Privacy Policy

Effective date: [JOEY: effective date]

This policy explains what information Compcue collects, why we collect it, who can see it, and the choices you have. Most dancers who use Compcue are teenagers, so we've tried to keep it plain.

On this page

1. Who we are
2. Who Compcue is for
3. What we collect and why
4. Location
5. What stays on your phone
6. Who can see what
7. Companies that help us run Compcue
8. How long we keep things, and deleting your account
9. Your choices
10. Keeping your information safe
11. Changes to this policy
12. Contact us

Who we are

Compcue is run by Compcue, Inc, [JOEY: mailing address]. In this policy, "we" and "us" mean Compcue.

This policy covers the Compcue app and Compcue's web pages, like this one.

If you use a test version of the app (for example, through TestFlight), it also sends crash reports and any feedback you send from inside the app to Sentry. See Companies that help us run Compcue.

Who Compcue is for

Compcue is for people 13 and older. When you sign up, the first thing the app asks for is your date of birth. If it shows you're under 13, sign-up stops there. The app doesn't send what you typed to us, and our server would refuse it too.

We go by the date of birth you give us. We don't check it against an ID, so it isn't proof of anyone's age.

Some parts of Compcue are only for adults, going by the date of birth they gave: for example, being a linked parent or guardian, or owning or working at a studio.

[JOEY: what we do if we learn an account belongs to someone under 13.]

What we collect and why

Most of what we have comes from you, from people at your studios, or from your phone when you use a feature. This is what we keep on our servers.

Location

Compcue uses your location for two things: checking in at a competition, and finding studios near you. The app uses it only while you're using the app, never in the background.

Check-in

When you check in at a competition, your phone checks whether you're near the venue, if Compcue knows where the venue is. Compcue records whether your phone confirmed it, the time you checked in, the time of a later confirmation if your phone confirms afterwards, and who checked you in. Your precise location stays on your phone. If location is off or your phone can't get a fix, you're still checked in, just unconfirmed — and a check-in someone makes for you starts unconfirmed until your own phone confirms it.

Like most changes, each check-in is also saved in our change history with the IP address it came from. Your linked adults can see when you checked in. On a competition day, other people, like the people on your routines, their linked adults and your studio's staff, can see that you've checked in. Only you can see whether your phone confirmed it.

Studio search

When the studio search opens (during sign-up, on Today before you've joined a studio, or when you look for a studio), the app reads your location and rounds it to about 1 km. It sends that approximate area with the nearby list it shows first and with each search you make there, so studios near you can rank higher and each result can show how far away it is. Compcue uses it only to answer those searches and doesn't save it. Like every request, it passes through our hosting provider.

If you turn location off

Check-in still works; your check-in is just unconfirmed. Studio search still works too. It lists studios without distances: the most active first or, when you type a name, the best matches first. A search that already read your area can keep using it until you close the app.

What stays on your phone

• The kindness prompt. It runs on your phone and doesn't send your words anywhere. It may suggest rewording a message, and sometimes it won't send one until you change the wording. It can miss things. If you send a message after it suggests rewording, our server stores a note with the message (see the table above).
• Photo locations. Before a photo is sent, the app re-encodes it on your phone, which removes location data.
• Rehearsal videos. Takes you keep are saved to your Photos. Other takes stay in the app on your phone until you keep or discard them. Compcue never uploads them.
• Music you import for Rehearsal. The file stays on your phone. We store a fingerprint of it and its label, which starts as the file's name unless you change it.
• Your calendar. "Add to calendar" opens your phone's own add-event screen. Compcue doesn't read your calendar.
• Your contacts. When you invite someone, your phone's contact picker gives the app only the contact you tap. We get only what you then send in the invite.
• Text message invites. They're sent from your own phone, not by us.
• Maps. Opening a venue in your maps app hands that app the venue, not your location.
• Your data export. The app saves the file on your phone and opens the share sheet, so you choose where it goes.

