ADNCE
Last updated: 6 October 2026 · Version 1.1
ADNCE is a mobile app that connects dancers: finding partners nearby, discovering events, arranging carpools, chatting, and joining groups.
This policy explains what personal data we process, why, for how long, who we share it with, and what rights you can exercise. It is written in accordance with Regulation (EU) 2016/679 (GDPR). The rules for using the service are set out in the terms of use.
| Data controller | Pravith BOUNNAK |
|---|---|
| Address | 8 rue Théophile Chollet, 45000 Orléans, France |
| Contact | privacy@adnce.app |
| Data Protection Officer | Not appointed (not required given the nature of the activity) |
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, password (stored encrypted by Firebase Authentication and never accessible to us in plain text), unique account identifier | Creating and securing your account, signing you in, verifying your email address, enabling password resets | Performance of a contract (Art. 6(1)(b)) |
| Username, first name, last name, free-text bio, profile picture, cover picture | Building the profile other members see | Performance of a contract (Art. 6(1)(b)) |
| Home city and country, dance styles practised and custom style labels | Suggesting relevant members, groups and events; choosing the cities for which we import events (see section 3) | Performance of a contract (Art. 6(1)(b)) |
| Last sign-in date | Showing other members whether you are active, identifying dormant accounts | Legitimate interest (Art. 6(1)(f)): service quality |
We do not ask for your date of birth, gender, phone number or home address.
If you choose to sign in with Facebook, we request the public_profile permission from Meta and retrieve your first name, last name and profile picture, solely to pre-fill your ADNCE profile on first sign-in. We never post anything to your Facebook account and do not access your friends list or your news feed.
On iPhone, Facebook sign-in runs in "limited" mode: you are not asked for tracking permission and no advertising identifier is used. Within the app, automatic collection of usage events by Meta's software development kit is disabled: Meta is only involved at the moment you sign in, under its own privacy policy.
On iPhone, you can also sign in with Apple. Apple sends us an identifier specific to ADNCE, your name on your very first sign-in, and your email address or, if you choose to hide it, a relay address provided by Apple that forwards our messages to you. When you delete your account, we revoke with Apple the access granted to ADNCE.
ADNCE uses your location for one feature only: discovering dancers and events nearby.
Other members never see your position on a map: only the approximate distance between you and them is shown on your profile.
You may decline location access, or revoke it at any time in your phone settings. The app remains usable: only proximity search is disabled, and search by declared city continues to work.
Converting coordinates into a city name relies on your operating system's geocoding services (Apple or Google depending on your device). Address and city search by typing uses the OpenStreetMap Foundation's Nominatim service, which receives only the text you type.
| Data | Purpose | Legal basis |
|---|---|---|
| Feed posts (text, photo, optional location), comments, likes | Populating the community feed | Performance of a contract (Art. 6(1)(b)) |
| Events you create (title, description, date, venue, image). If you import an event from a Facebook link, our servers read the corresponding public page to pre-fill the form: only the link is sent. | Publishing events and making them discoverable | Performance of a contract (Art. 6(1)(b)) |
| Groups: name, city, styles, cover image, membership | Running groups and their discussions | Performance of a contract (Art. 6(1)(b)) |
| Carpools: pick-up address and coordinates, departure time, number of seats | Allowing passengers to meet you | Performance of a contract (Art. 6(1)(b)) |
We store the content and metadata of your private messages, group chats, carpool chats and training-request conversations, so that you can find your conversations across devices.
These messages are not end-to-end encrypted. They are stored on our servers in a form that is technically readable by the service administrator. We do not read them in normal operation, and access them only following an abuse report or a lawful order. Please do not use them for sensitive information.
Legal basis: performance of a contract (Art. 6(1)(b)).
After a training session or a carpool, members can rate each other (reliability, attitude, carpool rating) and flag a member they no longer wish to be matched with. These ratings are kept in aggregated form on the relevant profile. A member flagged by three different members, after a training session or a carpool, no longer appears in member lists or in search; if this happens to you and you believe it is a mistake, write to us to request a review.
Legal basis: legitimate interest (Art. 6(1)(f)) — ensuring the safety and quality of meet-ups arranged through the app. You may object to this processing (see section 7); we will then assess your request against the safety of other members.
If you accept notifications, we store the technical notification identifier assigned to your device by Apple or Google, in order to alert you to incoming messages, invitations and new events. You can disable notifications at any time in your phone settings; the identifier is deleted no later than when your account is deleted.
Legal basis: consent (Art. 6(1)(a)), obtained through the system permission prompt.
The app accesses your camera and photo library only at the moment you choose to add an image (profile, post, event, group), and only the image you select. We do not browse your photo library.
ADNCE contains no analytics tool, no crash reporting tool, no advertising network and no third-party trackers for profiling purposes. We neither sell nor rent your data to anyone. No automated decision producing legal effects is made about you.
The Firebase (Google) and Meta software development kits built into the app send their publishers technical data about their own operation (kit and system version, device model, kit errors), without linking it to your account. We have no access to it.
When you report content or a member, we record your identifier, the content concerned, its author, the reason you chose and any details you add, in order to moderate the service. The author of the content is not told who reported it. Reports are kept while they are being handled, then for as long as they remain useful to deal with repeated abuse; they are deleted with the account of their author or of the member concerned.
Your list of blocked members is visible only to you, and blocked members are not told. It is deleted with your account.
Legal basis: legitimate interest (Art. 6(1)(f)) — keeping members safe and enforcing the terms of use.
To enrich the calendar, ADNCE imports public dance events each week from two sources:
Imported listings may mention the name of an organiser or performer where it appears in the title or description published at the source. They are labelled as automatically imported, link back to the original source and are deleted two days after the event date.
To choose which cities to cover, we count the home cities declared by members. Only city names and dance keywords are sent to Apify, never linked to a member. Apify runs the collection on servers located in the United States; the events we keep are then stored in our database, in the European Union.
Legal basis: legitimate interest (Art. 6(1)(f)) — offering a complete dance calendar based on information already made public by its authors.
If you are an organiser and want an event concerning you removed, write to us: we will remove it unconditionally and within 30 days at most. This information is provided to you under Article 14 GDPR (data not obtained from the data subject).
Visible to other signed-in members: your username, first and last name, bio, profile and cover pictures, dance styles, home city, posts and comments, the aggregated ratings on your profile, and, if you have enabled location access, the approximate distance between you and them. Your email address and your private conversations are not visible to other members.
| Provider | Role | Data location |
|---|---|---|
| Google Ireland Ltd. / Google LLC (Firebase: Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging) | Hosting the database, files, authentication and server-side processing | Database: European Union (Belgium and the Netherlands). Server-side processing: European Union (Belgium). Notifications: United States. |
| Meta Platforms Ireland Ltd. | Facebook sign-in (if you use it) | European Union and United States |
| Apify Technologies s.r.o. | Weekly collection of public Facebook events (no member data is sent to it) | Company established in the Czech Republic; collection runs on servers located in the United States (Amazon Web Services) |
| OpenAgenda | Source of imported events. Posters for these events are loaded from its servers, which then receive your device's IP address | European Union (Ireland) |
| OpenStreetMap Foundation | Map tiles and address search | United Kingdom (European Commission adequacy decision) |
| Apple Inc. / Google LLC | App distribution, notification delivery and Sign in with Apple (if you use it) | United States |
We may disclose data to a judicial or administrative authority upon a valid legal order, and retain it for as long as necessary to establish, exercise or defend legal claims.
Your main database is hosted in the European Union. Certain technical operations — delivering push notifications, distribution through the app stores, collection of public Facebook events by Apify — involve a transfer to the United States.
These transfers are governed by the Standard Contractual Clauses adopted by the European Commission and, for the providers concerned, by their certification under the EU-U.S. Data Privacy Framework.
| Data | Retention period |
|---|---|
| Account, profile and associated content | For as long as your account is active |
| Dormant account | Deleted after 3 years without sign-in, following an email reminder |
| Location | Only the last rounded position (about 1 km) is kept; it is replaced when you move to a different area and erased when the account is deleted |
| Messages | For as long as the conversation exists. When your account is deleted, your private messages are erased; your messages in group and carpool chats are anonymised |
| Automatically imported events | Deleted automatically 2 days after the event date |
| Push notification identifier | Until notifications are disabled or the account is deleted |
| Data kept as evidence in the event of a dispute | For the applicable limitation periods |
You have the rights of access, rectification, erasure, restriction, objection and portability set out in Articles 15 to 22 GDPR, as well as the right to withdraw your consent at any time where processing is based on it.
Deleted: your profile and photos, your posts and their comments, your likes, your private conversations, your training requests and ratings, your favourites, your blocked members, your reports, your notifications, the events you created together with their images and carpools, your carpool seat requests, your location and your notification identifier. Your group memberships and event sign-ups are removed; a group of which you were the only member is deleted along with its chat.
Comments you left on other members' posts, your messages in group and carpool chats, and carpools you offered for another member's event are kept in anonymised form so as not to disrupt other people's exchanges.
For any request, including a data portability request, write to privacy@adnce.app from the address associated with your account. We respond within one month, extendable by two months for complex requests.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the supervisory authority of your country of residence.
Traffic between the app and our servers is encrypted in transit (TLS). Data is encrypted at rest by our hosting provider. Passwords are handled by Firebase Authentication and are never accessible to us in plain text. Access to data is restricted by server-side security rules that verify the identity and permissions of every request. Administrative keys are held in a secret manager.
No system is infallible. In the event of a data breach likely to result in a high risk to your rights and freedoms, we will inform you without undue delay, in accordance with Article 34 GDPR.
ADNCE is intended for people aged 15 and over. We do not knowingly collect data concerning children under 15. If you become aware that an account has been created by a child under 15, please report it to us and we will delete it.
We may update this policy. The last updated date appears at the top of the page. Where a change materially affects your rights, we will notify you in the app or by email before it takes effect.