Effective date: October 30, 2026
Version: v1.5
Controller/handler: Jun Zhang, the individual developer operating Dancora
Privacy contact: zhouqingyi.01@gmail.com
This Privacy Policy explains how we process personal information in connection with Dancora. It does not replace the privacy notices of Apple, Google, Photos, Camera, an app store, or a destination you choose for sharing.
1. Information we process
| Category | Examples | Current purpose and location |
|---|---|---|
| Account and sign-in information | email, optional name, password hash, persistent Apple/Google identifier and verified contact email provided by them | account creation and management, authentication, and session protection; account-service database and device secure storage |
| Session and security information | server-side hash of a session token, expiry, and technical data necessary for login/rate limits | keep you signed in, detect abuse, and protect accounts |
| Free and gifted access | hash of a separate random installation credential, first-use and expiry times, and account ID, expiry and support note for an account grant | verify free access, carry an existing trial into a signed-in account, and administer gifted access; account-service database and device secure storage; separate from optional analytics |
| Practice content and state | media you select, recorded takes, selected ranges, speed, loops, timing, thumbnails, and practice names | stored locally on the device by default for playback, practice, recording, and history |
| Permission-related information | whether you grant Photos/files, Camera, or save-to-Photos permission | invoke the relevant system capability only when you ask to import, capture, or save |
| Support communications and in-app feedback | support email you voluntarily send; or the in-app category and text you enter, app/build version, major OS version, device class, language, access type, and a server-side hash of a random installation identifier | respond, troubleshoot, and maintain the Service; in-app feedback does not attach media, filenames, or account email, and feedback text is retained for 90 days |
| Optional anonymous use analytics | server-side hash of a random installation identifier, app/build version, major OS version, device class, language, test or release channel, feature events, active playback duration, recording attempt identifiers and outcomes, and limited enumerated outcomes | only after you explicitly allow it, to understand whether importing, practice, beat detection, and guidance work; raw events are retained for 90 days and are not linked to an account identity |
Anonymous use analytics does not upload practice video or audio, recorded takes, filenames, media addresses, practice names, email, account identifiers, exact practice ranges, or advertising identifiers. The current build does not track you across apps or websites for advertising. Before adding advertising, cloud sync, remote media processing, or a new third-party SDK or processor, the provider must update this Policy, the data inventory, and any consent flow required by law.
Optional diagnostics use the same Help Improve Dancora choice. With your permission, the app automatically sends model download/load/inference failures, playback failure stage and system error domain/code, output dimensions/types/strides and buffer sizes, and Apple-provided crash call stacks, binary identifiers, device model and OS/build versions to our first-party service. Reports contain no media, file paths, tensor contents, account details or raw exception messages. Offline reports remain on-device for up to 7 days (at most 32 reports), then are retried when the app is running and connected. Server reports are retained for up to 90 days. Disabling the option clears pending reports and requests deletion for that installation. An interrupted operation alone is not classified as a crash. Existing users are asked to confirm the expanded choice before diagnostics are enabled.
On-device person tracking and body shaping
When you use solo tracking, smart camera, follow mosaic, or body shaping, Dancora processes video frames on your device. Depending on the tool, this includes person bounding boxes, body/face keypoints, confidence scores, within-video track identifiers, movement/crop paths, protection masks, and temporary appearance or face-feature vectors used to keep the same person associated between frames. These features are used for the selected video edit, not to identify your real-world identity or authenticate you. This processing does not send the frames or person-analysis data to Dancora's servers or an AI provider. Model files may be downloaded to the device; that download does not upload your video.
The current body-shaping pipeline keeps face-feature vectors in the running analysis session; its saved analysis contains geometry, track identifiers, and protection data rather than those vectors. Analysis results, editing settings, thumbnails, masks, and created videos can remain in the app's local database, document storage, or caches so you can resume editing and avoid repeating analysis. There is no fixed automatic expiry for saved projects and analysis. Removing an item from History currently hides it and allows Undo; it does not immediately erase its source media or analysis caches. Signing out or deleting an account does not erase these local files. To remove the app's local projects and analysis, use the operating system's option to delete the app and its data, rather than offloading it. Delete separately exported Photos/files and any system or cloud backup copies through those destinations; their retention depends on the relevant service.
2. How we use information and legal bases
We process information to provide, maintain, secure, and improve the Service you request, including signing you in, retaining local practice, responding to support, and preventing abuse. We rely on your system permission when a permission is needed. We will obtain consent where applicable law requires it for optional remote processing or non-essential processing. We may also process what is necessary to comply with law, resolve disputes, enforce these Terms, or protect the safety of users and the Service.
