Privacy Policy

1. Status and scope

DRAFT FOR LEGAL REVIEW — NOT YET EFFECTIVE. This proposed policy is published for review and describes what the POIZ product actually does today. It has not been reviewed or approved by an attorney and does not replace the version currently in force.

This policy covers the POIZ website, web app and installable app, POIZ Network features and POIZ HQ workspaces.

Operator. POIZ operates the service. ACTIVATION REQUIREMENT — the exact legal entity name, principal place of business and privacy contact address are not published here and must be supplied by counsel before activation. Until then, all privacy requests go through the in-app Support Center at /support.

Where POIZ HQ is used by a studio or teacher, that studio or teacher decides what roster, class, medical, communication and payment information to enter about their students and staff, and is responsible for their own privacy obligations to those people.

2. Categories of information POIZ collects

POIZ collects the following categories, and only what the feature you use requires:

• Account and authentication identifiers — email address, account identifier, authentication credentials handled by the authentication provider, sign-in events.
• Date of birth, derived age state and safety state — your self-declared date of birth, whether the account is a minor account, and the status of the required safety steps.
• Guardian consent records — the guardian's name, email address, stated relationship, the consent wording and version presented, the typed electronic signature, timestamps, one-time token records and the audit history of the request.
• Profile information — display name, handle or username, avatar, bio, member type, and location fields such as city, region and country where you provide them.
• User content — videos, cover frames, photos, audio contained in your recordings, captions, comments, messages and other material you submit.
• Activity, competition and rewards data — combos, training views, challenge and combo attempts, scores, feedback, rankings, XP, Coin balances and reward history.
• POIZ HQ workspace data — workspace and location records, staff and roster entries, enrollments, classes, reservations, routines and casts, communications, uploaded legal documents and signed receipts, and business settings.
• Support, safety and moderation records — support tickets, reports you submit or that concern you, moderation decisions and evidence preserved in connection with them.
• Device, log, security and diagnostic data — IP address, device and browser characteristics, app version, timestamps, error and performance diagnostics, and security events.
• Subscription and transaction metadata — plan, price, billing interval, status, renewal and cancellation events, and processor references. Card details are entered with the payment processor; POIZ does not store full card numbers.
• Preferences and notification settings — appearance, visibility, messaging and notification choices.
• Automated analysis inputs and outputs — the video you submit for scoring and the score, rating and feedback produced from it.

3. Sensitive information, and what POIZ does not do

Some of what POIZ handles deserves extra care: information about minors, authentication credentials, guardian signatures, the general location you choose to display, and video and audio of you.

POIZ does not collect precise geolocation. Location is limited to the city, region and country fields you enter and your visibility choices.

Automated movement analysis is not facial recognition and is not used to identify who a person is or to create a biometric identifier or template. It assesses movement in the video you submit in order to produce a score or feedback.

Health, safety, accommodation and waiver information in POIZ HQ. Where the product supports it, a studio or teacher can enter health-related, injury, accommodation, emergency-contact, safety or waiver information about a student or staff member into their HQ workspace, and uploaded waiver and legal documents can contain such information. That information can be sensitive. The HQ operator decides what to enter and is responsible for lawful collection, minimization, having the authority or consent to collect it, and controlling who in the workspace can see it. POIZ hosts and secures it on the operator's behalf.

POIZ Network features do not ask you for medical or health records, government identification documents, financial account numbers, precise biometric identifiers, or information about race, religion, sexual orientation, union membership or political views, and POIZ does not require them to take part. POIZ does not claim that health-related information never reaches the service — it can, through HQ workspace entries and uploaded documents as described above, and through anything a member chooses to put into content, messages or a support ticket.

3a. Consent, release and waiver records

POIZ keeps versioned, auditable records of the legal agreements an account makes, so that consent can be proved and honored. When the relevant features are activated, those records include Media & Social Reuse Release consents and any later revocation, and Dance Activity Waiver & Assumption of Risk assents, together with the document slug, version, content hash, timestamp, the account that acted, the specific affirmative action taken, and — where a parent or legal guardian acted for a minor — the guardian identity, stated relationship and electronic signature needed to show the guardian gave the consent.

These records are used for rights and consent management (including stopping promotional use after a verified revocation), safety and risk acknowledgment, dispute handling and recordkeeping, and legal compliance. They are not used for advertising profiling.

Consent, release and waiver records are kept as evidence of what was agreed, subject to the retention section below. POIZ does not state a retention period for them here.

4. Where the information comes from

Directly from you when you register, complete onboarding, build a profile, upload content, compete, message, contact support or subscribe.

Automatically from your device when you use POIZ, for security, diagnostics and basic operation.

From a parent or legal guardian who completes a consent request.

From a studio or teacher who enters roster, class or enrollment information into their HQ workspace.

