Privacy Policy

[LEGAL ENTITY NAME], [BUSINESS ADDRESS], is the controller of the personal information described here. Contact us about anything on this page at [PRIVACY CONTACT EMAIL].

Account. Email address, name, profile photo, and the student ID number collected during onboarding. Your role and subscription tier. Identifiers from our payment processor linking you to your subscription.

Onboarding answers. Free-text answers to the questions asked when you join.

Dating-profile critique. If you use this service: age, height, location, occupation, whether you have or want children, your written bio and prompts, what you are looking for, which dating apps you use, your interests, links to your public Facebook and Instagram profiles, and the photographs you upload.

Approach critique. Video you upload of real-world approach scenarios, plus any notes you write describing them. This video may contain other people — see the section on that below.

Orders. Shipping address, phone number and any note you add to a merchandise order.

Usage. Which videos and lectures you have watched and how far through, course enrolments, quiz attempts and answers.

Live sessions. If you join with camera or microphone on, your audio and video pass through our live infrastructure and may be captured in a recording that is later published to other members.

Technical. Standard server and security logs from our hosting provider, including IP address and browser details.

We do not collect your full payment card details. Card data goes directly to Stripe and we never see or store it.

Dating-profile critique involves information about your relationships and what you are looking for in a partner. Depending on what you write, this can reveal your sexual orientation, which data protection law in the UK and EU treats as a special category requiring stronger protection. Photographs and video of you are also personal information about an identifiable person.

We rely on your explicit consent to handle this material, given when you choose to use the critique services. You do not have to use them, and nothing else on the platform depends on your doing so. You can withdraw that consent at any time and ask us to delete the material.

Approach video usually contains people other than you who have not agreed to anything. We process that footage only to deliver the critique you asked for. You are responsible for having the right to record and upload it, as set out in the Terms of Service.

If you appear in footage someone else uploaded and you want it removed, contact us at [PRIVACY CONTACT EMAIL]. We will remove it. You do not need an account to make that request.

• Running your account and giving you access — necessary to perform our contract with you.
• Taking payment and preventing fraud — contract, and our legitimate interest in not being defrauded.
• Delivering critique services — contract, and your explicit consent for the sensitive material involved.
• Shipping merchandise — contract.
• Service emails (confirmations, receipts, session reminders) — contract.
• Marketing emails — consent, withdrawable at any time via the unsubscribe link.
• Tracking progress through courses — legitimate interest in making the product work as expected.
• Security and abuse prevention — legitimate interest in keeping the platform safe.

We maintain a contact list for announcements. Some addresses on it were added by an administrator — for example, from a prior mailing list or a real-world event — rather than by the person signing up here.

If you received email from us and never registered, that is why. Every message has an unsubscribe link, and you can ask us to delete your address entirely at [PRIVACY CONTACT EMAIL]. [CONFIRM the lawful basis for each import source before relying on this section — consent obtained at the original point of collection, or legitimate interest with a completed balancing test.]

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use these providers to run the platform, each handling only what their function requires:

• Supabase — database, sign-in, and file storage for photographs and documents
• Stripe — payments and subscriptions
• Mux — video hosting and transcoding, including critique video you upload and coach responses
• LiveKit — live sessions and recording
• Resend — sending email
• Vercel — hosting and server logs

We may also disclose information where the law requires it, or to establish or defend legal claims.

We and our providers are based in or store data in the United States. If you are in the UK, the EEA or another region with transfer restrictions, your information is transferred there. [TRANSFER MECHANISM — identify the safeguard relied on, such as Standard Contractual Clauses or the EU-US Data Privacy Framework, and confirm each provider above is covered.]

• Account information — while your account is open, and for a short period afterwards so it can be restored if you change your mind.
• Critique uploads and coach responses — until you delete them or close your account. You can ask us to delete a specific submission at any time without closing your account.
• Order and payment records — kept for as long as tax and accounting law requires, even after you close your account.
• Published session recordings — kept as part of the library unless you ask us to remove one you appear in.
• Server logs — a short rolling window set by our hosting provider.

[Replace the vaguer entries above with specific periods once you have decided them — a retention schedule with actual durations is what regulators expect.]

Wherever you live, you can ask us to give you a copy of your information, correct it, delete it, or stop sending you marketing. Email [PRIVACY CONTACT EMAIL] and we will respond within the time the applicable law allows. We will not treat you differently for exercising a right.

If you are in California, you have the right to know what we collect and why, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of.

If you are in the UK or EEA,you also have the right to restrict or object to processing, the right to portability, and the right to withdraw consent at any time without affecting what we did before you withdrew it. You may complain to your national supervisory authority — in the UK, the Information Commissioner’s Office.

We use cookies that are strictly necessary to keep you signed in and to keep your session secure. We do not run advertising trackers or third-party analytics, so there is no tracking to consent to or refuse. Blocking essential cookies will stop sign-in working.

Access to member data is restricted at the database level so members can reach their own records and not each other’s. Traffic is encrypted in transit. Payment card data never reaches our systems. No platform is perfectly secure, and we cannot guarantee against every risk.

The platform is for adults and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

We may update this policy. When a change materially affects how we handle your information we will give notice before it takes effect, and update the date at the top of this page.