Legal

Privacy Policy

Applies to: Aplomb Technique and Aplomb Fit
Last updated: 11 October 2026  ·  Effective: 11 October 2026
Data Controller: Amie Dew, Aplomb (United Kingdom)

1. Who we are

Aplomb is operated by Amie Dew, based in the United Kingdom. Amie holds a degree in Sports Therapy and an MA in Social Work, and has designed both apps with a professional commitment to safeguarding, data minimisation, and the wellbeing of dancers of all ages.

We operate two apps:

• Aplomb Technique (aplombtechnique.app) — AI-powered ballet technique analysis using phone video
• Aplomb Fit (aplombfit.app) — AI-powered pointe shoe fitting analysis using foot photographs

For the purposes of UK GDPR and the Data Protection Act 2018, Amie Dew is the data controller.

Contact: info@getaplomb.app

2. What data we collect

2.1 Account information

• Name and email address
• Role (dancer, parent, teacher, studio)
• Date of birth (used to apply appropriate safeguards for under-18 users)
• Password (stored as a one-way hash — we cannot read it)
• Parent or guardian email address (for dancers under 18, so a parent or guardian can be involved in consent)
• Studio membership — which studio you belong to, if you join one
• If a studio invites you to join, the teacher provides your name, email address, date of birth and skill level so the invitation can be set up

2.2 Movement and body data (Aplomb Technique)

• Video recordings you submit for analysis (up to 500 MB per video)
• Extracted pose landmarks (body joint position data derived from your video)
• Technique analysis results: turnout angles, pelvic alignment, balance metrics, pirouette axis data, flexibility ranges
• Skill level and focus area you select before each analysis
• Any notes you choose to add to a video

2.3 Foot and footwear data (Aplomb Fit)

• Photographs of your feet you submit for analysis
• Foot shape measurements derived from those photographs
• Ankle flexibility measurement and any notes you choose to add
• Pointe shoe fitting analysis results and recommendations
• Your fitting report, created as a PDF when you ask for one

2.4 Technical data

• Device type and operating system version
• Error logs (used to fix bugs — contain no personal movement data)

We do not currently track which screens you visit or how you use the apps. If we introduce usage analytics in future, it will be optional, switched off unless you choose to turn it on, and described in this policy before it starts.

2.5 Waitlist and pilot sign-ups (getaplomb.app)

• Your name and email address
• Your role (dancer or student, parent or guardian, teacher or studio) and which app interests you

We use these details only to keep you updated about Aplomb and the pilot. You can ask us to remove you at any time by emailing info@getaplomb.app.

3. How we use your data

Purpose	Data used
Providing the analysis service (technique or fitting)	Video / photos, pose landmarks, foot measurements
Displaying your results, history, and progress	Analysis results, session records
Safeguarding — alerting teachers to high-severity injury risk flags	Safety flags from analysis; teacher relationship data
Sending session-related notifications	Email address
Updating waitlist and pilot sign-ups about Aplomb	Name, email address, role, app of interest
Letting teachers in your studio support your training	Profile details, analysis results, session history, videos, safety alerts
Fixing bugs and improving app performance	Error logs, device data (no body data)
Legal compliance and dispute resolution	Account data, usage records

We do not use your data for advertising, sell it to third parties, or use it to train AI models without your separate explicit consent.

3.1 Who can see your information

• You — and, for dancers under 13, the parent or guardian who manages the account.
• Teachers and studio administrators in your studio — if you join a studio, its teachers can see your profile details, your scores and session history, any safety alerts, and the videos you upload for analysis. Teachers can add a note when they review a safety alert. You can leave a studio at any time, and a studio can remove you; neither deletes your account.
• People you choose to share with — if you download or share a report, it is shared by you, using your device's own sharing options.

Apart from the service providers listed in section 6, who handle data only on our behalf, no one else can see your videos, photos or results. Your content is never shown publicly.

