Privacy Policy

GetStepIn Inc., a California corporation doing business as WhoTeaches ("GetStepIn," "we," "us," or "our"), operates the WhoTeaches mobile application and website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights.

By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.

Information you provide directly

• Account and contact information: name, email address, and, optionally, a phone number and profile photo. You may add a phone number at signup, in your profile, or at checkout. If you provide one, organizers whose activities you purchase receive it along with your name and email address. Your phone number is saved to your profile and pre-filled at future checkouts.
• Profile information: optional details you may add, such as location, dance styles, experience level, pronouns, gender, and date of birth.
• Authentication: if you sign in with Google, we receive your name and email. If you sign in with Apple, we receive your name and either your real email or an Apple private-relay address, depending on the choice you make at sign-in.
• Payment information: card details when purchasing tickets. Payment data is processed and stored by Stripe. We do not store your full card number.
• Organizer information: if you create an organizer account, your organization name, banking/payout details, and, if you enable platform billing, a payment method for recurring charges, collected through our payment processor.
• Communications: messages or support requests you send us.

Information collected automatically

• Location: approximate location, when you grant permission, to show nearby activities.
• Device identifiers: push notification tokens, to deliver activity reminders and announcements.
• Usage data: screens visited, features used, and actions taken within the Service, collected via a third-party analytics provider. This data is associated with a one-way hashed identifier that does not reveal your account to the provider, so we can understand how the Service is used without sharing your identity.
• Diagnostic data: when an error occurs, technical information such as device type, operating system, and app version is sent to our error-reporting provider to help us diagnose problems.

Information collected by organizers

When you purchase a ticket or attend an activity, the organizer receives information from you. Some organizers add their own questions at checkout and may collect additional information that way. An organizer may also record payments you make through external methods such as cash, Venmo, Zelle, or PayPal. Information you provide to an organizer, including responses to their checkout questions, is governed by that organizer's own privacy practices, not this Policy. We are not responsible for how organizers handle information they collect.

• To create and manage your account.
• To process ticket purchases and to process or facilitate refunds, including refunds authorized by Organizers.
• To show you activities near your location.
• To send notifications you have opted into, and essential transactional messages about your account and activities.
• To enable organizers to manage their activities, attendees, and payouts.
• To analyze usage patterns and improve the Service.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information. We share it only as described below.

Service providers

• Payment processing: Stripe processes all payments and organizer payouts made through the Service, under its own privacy policy, and processes recurring Organizer billing charges.
• Cloud infrastructure: our database and backend are hosted by a third-party cloud provider.
• Analytics: a third-party analytics provider receives usage data associated with a one-way hashed identifier that does not reveal your account.
• Error reporting: a third-party error-reporting provider receives diagnostic data when problems occur.
• Push notifications and email: third-party providers deliver push notifications to your device and transactional email to your inbox.

Organizers

When you purchase a ticket, the organizer of that activity receives your name, email address, phone number (if you provided one), ticket details, and your responses to any checkout questions they added. This is necessary for them to manage attendance and communicate with you about the activity.

Legal requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of GetStepIn, our users, or the public.

Business transfers

If GetStepIn is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

We retain your account information for as long as your account is active. If you request account deletion, your account is locked and permanently deleted after a 30-day grace period, during which you may cancel the deletion and restore access.

After permanent deletion, we anonymize the purchaser fields on your order records. Certain records associated with activities you attended, including attendee records that may contain your name, email, and phone number, are retained by organizers for their record-keeping and are not removed by your account deletion. Organizers' financial records associated with completed transactions are retained for a minimum of seven years as required by tax and accounting laws.

We keep other categories of data only as long as needed for the purpose for which they were collected: usage analytics and diagnostic data are retained on a rolling basis by our providers; notification tokens are removed when they become invalid or unused; and support communications are kept as needed to resolve your requests. Backups may retain information for a limited period after deletion before they are overwritten.

Depending on where you reside, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correction of inaccurate information.
• Deletion of your account and personal data, subject to the retention rules in Section 5. You can initiate deletion from your profile settings. Organization owners may first need to resolve or transfer their organization's outstanding obligations before deletion.
• Opt out of notifications through your device settings or in-app notification preferences.

California residents

California residents have additional rights, including to know what personal information we collect, to delete personal information, and to opt out of its sale. We do not sell personal information.

How to make a request

To exercise any of these rights, contact us at legal@whoteaches.com. We may need to verify your identity before acting on a request, and you may use an authorized agent where the law permits. We will respond within the timeframe required by applicable law.

The Service is intended solely for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us and we will delete it.

We use industry-standard measures including encrypted connections (TLS) and access controls to protect your information. No system is completely secure. We encourage you to use a strong password and to notify us immediately if you suspect unauthorized access to your account.

When you follow an organization, or when you purchase a ticket from one, you may receive notifications from that organizer, such as activity reminders and announcements. Purchasing a ticket also follows that organization, and purchasing again follows it again even if you have unfollowed in the meantime. You can control what you receive in your notification settings, and you can unfollow an organization at any time. Essential messages about an activity you have purchased, such as a cancellation or a change to the date, time or location, may be sent even if you have turned off other notifications.

Your information is processed in the United States by us and our service providers. The Service is directed to users in the United States and is not targeted to users in the European Union or United Kingdom. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with your local laws.

Our website uses cookies and similar technologies, including browser local storage:

• Essential cookies keep you signed in, maintain your session, and remember context during sign-in and invitation flows. The Service does not function properly without these.
• Analytics cookies are set by our third-party analytics provider to measure how the website is used. We do not use advertising cookies.

You can control or clear cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working.

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices and encourage you to review their policies before providing information to them.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by sending a notification through the app. Continued use of the Service after changes become effective constitutes acceptance.

Questions about this Privacy Policy? Contact us at: