Privacy Policy
1. Who we are
StepReplay ("we", "the app") is a mobile application and website that lets dancers record dance class videos, store them on their own YouTube channel, organize them into a private library, and share them with their dance group. The service is operated by Jarosław Woźniak, ul. Odrodzenia 13B/7, 59-300 Lubin, Poland, the data controller within the meaning of the GDPR.
2. What data we collect
- Google account data — when you sign in with Google we receive your name, email address and profile picture.
- YouTube authorization tokens — OAuth tokens that allow the app to upload videos to your own YouTube channel on your behalf. Tokens are stored securely on your device and in our backend (Supabase) and are never used for any purpose other than the features described here.
- Video metadata — titles, recording dates, folder/group assignments and YouTube video IDs of the recordings you create. The video files themselves are stored on YouTube, on your channel — not on our servers.
- Newsletter email address (website only) — if you subscribe, we store your email address until you unsubscribe.
3. YouTube API Services
StepReplay uses YouTube API Services to upload and manage videos on your YouTube channel. By using the app you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
- The app accesses your YouTube account solely to upload the videos you record and to manage their privacy status (e.g. unlisted) and metadata.
- We store YouTube video IDs and metadata of the videos created through the app; we do not access, read or modify other content on your channel.
- You can revoke StepReplay's access to your Google account at any time via Google security settings. Revoking access disables uploads but does not delete videos already on your channel — those remain fully under your control.
StepReplay's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use your data
- To authenticate you and keep you signed in.
- To upload your recordings to your YouTube channel and organize your library.
- To let you share links to your recordings with people you choose.
- To send the newsletter you explicitly subscribed to (website).
We do not sell your data, do not use it for advertising, and do not share it with third parties except the processors listed below.
5. Processors and storage
- Supabase — authentication and database hosting (account data, video metadata, tokens).
- Google / YouTube — video hosting on your own channel.
6. Retention and deletion
Your data is kept for as long as you have an account. You can delete your account in the app (Profile → Settings) or by emailing us — this removes your account data, tokens and metadata from our systems within 30 days. Videos on your YouTube channel are yours and are never deleted by us.
7. Your rights (GDPR)
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with a supervisory authority (in Poland: Prezes UODO). To exercise these rights, contact us at jawamdam@gmail.com.
8. Changes
We may update this policy; material changes will be announced in the app or on this page. The current version always lives at this address.