, the page you were on, and, if you answer them, what you look forward to, whether you dance, teach or organize, and your city. We use it for one thing: to email you once when the app is on the App Store. The basis is your consent (Art. 6(1)(a)), given by sending the form. The list is stored in our EU database, is not linked to any app account, is never shared or used for advertising, and is deleted once the launch email has gone out. To be removed earlier, write to hello@bachatup.com.
3. What we do not do
- No tracking. The app declares no tracking in its Apple privacy manifest, uses no advertising identifier (no IDFA, no ATT prompt), and builds no cross-app or cross-site profile of you.
- No advertising, and no selling or renting of personal data.
- No third-party analytics SDK and no crash-reporting SDK in the app. The app contains an analytics switch and a crash-reporting switch, both wired to consent, precisely so that nothing can ever be switched on later without asking you first. Today both are inert.
- No background location, no geofencing, no movement tracking. iOS is asked for reduced accuracy. When you tap Check in at an event, iOS may ask you once to allow your precise location for that check-in; it is read only once, in the foreground, and it is never stored.
- No automated decision with legal or similarly significant effects on you. Some limits apply automatically: messages, notes, names and status texts are checked for links, contact details and abusive words before they are sent (one that fails is simply not sent); new requests pause briefly after spam-like patterns; a card that has not been opened for two weeks rests until you come back; community levels follow simple counts (connections, thanks, time on Dance Floor and recent activity). If you think one of these is wrong, write to hello@bachatup.com. Every report is decided by a person.
- No dating features, no public scores, no rankings. Nobody else ever sees a number about your dancing.
- No payment data, no video of people, no device fingerprinting, no biometric data.
- No cookies, no analytics and no third-party scripts on this website. The pages are plain HTML delivered through Cloudflare (see section 4). A public Passport shows its profile photo from our EU Supabase storage.
4. Where your data lives, and who else touches it
Everything the app stores about you is kept in the European Union: our database, authentication and file storage run on Supabase in the eu-central-1 region (Frankfurt, Germany), which acts as our main processor.
A few other service providers necessarily handle some of your data. They are all listed here; those that may process it outside the EU are marked.
- Push notifications. To deliver a reminder to your phone, the push token and the notification are handed to the push service of Expo (a US company) and then to Apple’s APNs (or Google’s FCM on Android), which may process them outside the EU. This happens only if you turn notifications on. Dance Floor notifications carry the other dancer’s name, never the content of a message.
- Map tiles. When you open the map, your device requests map imagery directly from OpenFreeMap (tiles.openfreemap.org), which necessarily sees your IP address and which area you are looking at. We send them nothing about you.
- App updates. Each time the app starts, it checks Expo’s update service (u.expo.dev) for a newer version of its code. Expo, a US company, sees your device’s IP address and a random install identifier; nothing else about you is sent. Outside the EU.
- Our website. bachatup.com, including these legal pages and any Passport you make public, is delivered through the network of Cloudflare, Inc. (US; EU–US Data Privacy Framework). Cloudflare sees the visitor’s IP address, the request and the page content in transit, and does not cache Passport pages; if a page fails to load, your browser may send Cloudflare a network-error report. Outside the EU.
- Email to us. Messages to hello@ and privacy@ — reports, appeals, safety correspondence and privacy requests — are forwarded by Cloudflare Email Routing to our mailbox, which is hosted by Google (US; EU–US Data Privacy Framework), and kept there as long as the case needs. Outside the EU.
- Email from us. Sign-in and account emails are sent through Brevo (France, EU), which receives your email address for that purpose only.
Where Expo, Apple, Google or Cloudflare process data outside the European Economic Area, in particular in the United States, the transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the standard contractual clauses approved by the European Commission. You can ask us for a copy of these safeguards at privacy@bachatup.com.
Tapping a ticket link opens the organizer’s or ticket seller’s own website, which has its own privacy policy and is outside our control.
5. What other people can see
Organizers of an event can see attendance counts, and the public profile fields (display name, photo, dance role, city) of attendees who have not hidden their RSVPs. They never see your email address.
Passport is private by default: only you see it. In Passport settings you can make it visible to Dance Floor dancers who can see your card, or public — including on bachatup.com — to anyone who has your share link or QR code (public needs you to confirm you are 18 or over). Whoever you allow sees your name and profile photo, your role and styles, your shape and archetype, which skills are Community verified, the festivals you have been to (name, city and month), countries and badges — never a number, never your nights out, never your progress level. You can change the link or make it private again at any time, and the change applies at once. If you join Dance Floor, your shape is also used to suggest practice partners; if you choose to show it on your card, other dancers see it and a rough training-fit label, even while your Passport is private.