From service providers such as the authentication provider, hosting and storage, email delivery, and the payment processor.

5. Why POIZ uses it

To create and run accounts, profiles and workspaces; to host, deliver and display content; to run training, combos, challenges, scoring, rankings and rewards; to run POIZ HQ operations for studios and teachers; to process subscriptions and payments; to provide support; to keep people safe through moderation, reporting, age and guardian controls, and abuse and fraud prevention; to secure and debug the service; to communicate about your account and service changes; and to comply with legal obligations and defend legal claims.

POIZ's policy is to limit collection and retention to what is reasonably necessary and proportionate for the purpose described, and not to require unnecessary information as a condition of taking part. Whether the current signup and onboarding flow meets every COPPA minimization requirement is tracked as an open operational audit item.

6. Who it is disclosed to

Other users and the public. Profile details and content you post can be seen by other members and, where your profile or content is public, by visitors. Once something is shared, other people may have seen, copied or re-shared it.

Workspace visibility. Information entered in a POIZ HQ workspace is visible to the owners, admins and authorized members of that workspace according to their permissions.

Service providers acting on POIZ's instructions — categories include cloud hosting and database, media storage and delivery, authentication, email delivery, payment processing, automated video analysis, and error and performance diagnostics.

Legal, safety and security disclosures — to comply with law, respond to lawful requests, enforce the terms, protect the rights, property or safety of POIZ, its users or the public, and to make reports required by law, including reports relating to child safety.

Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this policy or a successor notice.

7. Sale and sharing of personal information

POIZ does not sell personal information for money.

POIZ does not currently use personal information for cross-context behavioral advertising, which is what California law calls "sharing". Sponsored banners and brand placements on POIZ are scheduled by POIZ to a placement and a broad audience label. They are not personalized using profiles of your activity across other businesses' sites or apps, and POIZ does not provide personal information to advertisers or ad networks for that purpose.

If that ever changes, POIZ will update this policy, provide notice before the change takes effect, and offer a compliant opt-out mechanism, including honoring an opt-out preference signal where legally required and obtaining opt-in consent for anyone under 16 where the law requires it.

8. Cookies, local storage and analytics

POIZ uses cookies and browser local storage for essential purposes: keeping you signed in, remembering preferences such as appearance and dismissed prompts, and supporting the installable app and offline behavior.

POIZ collects operational diagnostics needed to keep the service working and secure. POIZ does not run third-party advertising trackers for cross-context behavioral advertising.

Because POIZ does not currently sell or share personal information as those terms are defined in California law, there is nothing for an opt-out preference signal such as Global Privacy Control to opt you out of today. If POIZ ever introduces such processing, it will process a Global Privacy Control signal as a valid opt-out request where the law requires it. Browsers also send "Do Not Track" signals in inconsistent ways and there is no common standard; POIZ does not track you across other companies' sites in the first place.

9. California privacy rights (CCPA/CPRA)

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to POIZ. Whether POIZ meets the statutory thresholds is assessed on an ongoing basis; POIZ describes these rights so that California residents can exercise them regardless.

The categories collected, the purposes, the sources and the categories of recipients are set out in the sections above, which together serve as POIZ's notice at collection.

• Right to know and access — the categories and specific pieces of personal information POIZ has collected about you, the sources, the purposes and the categories of recipients.
• Right to delete — ask POIZ to delete personal information, subject to legal exceptions such as security, fraud prevention, legal compliance and defense of claims.
• Right to correct — ask POIZ to correct inaccurate personal information.
• Right to opt out of sale or sharing — POIZ does not currently sell or share personal information as defined by that law; if it ever does, an opt-out will be provided and an opt-out preference signal honored where required.
• Right to limit use of sensitive personal information — POIZ does not use sensitive personal information for purposes beyond those permitted without a limitation right; if that changes, a limit mechanism will be provided.
• Right to non-discrimination — POIZ will not deny service, charge a different price or provide a different quality of service because you exercised a privacy right.
• Authorized agents — you may use an authorized agent, and POIZ may ask for proof of authorization and verification of your identity.

10. CalOPPA disclosures

This policy is linked conspicuously from POIZ so it can be read without an account, including at /privacy and from the footer of the app.

The categories of information collected and the categories of third parties with which it may be shared are listed above.

You can review and change your profile and preference information at any time in your account settings, and you can request access, correction or deletion through the Support Center.

This policy shows a version and a last-updated date. When it changes materially, POIZ records a new version and provides notice in the app before the change takes effect.

Third-party tracking: POIZ does not permit third parties to collect personal information about your activity across different websites over time through POIZ.

11. Minors and children's privacy

POIZ under-18 model. Every account whose date of birth indicates the person is under 18 runs in a restricted state. A parent or legal guardian must receive POIZ's consent notice and complete it with an electronic signature before that account can post, upload, message, take part in training, compete, make payments or earn rewards. A minor's own confirmation is not sufficient. Under-18 accounts also run with safer defaults, including restricted messaging.

