Privacy Policy

1. Controller & scope

AcroPassport operates the Service. This policy describes how we collect, use and share personal data when you use the Service. Questions about privacy can be sent to privacy@acropassport.com.

2. Information we collect

We collect information you provide directly (profile fields, handle, avatar, bio), content you upload, and metadata required to operate the Service (timestamps, IP addresses, device info). We may also collect aggregated analytics for product improvement.

3. Legal bases (UK GDPR)

Where UK GDPR applies, we rely on one or more lawful bases to process personal data: performance of a contract (account management), consent (analytics and marketing where offered), and legitimate interests (service improvements, fraud prevention) including the organisation and display of publicly available content related to acrobatic skills.

4. How we use data

Data is used to provide and maintain the Service, secure accounts, respond to requests, and improve the product. We may use contact details to send important account-related messages.

5. Sharing and third parties

We do not sell personal data. We share data with service providers who process data on our behalf (Supabase for database and auth, Resend for email, analytics providers if enabled). These processors act under contract and with appropriate safeguards. Third-party media (e.g. YouTube, Instagram) is embedded and loaded directly from those platforms. Their processing of personal data is governed by their own privacy policies.

Some outbound links — most visibly on /resources — are affiliate links, marked with an aff indicator. We do not track your clicks ourselves, do not pass any personal data to the affiliate partner, and never share your account information with them. Once you leave AcroPassport, the destination site may set its own cookies and apply its own privacy policy. See the Terms of Service for the affiliate disclosure.

6. Data transfers & storage

Our primary infrastructure uses Supabase in the eu-west-2 (London) region. Some processors may transfer data outside the UK — where that occurs we implement appropriate safeguards (standard contractual clauses, where required).

7. Cookies and tracking

We use cookies for necessary functionality (session management, security and remembering preferences such as dismissed announcements). Non-essential cookies such as analytics are only set where you have given consent via the cookie banner.

Categories:

• Necessary: session, security, preference cookies.
• Analytics: anonymous usage data to improve the product.

The cookie banner allows you to accept necessary-only or accept all cookies and to manage analytics preferences. Dismissal of announcements uses a necessary cookie so it does not require analytics consent.

8. Data retention

We retain account and profile information while your account is active and for a limited time afterwards to comply with legal obligations and prevent abuse. Analytics data may be retained in aggregated form; specific retention periods will be documented in the final policy.

9. Your rights

Where applicable you have rights including access, correction, deletion, restriction, objection, and data portability. This includes the right to object to the inclusion or association of your likeness or identity within the Service. To exercise these rights contact privacy@acropassport.com; we may require information to verify your identity.

10. Security

We take reasonable steps to protect data. However no method of transmission or storage is completely secure. If we become aware of a data breach we will follow applicable notification rules.

11. Public content and third-party media

The Service may display publicly available content from third-party platforms such as YouTube and Instagram. This content is not hosted by AcroPassport and remains subject to the terms and privacy policies of those platforms. In some cases, users may associate public content with skills, creators, or performers. Where individuals are identifiable, this may constitute personal data. We rely on legitimate interests to process this information for the purpose of building a structured educational database of acrobatic skills. We take steps to minimise impact, including:

• not hosting or copying third-party media
• not tagging individuals by default
• allowing users and non-users to request removal or correction