3. Sharing and disclosure
We do not sell personal information. We share only as necessary with:
- Apple or Google sign-in services you choose, to authenticate you;
- Alibaba Cloud infrastructure in Mainland China, which hosts Dancora's account service, optional anonymous-analytics service, and in-app feedback service;
- Cloudflare Pages, which delivers the public website and this Privacy Policy;
- system sharing, Photos saving, or external services you intentionally select;
- authorities or others where law, legal process, rights protection, safety, fraud prevention, or security reasonably requires it; and
- others with your separate consent.
If a merger, financing, reorganisation, or asset transaction occurs, we will provide notice where required and use reasonable safeguards. Recipients must be required to provide protection appropriate to this Policy and applicable law.
4. International transfers
Dancora's first-party account service, optional anonymous-analytics service, and in-app feedback service are currently hosted on Alibaba Cloud infrastructure in Mainland China. We do not proactively transfer account records, anonymous events, or feedback from those services outside Mainland China for product analytics or feedback handling. Only when you choose Sign in with Apple or Sign in with Google will the authentication request, the provider's identity identifier, and provider-verified contact information be processed by that provider in accordance with its public privacy notice and service locations; third-party sign-in is optional. When you visit the public website or this Policy, Cloudflare may process the network request needed to deliver the page through its global network. Where applicable law requires separate consent, standard contractual terms, or another transfer safeguard, we will put it in place before the transfer.
5. Retention and deletion
- Local practice media, recordings, projects, and analysis remain on the device as described in the on-device analysis section above. History removal allows Undo and does not erase all related data. Deleting the app and its data does not delete separately exported files or backup copies.
- Account information is retained while an account exists. An active session is retained for up to thirty days and becomes invalid on logout, revocation, expiry, or account deletion. Service operations and security logs, when generated, are normally retained for no more than thirty days. Account-database backups are deleted or irreversibly anonymised no later than thirty days after replacement or account deletion, except for the minimum information that law, security-incident handling, or dispute resolution requires us to keep. Support email you send is normally retained for up to twelve months after the issue is resolved; in-app feedback text is retained for no more than 90 days.
- When you delete an account in the app, we delete or anonymise account personal information that is no longer needed, except the minimum information required by law, dispute handling, fraud prevention, or security. We do not remotely erase files that remain on your device or at a third-party destination.
- Raw anonymous-use events are retained for no more than 90 days; aggregate statistics are no longer used to identify one installation. You can turn off Help Improve Dancora in app settings. Turning it off clears pending events and requests deletion of server events for that installation.
- In-app feedback does not depend on optional analytics consent. The form explains what is sent before submission. Do not include names, contact details, or other unnecessary personal information. You can ask us to delete feedback still within its retention period by emailing the privacy contact and providing the reference displayed by the app.
- The installation credential and its used-trial dates are retained to recognise an already-started experience and do not upload media. Account-specific trial and grant records are removed on account deletion. An installation's used-trial dates can remain without an account link; access-administration audit records are retained for up to thirty days and have account ownership removed on deletion. Free-access verification is part of providing the feature and is independent of optional analytics. You may contact us about these records using the privacy contact above.
6. Your choices and rights
Where applicable law provides them, you can request access, correction, deletion, copying, export, restriction, withdrawal of consent, or objection to certain processing. You can change permissions in device settings; withdrawal does not affect processing that was lawful before withdrawal. Send requests to zhouqingyi.01@gmail.com. We may verify identity to protect the account and respond within the time required by law. You may also complain to the competent data-protection authority.
7. Security
We use risk-appropriate technical and organisational measures such as password hashing, protected session storage, access controls, and transport protection. No system is perfectly secure. Use a device lock, protect credentials, and make careful choices before saving media to Photos or sharing it with a third party.
8. Children
Dancora is not directed to children under fourteen. Children under fourteen may not create an account or enable anonymous-use analytics on their own. If we learn that we processed a child's personal information without required guardian consent, we will take the action required by law, including deletion where appropriate. Before intentionally offering the Service to children under fourteen in Mainland China, we will publish a dedicated child-information rule and obtain guardian consent.
9. Changes and contact
We will update this page and its effective date when this Policy changes, and give reasonable notice of material changes. Contact zhouqingyi.01@gmail.com about privacy, data rights, or account deletion.