Legal
Privacy Policy
Effective date: 19 September 2026
Previous version: 17 September 2026
This Privacy Policy explains how InBetween Technologies Ltd ("InBetween", "we", "us", "our"), collects and uses your personal data when you use the InBetween mobile application and related services (the "Service"). It is written to comply with the UK GDPR and the EU GDPR.
InBetween is in private beta. We process real personal data, including audio recordings of lessons. Please read this policy carefully.
1. Who is responsible for your data
InBetween Technologies Ltd is the data controller for the personal data described in this policy.
- Company number: 17468968
- Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Privacy contact: hello@useinbetween.com
Where a coach records a lesson, the coach and InBetween each act as independent data controllers: the coach for the decision to record and for obtaining the consent of the people captured, InBetween for the processing, storage and analysis of that recording within the Service. We are not joint controllers with coaches, and we do not act as a coach's processor.
We have not appointed a Data Protection Officer (we are not required to). For any privacy question or request, contact us at the address above.
2. The data we collect
Account and profile data you give us
- Full name, email address, and password (stored only as a secure hash — we never see your password).
- Your role (student or coach), dance style, and the studio you train or teach at.
- Onboarding preferences: how many private lessons you take per month and how often you train solo.
Student profiles managed by a parent or guardian
- Where an account holder adds a student under 18, we collect that student's name, date of birth, and dance details. Date of birth is collected so that we can apply the correct protections for that age and manage the transitions described in section 11.
Content you create or that is created about you in the Service
- Focus points, lesson notes, takeaways, practice sessions, and attendance.
- Audio recordings of lessons and voice notes (typically recorded by coaches), and the transcriptions generated from them.
- Questions asked by students about their focus points, and the answers generated or given in reply.
- For coaches, a knowledge base built from recurring corrections, tips, metaphors and vocabulary identified in their lessons.
Health-related information captured in lessons
Lessons are conversations, and they may include references to injuries, pain or physical limitations. This is health data under Article 9. See section 3 for how we handle it.
Interaction signals
Information about how the Service is used: whether a focus point was kept, edited, deleted or marked as practised, how often an item was opened, how long a practice session lasted, the category of a focus point drawn from our own fixed list, and similar usage events. Interaction signals do not include the text of lesson content.
Technical and usage data
A push-notification token (so we can send you reminders and updates), and basic device and app information needed to run and secure the Service.
Communications
Messages you send us (e.g. support emails) and, if you joined our waitlist, the email address you provided.
3. How we use your data, and our lawful bases
| What we use it for | Lawful basis (UK/EU GDPR) |
|---|---|
| Create and run your account; provide the core Service (focus points, transcriptions, summaries, answers) | Performance of a contract (Art. 6(1)(b)) |
| Transcribe and analyse lesson audio to generate focus points and summaries | Performance of a contract (Art. 6(1)(b)) |
| Build and maintain a coach's knowledge base, used only to answer questions from students linked to that coach's account | Performance of a contract (Art. 6(1)(b)) |
| Process references to injuries, pain or physical limitations captured in lesson content | Explicit consent (Art. 9(2)(a)), alongside Art. 6(1)(b) |
| Send you reminders and service notifications | Performance of a contract / our legitimate interests (Art. 6(1)(b)/(f)) |
| Keep the Service secure, prevent abuse, and debug it | Our legitimate interests in running a safe, working Service (Art. 6(1)(f)) |
| Improve how focus points are selected, ranked and presented, using aggregated and de-identified interaction signals about how the Service is used. This does not involve the content of lessons. | Our legitimate interests in improving the Service (Art. 6(1)(f)) |
| Respond to your messages and requests | Our legitimate interests / contract |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Waitlist emails | Consent (Art. 6(1)(a)), which you can withdraw at any time |
Where we rely on legitimate interests, we have considered your rights and freedoms; you can object at any time (see section 8).
Health data. We process references to injuries, pain or physical limitations only as part of lesson content, on the basis of explicit consent. That consent is given by the account holder when the account is created, separately and by an unticked box, and can be withdrawn at any time in settings. We do not use this information for any other purpose, and we do not share it beyond the processors listed in section 6. Because we cannot separate these references from the rest of a conversation, withdrawing consent means that lessons will no longer be recorded for that person.
4. Audio recordings — who is responsible for what
Coaches use the Service to record audio of lessons and notes. Responsibility is shared as follows:
- The coach decides who and what to record and is responsible for having the consent of the people captured in a recording (including, for a child, their parent or guardian), as set out in our Terms of Service.
- We (InBetween) are responsible, as data controller, for processing and securely storing those recordings and the resulting transcriptions, and for the integrity and confidentiality of that data once it is in the Service. Access to recordings and transcriptions is restricted to InBetween's systems and the relevant account(s); we do not sell this data and we do not use it for advertising.
If you have been recorded and want a recording reviewed or deleted, contact us at hello@useinbetween.com. We will handle your request directly. You may also contact the coach who recorded you.
5. AI processing
To turn audio into transcriptions, focus points and answers, we share the relevant content with AI and transcription providers acting as our processors (see section 6). These providers operate under business terms that prohibit them from using your content to train or improve their own models. A provider may retain content briefly for abuse monitoring, as described in that provider's own terms; it is not used for any other purpose.