Dance Floor shows you only if you join it. Dancers who can see your card see your Dance Floor photo, display name, dance role, styles, city and country, community level, marks and badges, your status, what you are open to, your dance windows, whether you are dancing today, a training-fit label if you show your shape, the events you are both going to, and, on events you marked Going, that you are going. For 48 hours after an event, dancers who were there can see that you were too. Hide my card (Ghost mode) hides you from discovery and Dancers Going while your connections keep working; Hide my RSVPs keeps you out of Dancers Going and the after-event lists altogether. Your messages are visible only to the person you sent them to, and your Instagram handle or phone number only to a connection you chose to share it with. In the app, dancers you blocked see nothing of you, and you see nothing of them. A public Passport is the exception: anyone with its link can open it on bachatup.com without signing in, so if you block someone who has your link, change it in Passport settings (or make your Passport private).
The Bachat’Up team. People on our team who handle reports can see the reported content and the account it came from, in order to decide on the report. They cannot browse messages or contact details: those reach staff only as a copy attached to a report. Opening the review queue or an account is logged, and so is every decision.
Settings → Privacy has the switches: Hide my RSVPs, and your Dance Floor visibility and messages (turning either off removes you from Dance Floor).
6. Your rights
Under the GDPR you have the rights below. The first two are built into the app and work immediately — you do not have to email anyone.
- Access and portability. Settings → Privacy → Export my data builds a ZIP of JSON files — profile, RSVPs, follows, views, preferences, consents, organizer data, corrections, Passport, stamps, badges, vouches, your Dance Floor card, connections, messages, thanks, blocks, reports you sent and account notices — and pushes you a time-limited private download link when it is ready, usually within minutes. One export per day.
- Erasure. Settings → Privacy → Delete account. Your account closes immediately: your profile becomes “Deleted User”, your RSVPs disappear from organizer lists, and you disappear from Passport and Dance Floor. Everything is permanently deleted after 30 days, including your Dance Floor photo, your messages and your connections — conversations with you are then removed for the other person too; we send a reminder 7 days before. The only exceptions are listed in section 2: reports and moderation decisions, kept until a year after the decision, and the record that the account was erased. Signing in before the 30 days are up cancels the deletion. You can also leave Dance Floor, or reset your Passport, at any time without deleting your account.
- Decisions about your account. If we remove something you posted or restrict your account, the app tells you why (Settings → Account notices) and how to appeal; if you cannot sign in, we also email you. You can appeal by writing to hello@bachatup.com within six months; someone who did not take the decision reviews it.
- Your reports. Settings → Account notices lists the reports you sent and how we handled them. If you disagree, write to hello@bachatup.com within six months; you can also use a certified out-of-court dispute settlement body, or go to court.
- Rectification. Profile fields are editable at any time; event facts can be fixed through the correction form on every event.
- Restriction and objection. Settings → Privacy has switches for Pause personalization and Pause analytics, alongside the RSVP visibility switch; Hide my card on Dance Floor and your Passport visibility restrict who sees you. Event view and ticket-tap counting for organizer statistics cannot be paused; it is the legitimate interest disclosed in the table above, and it is unlinked or deleted after 90 days.
- Withdraw consent. Every consent toggle is reversible at any time, with no penalty and no loss of anything except the feature it powers.
- Complain. You can lodge a complaint with your local data protection supervisory authority.
If you would rather write to us than use the app, email privacy@bachatup.com and we will answer within one month.
7. How long we keep things
The retention column in section 2 is not aspirational: it is enforced by scheduled jobs that run every day against the database. They delete event views older than 90 days, strip the account link from ticket taps older than 90 days, delete RSVPs 2 years after the event, remove resolved corrections after a year, delete Dance Floor messages 180 days after a conversation’s last activity and ended or unanswered requests after 90 days, delete thanks after a year and dance confirmations after two years, delete card-view counts after 90 days, delete earlier quiz results after five years and vouches after three, delete stamps ten years after the event, delete reports and moderation decisions a year after they are decided, delete event reports and closed organizer applications after a year, delete the activity log after two years (its under-18 and moderation entries after one), delete the hidden 30-day copies of ended conversations after 30 days, delete a closed account seven months after it was closed, and hard-delete accounts that have been in the 30-day deletion grace period.
8. Security
Every table in the database is protected by row-level security, so one account cannot read another’s private rows. Your session is stored encrypted on the device. Private files, such as a data export, are only reachable through short-lived signed links. Administrative actions are logged.
Dance Floor photos are kept in a private bucket and are reachable only through links that expire; every read checks that you are allowed to see that card. Nothing on Dance Floor or Passport can be written except through checked server functions that enforce blocks, rate limits and the rules above.
9. Changes to this policy
This policy is versioned (the version is shown at the top of this page and inside the app, in Settings → Privacy). If we change it materially, the app asks you to read the change and confirm your choices again before you carry on using it.
10. Contact
Privacy questions and rights requests: privacy@bachatup.com.
Safety: hello@bachatup.com. Contact point for authorities and users under the EU Digital Services Act: hello@bachatup.com (English or Spanish).
See also the terms of use, including the community rules.