Privacy Policy

This policy explains what personal data Ritmoteka collects, why, who processes it for us, how long we keep it and the rights you have. It follows the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Ritmoteka's company details (legal name, registered address, registration and VAT numbers) are being added to this page. Until then, write to juan.colmenares@ritmoteka.com with any legal or privacy question.

We are the data controller for the personal data described here.

2. What we collect

• Waitlist. Your email address, a username if you choose one, your referral code, the code of whoever invited you, and when you joined.
• Account. Email address, a password stored only as a salted hash (or, with Continue with Google, your Google account ID instead of a password), display name, username, and optionally a bio, avatar, Instagram link, dance level and time zone.
• Learning activity. Lessons you watch and complete, XP, level, streaks, badges, Fichas and shop purchases, and which free taster classes you open.
• Community. Posts, replies, reactions and videos you choose to share.
• Emails we send you and whether they were delivered.
• Technical data. Your IP address and browser details, as part of every request, used for security (for example limiting repeated sign-in attempts) and kept in short-lived server logs.
• Video playback statistics. Anonymous playback quality data (start time, buffering, errors) collected by our video provider without cookies.

We do not use advertising or analytics trackers on this site, and we do not sell personal data.

3. Why, and on what legal basis

• To run the waitlist, your account and the classes, including the free tasters: performance of our agreement with you (art. 6(1)(b) GDPR).
• To send you the emails that go with it (sign-in links, password resets, the waitlist welcome): the same basis.
• To keep the service secure and working (rate limits, fraud and abuse prevention, error fixing): our legitimate interest (art. 6(1)(f)).
• To meet legal obligations, such as tax records once payments exist: art. 6(1)(c).

4. Who processes data for us

We use these providers, each bound by a data processing agreement:

When payments open, our payment provider will be added here before it receives any data.

5. Transfers outside the EU

Some providers above are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Waitlist entries: until you ask us to remove them, or until you turn them into an account.
• Accounts and everything attached to them: until you delete your account. We then delete them, except what the law requires us to keep.
• Used sign-in and reset links: recorded only until they would have expired anyway.
• Server logs: a few weeks.
• Billing records, once payments exist: as long as tax law requires.

7. Your rights

You can ask for access to your data, a copy in a portable format, correction, deletion, restriction, or object to processing based on our legitimate interest. Write to juan.colmenares@ritmoteka.com. We answer within one month.

You can also complain to a data protection authority, in particular in the EU country where you live or work.

8. Cookies

We only use cookies that the site needs to work. The full list is in the Cookie Policy.

9. Age

Ritmoteka is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe we have, write to juan.colmenares@ritmoteka.com and we will delete it.

10. Changes

If we change this policy in a way that matters, we will tell you by email or on the site before the change applies. The date at the top shows the latest version.