4. Legal basis for processing (UK GDPR)

Processing activity	Legal basis
Providing the core analysis service	Article 6(1)(b) — performance of a contract
Processing movement / body / foot data (special category)	Article 9(2)(a) — explicit consent
Safety alerts to teachers	Article 6(1)(f) — legitimate interests (safeguarding); Article 9(2)(b) where applicable
App improvement and error logging	Article 6(1)(f) — legitimate interests (product quality)
Legal compliance	Article 6(1)(c) — legal obligation

Where we rely on explicit consent (particularly for body data), you may withdraw that consent at any time by deleting your account or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Children and young people

Both apps are designed for use by dancers of all ages, including children from around age 9. We take our responsibilities to young users extremely seriously, informed by our professional background in safeguarding and human performance.

5.1 Age gates

• Under 13: Parental or guardian consent is required before an account can be created. The account must be set up by a parent or guardian.
• 13–17: Users may create their own accounts, but we strongly encourage parental awareness. Studio teachers are notified of any high-severity safety flags raised during analysis.
• 18 and over: Standard adult data rights apply.

5.2 Additional protections for under-18 users

• No targeted marketing or behavioural profiling
• Data minimisation — we collect only what is necessary for the analysis service
• Safety flags raised by the AI are always shared with the designated teacher account (where one exists in the same studio)
• Videos and foot photographs are stored securely and never used for purposes beyond the stated analysis

5.3 Parental access and deletion

Parents and guardians of under-13 users may request access to, correction of, or deletion of their child's data at any time by contacting us at info@getaplomb.app.

6. Third-party processors

We share data only with the following processors, who are bound by appropriate data processing agreements:

Processor	Purpose	Location
Supabase	Secure database and file storage (videos, photos, analysis results)	UK (London)
Render.com	Backend API server hosting — your videos and foot photos are processed here while the AI analysis runs, then the results are stored in Supabase	US (Oregon)
Expo / EAS	App delivery and over-the-air updates	US
Apple App Store	iOS app distribution (Apple's own privacy policy applies)	US
Google Play	Android app distribution (Google's own privacy policy applies)	US
Cloudflare	Hosting, security and delivery of our website, getaplomb.app, including these privacy and terms pages	Global (US company)
Formspree	Receiving waitlist and pilot sign-up forms from our website	US
Google Fonts	Loading the typeface used on our website (your browser connects to Google, which receives your IP address)	US

We do not use any advertising networks, analytics platforms (e.g. Google Analytics, Facebook Pixel), or data brokers.

7. How long we keep your data

Data type	Retention period
Account information	Until you delete your account, then 30 days before permanent deletion
Video recordings (Technique app)	90 days after upload, then automatically deleted. You may delete sooner via the app.
Foot photographs (Fit app)	90 days after upload, then automatically deleted. You may delete sooner via the app.
Analysis results and pose landmark data	Until you delete your account or request deletion
Waitlist and pilot sign-ups	Until the pilot launches or you ask to be removed, whichever is sooner
Error logs	30 days
Safety alert records	12 months (safeguarding requirements)

8. Your rights

Under UK GDPR you have the following rights. To exercise any of them, email info@getaplomb.app. We will respond within 30 days.

• Right of access — request a copy of all data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — ask us to pause processing while a concern is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for body/health data processing at any time
• Rights related to automated decision-making — our AI analysis informs you; it does not make decisions with legal or significant effects without human oversight

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

9. Security

We take technical and organisational measures to protect your data, including:

• All data transmitted over HTTPS/TLS
• Videos and photographs stored in private, access-controlled Supabase Storage buckets
• Passwords hashed using bcrypt (we cannot recover your password)
• JWT authentication with short-lived tokens
• Access to production systems restricted to the data controller only
• Regular security reviews of API endpoints and storage access rules

In the event of a data breach affecting your personal data, we will notify you and the ICO within 72 hours as required by UK GDPR.

10. International transfers

Some of our processors (Render.com, whose analysis servers are in the US, Expo/EAS, Apple, Google, Cloudflare, Formspree) are based in the United States. Where data is transferred outside the UK, we rely on the UK's International Data Transfer Agreement (IDTA) framework or the UK adequacy decisions to ensure an equivalent level of protection.

11. Changes to this policy

We may update this policy when we add new features or in response to legal changes. We will notify you of material changes by email and by a notice within the app at least 14 days before the change takes effect. The date at the top of this page always shows when it was last updated.

12. Contact us

For any privacy questions, data requests, or concerns:

Amie Dew — Data Controller, Aplomb
Email: info@getaplomb.app
United Kingdom