We do not use lesson content to train, fine-tune, benchmark or evaluate any machine learning model, whether ours or a third party's.
We do use aggregated and de-identified interaction signals (see section 2) to improve how the Service selects, ranks and presents focus points. That process never includes the text of lesson content, and no output delivered to one coach's students is generated from another coach's material.
AI-generated transcriptions, summaries and answers can contain mistakes and should not be treated as definitive, or as a substitute for professional advice.
6. Who we share data with (our processors)
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, to run the Service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database, and file storage (account data, notes, recordings, transcriptions) | EU — Ireland (eu-west-1) |
| Anthropic | AI analysis of notes and transcriptions to generate focus points, summaries and answers | United States |
| OpenAI | Speech-to-text transcription | United States |
| AssemblyAI | Speech-to-text transcription | United States |
| Expo (Expo / EAS) | Delivery of push notifications | United States |
| Resend | Transactional emails (account confirmation, password reset) and waitlist emails | United States |
| Vercel | Website hosting, plus privacy-friendly analytics and performance monitoring for our website | United States |
| Apple, Google | App distribution | United States |
Where we add or replace a provider that processes lesson content (recordings, transcriptions, or the text derived from them), we will update this list and notify account holders before the change takes effect. Where a change is required urgently to keep the Service running or secure, we will make it and notify you as soon as possible afterwards.
We may also disclose data if required by law, to protect our rights, or in connection with a corporate transaction (e.g. a merger), in which case we will tell you.
7. International transfers
Your account data and files are hosted in the EU (Ireland). Some of our providers (notably our AI, transcription, notification, email and hosting providers) are based in the United States, so some data is transferred outside the UK/EEA.
Where we make such transfers, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement / Addendum and the EU Standard Contractual Clauses, or we rely on an applicable adequacy decision. You can ask us for more detail about these safeguards.
8. Your rights
Under the UK and EU GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict or object to certain processing (including processing based on legitimate interests, such as our use of interaction signals);
- data portability (receive your data in a portable format);
- withdraw consent at any time where we rely on consent (for example, health-related information captured in lessons, or waitlist emails);
- not be subject to solely automated decisions with legal or similarly significant effects (we do not make such decisions).
Where a student is under 18 and takes part through a profile managed by a parent or guardian, the parent or guardian exercises these rights on their behalf. A student aged 16 or 17 who holds their own account exercises these rights themselves.
To exercise any of these rights, email hello@useinbetween.com. We will respond within one month. You will not normally have to pay a fee.
You also have the right to complain to a data protection authority. In the UK this is the Information Commissioner's Office (ICO) — ico.org.uk. In the EU/EEA you can complain to your local supervisory authority.
9. How long we keep your data
- We keep your account and content for as long as your account is active.
- If you delete your account, or ask us to delete specific content, we permanently erase it from production systems within 30 days and from backups within 90 days, except where we must keep certain information to comply with the law.
- Erasure covers lesson audio, transcriptions, focus points, notes, knowledge bases, vector embeddings, derived summaries and cached model context. We will confirm completion in writing.
- As this is a private beta, beta data may be deleted when the beta ends. If we decide to end the beta, we will give at least 30 days' notice and export tools will remain available throughout that period.
- You can ask us to delete your data sooner at any time (section 8).
10. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, logical isolation of each coach's knowledge, and restricting access to recordings and transcriptions to our systems.
Where we need to access a specific item to diagnose a problem you have reported, we do so with your agreement, limited to what is necessary, and we log that access.
No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal-data breach where the law requires.
11. Children and young people
The Service is used by dancers of all ages.
Anyone under 18 takes part through a student profile managed by their parent or guardian, who holds the account, accepts our Terms, and exercises all data protection rights on their behalf. Children do not hold accounts and do not log in.
A parent or guardian sees the focus points generated for their child. Lesson recordings are not shown in the parent's interface; a parent or guardian may still request a copy of a recording under their child's right of access (section 8).
A student aged 16 or 17 may ask us to convert their profile into their own account. We notify their parent or guardian before doing so, and the parent or guardian then retains visibility of focus points only. When a student reaches 18, their profile becomes their own account and parental access ends.
Coaches who record children in lessons are responsible for obtaining the consent of the parent or guardian (see section 4 and the Terms). If you believe a child's data is held without the required consent, contact us at hello@useinbetween.com and we will delete it.
12. Cookies and our website
Our app does not use advertising or tracking cookies.
Our website (useinbetween.com), where you join the waitlist, uses only:
- essential cookies needed to run the site;
- Vercel Web Analytics and Vercel Speed Insights, which are privacy-friendly and cookieless: they measure traffic and page performance without tracking you across other sites;
- Resend, to manage waitlist sign-ups and emails.
We do not use advertising or cross-site tracking cookies on our website.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, in the app or by email). The "Effective date" at the top shows when this version took effect.
14. Contact us
For any question or request about your privacy, or to exercise your rights, email hello@useinbetween.com.
InBetween Technologies Ltd. Company number 17468968. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.