Legal

Privacy Policy

Applies to: Aplomb Technique and Aplomb Fit
Last updated: 22 June 2026  ·  Effective: 22 June 2026
Data Controller: Amie Dew, Aplomb (United Kingdom)

1. Who we are

Aplomb is operated by Amie Dew, based in the United Kingdom. Amie holds a degree in Sports Therapy and a Master's in Social Work, and has designed both apps with a professional commitment to safeguarding, data minimisation, and the wellbeing of dancers of all ages.

We operate two apps:

• Aplomb Technique (aplombtechnique.app) — AI-powered ballet technique analysis using phone video
• Aplomb Fit (aplombfit.app) — AI-powered pointe shoe fitting analysis using foot photographs

For the purposes of UK GDPR and the Data Protection Act 2018, Amie Dew is the data controller.

Contact: hello@aplombtechnique.app

2. What data we collect

2.1 Account information

• Name and email address
• Role (dancer, parent, teacher, studio)
• Date of birth (used to apply appropriate safeguards for under-18 users)
• Password (stored as a one-way hash — we cannot read it)

2.2 Movement and body data (Aplomb Technique)

• Video recordings you submit for analysis (up to 500 MB per video)
• Extracted pose landmarks (body joint position data derived from your video)
• Technique analysis results: turnout angles, pelvic alignment, balance metrics, pirouette axis data, flexibility ranges
• Skill level and focus area you select before each analysis

2.3 Foot and footwear data (Aplomb Fit)

• Photographs of your feet you submit for analysis
• Foot shape measurements derived from those photographs
• Pointe shoe fitting analysis results and recommendations

2.4 Usage data

• App interactions (screens visited, features used, time of use)
• Device type and operating system version
• Error logs (used to fix bugs — contain no personal movement data)

3. How we use your data

Purpose	Data used
Providing the analysis service (technique or fitting)	Video / photos, pose landmarks, foot measurements
Displaying your results, history, and progress	Analysis results, session records
Safeguarding — alerting teachers to high-severity injury risk flags	Safety flags from analysis; teacher relationship data
Sending session-related notifications	Email address
Fixing bugs and improving app performance	Error logs, device data (no body data)
Legal compliance and dispute resolution	Account data, usage records

We do not use your data for advertising, sell it to third parties, or use it to train AI models without your separate explicit consent.

4. Legal basis for processing (UK GDPR)

Processing activity	Legal basis
Providing the core analysis service	Article 6(1)(b) — performance of a contract
Processing movement / body / foot data (special category)	Article 9(2)(a) — explicit consent
Safety alerts to teachers	Article 6(1)(f) — legitimate interests (safeguarding); Article 9(2)(b) where applicable
App improvement and error logging	Article 6(1)(f) — legitimate interests (product quality)
Legal compliance	Article 6(1)(c) — legal obligation

Where we rely on explicit consent (particularly for body data), you may withdraw that consent at any time by deleting your account or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Children and young people

Both apps are designed for use by dancers of all ages, including children from around age 9. We take our responsibilities to young users extremely seriously, informed by our professional background in social work and safeguarding.

5.1 Age gates

• Under 13: Parental or guardian consent is required before an account can be created. The account must be set up by a parent or guardian.
• 13–17: Users may create their own accounts, but we strongly encourage parental awareness. Studio teachers are notified of any high-severity safety flags raised during analysis.
• 18 and over: Standard adult data rights apply.

5.2 Additional protections for under-18 users

• No targeted marketing or behavioural profiling
• Data minimisation — we collect only what is necessary for the analysis service
• Safety flags raised by the AI are always shared with the designated teacher account (where one exists in the same studio)
• Videos and foot photographs are stored securely and never used for purposes beyond the stated analysis

5.3 Parental access and deletion

Parents and guardians of under-13 users may request access to, correction of, or deletion of their child's data at any time by contacting us at hello@aplombtechnique.app.

6. Third-party processors

We share data only with the following processors, who are bound by appropriate data processing agreements:

Processor	Purpose	Location
Supabase	Secure database and file storage (videos, photos, analysis results)	EU (Frankfurt)
Render.com	Backend API server hosting (AI analysis processing)	EU / US (Oregon)
Expo / EAS	App delivery and over-the-air updates	US
Apple App Store	iOS app distribution (Apple's own privacy policy applies)	US
Google Play	Android app distribution (Google's own privacy policy applies)	US

We do not use any advertising networks, analytics platforms (e.g. Google Analytics, Facebook Pixel), or data brokers.

7. How long we keep your data

Data type	Retention period
Account information	Until you delete your account, then 30 days before permanent deletion
Video recordings (Technique app)	90 days after upload, then automatically deleted. You may delete sooner via the app.
Foot photographs (Fit app)	90 days after upload, then automatically deleted. You may delete sooner via the app.
Analysis results and pose landmark data	Until you delete your account or request deletion
Error logs	30 days
Safety alert records	12 months (safeguarding requirements)

8. Your rights

Under UK GDPR you have the following rights. To exercise any of them, email hello@aplombtechnique.app. We will respond within 30 days.

• Right of access — request a copy of all data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — ask us to pause processing while a concern is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for body/health data processing at any time
• Rights related to automated decision-making — our AI analysis informs you; it does not make decisions with legal or significant effects without human oversight

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

9. Security

We take technical and organisational measures to protect your data, including:

• All data transmitted over HTTPS/TLS
• Videos and photographs stored in private, access-controlled Supabase Storage buckets
• Passwords hashed using bcrypt (we cannot recover your password)
• JWT authentication with short-lived tokens
• Access to production systems restricted to the data controller only
• Regular security reviews of API endpoints and storage access rules

In the event of a data breach affecting your personal data, we will notify you and the ICO within 72 hours as required by UK GDPR.

10. International transfers

Some of our processors (Render.com for US servers, Expo/EAS, Apple, Google) are based in the United States. Where data is transferred outside the UK, we rely on the UK's International Data Transfer Agreement (IDTA) framework or the UK adequacy decisions to ensure an equivalent level of protection.

11. Changes to this policy

We may update this policy when we add new features or in response to legal changes. We will notify you of material changes by email and by a notice within the app at least 14 days before the change takes effect. The date at the top of this page always shows when it was last updated.

12. Contact us

For any privacy questions, data requests, or concerns:

Amie Dew — Data Controller, Aplomb
Email: hello@aplombtechnique.app
United Kingdom