Who can see what

Compcue is built around studios. Most of what you do in Compcue is seen by people at your studios and on your routines.

• Your profile card is your display name, profile photo, pronouns and the roles you picked (like dancer or parent). Other signed-in Compcue users can see it, for example next to your messages, on rosters and in search.
• Search. People can find you by your display name, never your full name, and only if they share a studio with you or are a linked adult of someone who does. A search result shows your profile card and the name of one of your studios.
• Your full name, phone number and email are shown only to you and, if you're a dancer, to the adults you've confirmed a link with. One exception: when you invite someone to link with you, to join a studio, or to join a studio's staff, the invite shows your first name to anyone who has the invite link, and in the invite email. An invite to a routine shows your display name instead. And if someone tags you on a routine before you've joined, the routine's members see the name they typed for you until you join. When a studio invites someone to its staff, the people who run the studio see part of the phone number or email it went to, like the last four digits.
• Your date of birth is shown only to you.
• Studio member lists show each member's profile card, when they joined, and whether they're the studio's Owner or Staff.
• Routines and schedules. People at your studio can see its routines and who's in them. Anyone who can see a routine's schedule can see the times you confirmed, with your profile card, but not your note on where you saw it.
• Chats. A routine chat is for everyone on the routine, including its coaches and choreographers, and their linked adults can read it and react. A competition chat is for everyone on its routines and the studio's staff, and their linked adults can read it and react. A parent board is for linked adults and staff, not dancers. A direct message is between its two people only.
• Results are seen by everyone on the routine, including its coaches and choreographers, their linked adults and the studio's staff. A studio's wins wall shows a routine's title, award and placement, not who was in it or its score.
• Linked parents and guardians. If you're a dancer and you confirm a link with an adult, they can see your full name, phone and email; your schedule and routines, including the private name you give a routine; your results, packing lists and check-ins; and your routine and competition chats. They can't see your direct messages, the private notes you keep on a routine, or whether your phone confirmed a check-in.
• Direct messages between an adult and a teen are possible only when they have a confirmed link, or the adult is staff at a studio where the teen is a member. This goes by the dates of birth people give, so it can't stop an adult who lies about their age.
• Reports and blocks. We don't tell people who reported them or who blocked them.
• Compcue's team can see the information we hold when we need to, for example to review a report, fix a problem, or when the law requires it.

Companies that help us run Compcue

These companies handle information for us so Compcue can work. We don't show ads, we don't track you across other companies' apps or websites, and we don't sell your information. We don't send your messages or other content to any AI or moderation service.

How long we keep things, and deleting your account

We keep your information while your account exists, unless this policy says otherwise. Some things go sooner. A studio search area isn't saved at all. Sign-in limit counts are usually cleared within about two weeks. Photos and music that are removed are deleted from storage about 9 to 10 hours later.

Some things last longer than you might expect:

• You can't edit or delete a message after you send it. If our team removes a message, Compcue stops showing it to anyone who opens the chat, but its text stays on our servers, and a notification already delivered isn't called back.
• When you invite someone, we keep the phone number or email you sent it to, even after the invite expires. It's removed only if that person deletes a Compcue account that uses it.
• Deleting a rehearsal leaves a small record that it was deleted, until you delete your account.

Deleting your account

You can delete your account in the app: You → Account & data → Delete account. It can't be undone, and it signs you out everywhere. Some of the clean-up finishes in the background after you delete.

Deleting your account removes your full name, display name, pronouns, email, phone number and profile photo. Where your account's name showed, people see "Former member" or no name. It also removes your password, passkeys and sign-ins; your notifications and notification settings; your check-ins and packing lists; photos on your own costume and bag items, and featured photos you added; studio music you uploaded to routines you created; your practice choices; and your Rehearsal history. Your memberships in studios and routines end, and so do your links with adults. A studio you owned goes back to being unclaimed.

