Privacy Policy

Groovii is a service that follows public Instagram accounts run by dance and movement teachers and studios, and collects the workshops and classes they announce into one feed and map.

For data protection purposes, Groovii is the data controller for the information described below. You can reach us at hello@groovii.app.

Only what the app needs to work:

• Your email address — so you can sign in and we can reach you about your account.
• Your password — stored only as a cryptographic hash by our authentication provider. Nobody at Groovii can read it.
• A display name, if you choose to set one.
• The Instagram accounts you follow in Groovii — this is the core of the service; without it there is nothing to show you.
• Events you save to your favourites.
• Reports and feedback you send us — the message itself, your email address, and which page you were on when you sent it, so we can reproduce the problem.

• Your Instagram login. Groovii never asks for it and could not use it. We only ever read public Instagram accounts, exactly as an anonymous visitor would.
• Advertising or tracking cookies. There are none, and there is no advertising network involved in this app.
• Your location. The map shows where events are, not where you are. We do not request device location.
• Payment details.Groovii doesn't take payments.

The app does generate anonymous product-usage events internally (for example, “feed opened”) so we can understand which features get used. At present these are not transmitted to any third party or stored anywhere — they are discarded in your browser. If that ever changes, we will update this policy and say which provider receives them before turning it on.

Groovii sets only the cookies needed to keep you signed in and to keep your session secure. There are no analytics, advertising, or cross-site tracking cookies, which is why you have not been shown a cookie banner — under the ePrivacy rules, strictly necessary cookies do not require consent. Clearing them signs you out; nothing else breaks.

If you are in the UK or the European Economic Area, our legal bases under the UK GDPR and GDPR are:

• Performance of a contract — your email, password and followed accounts are what make an account work. Without them there is no service to provide.
• Legitimate interests — keeping the service secure, preventing abuse, and acting on the bug reports and feedback you choose to send.
• Consent — where we ever ask for it explicitly, such as optional emails. You can withdraw consent at any time.

We don't sell or rent your data, and we don't share it for anyone else's marketing. We do rely on these providers to run the service, each acting on our instructions:

Some of these providers operate outside the UK and EEA. Where personal data is transferred internationally, it is protected by the safeguards those providers offer, such as Standard Contractual Clauses.

We may also disclose information where the law requires it, or to protect the rights and safety of our users.

Your account data is kept for as long as your account exists. When you delete your account, your profile, followed accounts, saved events and feedback are erased immediately.

Reports you have submitted about incorrect event listings are kept, but are unlinked from you at that point — they stay useful to whoever reviews them without remaining attached to your identity. Ordinary server logs are held for a short period for security and troubleshooting.

You can ask us to:

• Give you a copy of what we hold about you
• Correct anything that's wrong
• Delete your account and its data
• Restrict or object to how we use it
• Withdraw any consent you've given

The quickest route for deletion is to do it yourself: open Account settings in the app and choose to delete your account. It takes effect straight away and needs no request to us.

For anything else, email hello@groovii.app and we will respond within one month. If you think we have handled your data badly, you can complain to your local data protection authority — in the UK, that is the Information Commissioner's Office (ico.org.uk).

Groovii displays information from public Instagram accounts — the handle, profile picture, and the workshops and events those accounts announce publicly. We access nothing that is private or restricted, and we hold no login for any Instagram account.

If you run an account that appears in Groovii and you would rather it did not, email hello@groovii.app and we will remove it and stop reading it.

Access to the database is restricted at row level, so one user's data is not reachable by another. Passwords are hashed, never stored in readable form, and traffic is encrypted in transit. No system is perfectly secure, but we keep the amount we hold small deliberately — the data we never collect cannot be lost.

Groovii is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

If we change how we handle your data, we will update this page and change the date at the top. For anything significant — a new provider receiving your data, or a new purpose — we will tell you in the app or by email before it takes effect.