Privacy Policy

We collect information you give us, including your email address, display name, workout interests, marketing preference, and messages you send us. If you use a program, we also store your enrolments, completed sessions, progress, XP, and streak-related activity.

Our hosting and analytics providers may process basic technical, usage, device, network, and performance information when you visit or use the service. We do not ask you to provide medical or other sensitive health information.

We collect information directly from forms and account activity, and automatically through the service. We use it to create and secure your account, send sign-in links, deliver and improve workouts and programs, track your progress, provide support, understand service performance, prevent misuse, and meet legal obligations. We send launch and workout emails only while your marketing preference is on.

We use service providers to operate Tingting, including Supabase for authentication and database hosting, Vercel for website hosting and analytics, Resend for transactional account email, Cloudflare Turnstile for bot and abuse protection, and YouTube for embedded workout videos. They process information for us under their own security and privacy terms. These providers may process information in the United States and other countries where they or their subprocessors operate. We may also disclose information if required by law, to protect users or the service, or as part of a business transfer. We do not sell personal information.

Tingting uses essential browser storage and cookies to keep members signed in and secure sessions. Cloudflare Turnstile processes limited device and network signals when protecting account forms from automated abuse. Embedded YouTube content may communicate with YouTube when it loads or plays; we use YouTube's privacy-enhanced domain where supported. Your browser can block storage or third-party content, but some member, security, and video features may stop working.

We keep account and progress information while your account is active and as reasonably needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations. When you delete your account, we remove it from active systems; limited records may remain temporarily in provider logs or backups. We use access controls, encrypted connections, and managed infrastructure, but no online service can promise absolute security.

You can correct your display name, change your email preference, or delete your account from the Account page. You may also email us to request access to or correction of personal information, ask a privacy question, or make a complaint. We will verify requests where appropriate and respond within a reasonable time. You can turn off marketing in your account or use the unsubscribe option in an email.

Tingting is not directed to children under 13. If you are under the age at which you can consent to data processing or enter these Terms in your location, use the service only with permission and supervision from a parent or guardian. Contact us if you believe a child gave us personal information without appropriate permission.

We may update this policy as the service changes. We will post the new date here and provide additional notice when a change is significant. For access, correction, complaints, or any privacy question, email hello@tingting.dance. If we cannot resolve an eligible Australian privacy complaint, you may be able to contact the Office of the Australian Information Commissioner.