What stays after you delete your account:

• Messages you sent stay in their chats, from "Former member." Routines you created stay for their dancers, with no creator name. Results you recorded, times you confirmed and your reactions stay, credited to "Former member."
• Studio music you uploaded to someone else's routine, and photos you took of a shared costume piece, stay for the cast without your name. Names typed into a routine's credits stay.
• Your places on routines stay as closed records, including the private names and notes you kept on them.
• A closed record of your account stays. It no longer has your name, email, phone number, pronouns or photo, but it keeps your date of birth, the roles you picked, your time zone and language, and when you joined. [JOEY: keep the date of birth on a deleted account's record, or clear it?]
• Your sign-in history stays. It has no IP address or device.
• Our change history stays, including what changed, like the text of messages you sent. The IP addresses on changes you made are cleared 90 days after you delete your account.
• Safety records stay. A report you made stays without your note. A report about you stays with the details about you cleared, except what we need to identify a reported photo. Blocks stay.
• Invites you sent keep the phone number or email they went to, without your name.
• Copies that already left Compcue can't be called back: emails, notifications already on someone's phone, an export you shared, and what the companies above received.
• [JOEY: how long backups are kept.]

Subscriptions: deleting your account doesn't cancel an App Store subscription. Cancel it in your Apple account first, or it can keep renewing. When you delete your account, we ask RevenueCat to delete its record of you, but a subscription that keeps renewing can make RevenueCat start a new one.

Suspended accounts

If we suspend an account, it isn't deleted. A suspended account can't sign in, so it can't be exported or deleted in the app. Email us at the address below this policy. We'll write to the account's email address to make sure it's you, then export or delete it for you.

Your choices

• Get a copy of your information. Go to You → Account & data → Export my data. The app makes a file and opens your phone's share sheet, so you choose where it goes. The file lists your photos and music by their details, not the files themselves, and it leaves out a few records, like your sign-in history and notification settings.
• Change your profile. You can change your name, display name, pronouns and photo. Changing your email or phone number needs a code sent to the new one, plus your password or passkey. Your date of birth can't be changed.
• Choose your notifications. Pick which kinds you get, and set quiet hours for school and sleep. Alerts about changes to your email or phone number can't be turned off.
• Location, camera, photos and microphone. You can turn these on or off any time in your phone's settings.
• Report and block. You can report a person, a routine's music or a photo, and you can block someone. Blocking ends direct messages between you (old ones stay, read-only) and hides each other's messages in routine chats, competition chats and parent boards. It doesn't hide announcements, rosters, schedules, check-ins, results or photos. You can't block a dancer or adult you're linked with, or staff at a studio you or your linked dancer belong to, but you can report them, and either side can end a link. Studio staff can't block people connected to their studio.
• Leave or unlink. You can leave a studio. Either side can end a link between a dancer and an adult.
• Delete your account any time. See How long we keep things, and deleting your account.
• [JOEY: which state privacy rights to name, for example California's, and how to ask for them.]

Keeping your information safe

• The app talks to our servers over encrypted connections (HTTPS).
• We store passwords only as hashes, so we can't read them. With a passkey, your phone's password manager keeps the private part; we store only the public part.
• The app keeps your sign-in in your phone's secure storage.
• The old and new values of email and phone changes are encrypted in our database. [JOEY: confirm whether Fly.io and Cloudflare encrypt our stored data before saying more.]
• We limit repeated attempts to sign in, sign up, send codes or reset a password.
• Photos and music are kept in private storage. The app opens them with links that expire, after about 2 minutes to 8 hours. Anyone who has a link can use it until it expires.
• No system is perfectly secure. If you think someone got into your account, change your password and email us.

Changes to this policy

When we change this policy, we'll post the new version here and update the effective date at the top. [JOEY: how we'll tell people about important changes, for example in the app or by email.]

Contact us

Questions about this policy or your information? Email the address below this policy, or write to us at the address under Who we are.