Federal COPPA standard for children under 13. United States federal law (the Children's Online Privacy Protection Act and 16 C.F.R. Part 312, including its 2025 amendments) requires an operator to give clear notice to parents and obtain verifiable parental consent before collecting, using or disclosing personal information from a child under 13, except for narrow legally permitted purposes such as obtaining consent itself, age screening, and internal support for the service. It also requires separate consent for targeted advertising and for certain disclosures to third parties, reasonable security, a written retention and deletion policy, data minimization, and a prohibition on conditioning a child's participation on providing more information than is reasonably necessary.

POIZ's guardian consent workflow is designed around these obligations. POIZ does not claim in this document that its current signup and onboarding flow satisfies every COPPA requirement; any gap between the flow and the standard is tracked as an operational item and is being addressed separately, and the legal standard controls over any statement here.

Parents' rights. A parent or legal guardian may review the personal information POIZ holds about their child, ask for it to be corrected or deleted, refuse to permit further collection or use, and withdraw consent at any time. Withdrawing consent returns the account to a restricted state and may mean the child can no longer use parts of POIZ.

Advertising to minors. POIZ does not run targeted advertising to accounts under 18. Sponsored banners and brand placements that appear in the app are scheduled editorially by POIZ to a placement, not targeted using a profile of a person's behavior.

California minors' rights. Under California Business and Professions Code sections 22580–22582, a registered user under 18 who is a California resident may request removal of content or information they posted. Submit the request through the Support Center. Removal may not be complete or comprehensive — for example, where the content was re-shared by someone else, where the law requires it to be kept, or where it has been anonymized.

12. How long POIZ keeps information

POIZ keeps personal information only as long as needed for the purpose it was collected for, or as long as the law requires. In practice:

ACTIVATION REQUIREMENT — this section does not yet state concrete deletion timeframes, and POIZ does not invent them here. Before this policy is activated, POIZ must adopt and publish counsel-approved, category-specific retention and deletion timeframes, with specific treatment for children's personal information (as the COPPA rule requires a written retention policy stating the purpose, the business need and a timeframe for deletion), backups, guardian-consent evidence, safety and moderation evidence, and billing and tax records.

• Account, profile and content — while the account is active, and for a limited period after closure for security, dispute and legal purposes.
• Date of birth and age state — while the account exists, because it drives safety behavior; collected and kept to the minimum needed for age assurance.
• Guardian consent and audit records — kept as evidence of consent for as long as needed to show consent was validly given and for the period required by law, even after the account closes.
• Billing, tax and transaction records — for the period required by tax and financial recordkeeping law.
• Moderation, safety and abuse records — for as long as needed for enforcement, appeals, repeat-offender detection, legal obligations and defense of claims.
• Device, log and security data — for a limited operational period appropriate to security and diagnostics.
• Backups — deleted content can persist in routine backups for a limited period before being overwritten.
• Children's information is not kept indefinitely: it is deleted when it is no longer needed for the purpose it was collected for, subject to legal retention.

13. Security

POIZ uses reasonable administrative, technical and organizational safeguards appropriate to the sensitivity of the information, including encrypted transport, access controls and row-level authorization rules in the database, restricted administrative access, audit records for sensitive administrative actions, and protections against destructive deletion of member records and media.

No online service can be completely secure. POIZ cannot guarantee that information will never be accessed, disclosed, altered or destroyed, and you are responsible for keeping your credentials safe.

14. Automated analysis and rankings

When you submit an attempt for scoring, the video is processed by an automated analysis system, which may involve a third-party processor acting on POIZ's instructions and under contract. Analysis runs only after consent is given in the app.

The output is a score, rating or feedback used for results, ranking and XP. It is probabilistic and may be wrong, and it is not professional advice. Where the product provides it, an administrator can review and adjust results, and adjustments are recorded in an audit trail.

POIZ does not state that user content is used to train third-party AI models. POIZ will not introduce such use without updating this policy and providing notice.

15. Other regions and your choices

Depending on where you live, you may have rights to access, correct, delete, port or object to certain processing, and to appeal a decision about a request. POIZ applies the core rights described here to requests it receives, and applies additional rights where the law requires.

You can edit profile and preference information in settings at any time, control profile and Talent Map visibility, control notification preferences, and request account deletion.

POIZ verifies requests before acting on them, so it may ask you to confirm control of the account.

16. Changes and contact

POIZ records a version number and a last-updated date for this policy. Material changes are versioned and announced in the app before they take effect.

Contact POIZ through the in-app Support Center at /support. POIZ does not publish an email address, postal address or phone number for legal notice at this time; a verified legal-notice channel will be published before this document is activated.