Privacy Policy

Effective date: March 2026

Introduction

Welcome to WeeshWay.

WeeshWay ("us," "we," or "our") operates the WeeshWay mobile application (hereinafter referred to as "Service").

Our Privacy Policy governs your use of the Service, and explains how we collect, safeguard and disclose information that results from your use of our Service.

We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Our Terms of Service ("Terms") govern all use of our Service and together with the Privacy Policy constitute your agreement with us ("agreement").

Definitions

• SERVICE means the WeeshWay mobile application operated by WeeshWay.
• PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
• USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a session or features used).
• DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.
• DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
• DATA SUBJECT is any living individual who is the subject of Personal Data.
• THE USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
• TEACHER means an independent dance instructor who publishes and offers classes through the Service.
• STUDENT means a User who books classes through the Service.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

• Name, email address, and phone number
• Profile photo and date of birth (for age verification)
• Dance style preferences, wish descriptions, and music preferences
• Teacher profile information (qualifications, bio, class descriptions, venue details)
• Payment information (billing name, payment method identifiers). Full card numbers are processed by Stripe and never stored by WeeshWay.
• Reviews, ratings, photos, and videos you post on the Service
• Messages exchanged through the Service, support requests, and dispute reports

We may use your Personal Data to contact you with booking confirmations, payment receipts, payout notifications, and other service-related communications. With your consent, we may also send marketing or promotional materials. You may opt out of receiving promotional communications at any time by using the unsubscribe link or by emailing at contact@weeshway.com.

Usage Data

We may also collect information that your device sends whenever you use our Service ("Usage Data").

This Usage Data may include information such as your device's Internet Protocol address (e.g. IP address), device type, operating system, app version, the features of our Service that you use, the time and date of your interactions, the time spent on those features, unique device identifiers and other diagnostic data.

Location Data

With your permission, we may collect and process information about your precise location using GPS. We use this information to show you nearby classes and improve geographic matching with Teachers. You can enable or disable location services at any time through your device settings. If precise location is disabled, we may still use your IP address to determine your approximate location.

Attendance Data

The Service provides an optional QR code check-in feature. When used, we collect a timestamp and confirmation of attendance at a class. This data is used for attendance verification and dispute resolution.

Recommendation System

WeeshWay uses an automated recommendation system to help Students discover relevant classes. The system uses mathematical representations (vector embeddings) to match your preferences with available classes based on dance style, music similarity, and location.

The recommendation system is a discovery aid only — it does not restrict your access to any class, and it does not make decisions that produce legal or similarly significant effects on you. You can always browse, search, and book any available listing regardless of recommendations.

You may disable personalized recommendations at any time through App settings or by contacting us at contact@weeshway.com.

Use of Data

WeeshWay uses the collected data for various purposes:

• to provide and maintain our Service;
• to process bookings, payments, refunds, and Teacher payouts;
• to facilitate communication between Students and Teachers;
• to verify attendance through QR code check-in;
• to resolve disputes and process reports filed through the Service;
• to notify you about changes to our Service;
• to provide customer support;
• to gather analysis or valuable information so that we can improve our Service;
• to monitor the usage of our Service;
• to detect, prevent and address fraud, abuse, and technical issues;
• to provide personalized class recommendations;
• to provide you with news, special offers and general information about our Service, unless you have opted not to receive such information;
• to comply with applicable laws and legal obligations;
• for any other purpose with your consent.

Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable accounting or tax laws), resolve disputes, and enforce our legal agreements and policies.

Generally, active account data is retained for the duration of your account plus 30 days after deletion. Booking and transaction records are retained for up to 7 years to comply with accounting and tax requirements in applicable jurisdictions. Dispute records are retained for 3 years from resolution. Server logs are retained for 90 days on a rolling basis.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Finland and choose to provide information to us, please note that we may transfer the data, including Personal Data, to Finland and other countries where our service providers operate, and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

WeeshWay will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. Where required by applicable law, we use Standard Contractual Clauses or other approved transfer mechanisms.

Disclosure of Data

We may disclose personal information that we collect, or you provide:

To Other Users

When you book a class, your name and booking details are shared with the Teacher. When you publish a class as a Teacher, your profile information, class details, and venue address are shared with Students. This sharing is necessary to perform the booking.

Disclosure for Law Enforcement

Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.

Business Transaction

If we or our subsidiaries are involved in a merger, acquisition or asset sale, your Personal Data may be transferred. You will be notified before your Personal Data is transferred and becomes subject to a different privacy policy.

Other Cases

We may disclose your information also:

• to contractors, service providers, and other third parties we use to support our business;
• to fulfill the purpose for which you provide it;
• for any other purpose disclosed by us when you provide the information;
• with your consent in any other cases;
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our users, or others.

No Sale of Data

WeeshWay does not sell, rent, or trade your personal information to third parties for their marketing or advertising purposes.

Security of Data

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, row-level security policies in our database, and secure authentication with hashed credentials.

Remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. In the event of a data breach that poses a significant risk to you, we will notify you and applicable authorities as required by law.

Service Providers (Subprocessors)

WeeshWay engages a limited number of third-party service providers ("subprocessors") to support the delivery of our services. These subprocessors may have access to personal data only as necessary to provide their services to WeeshWay, and all subprocessors are bound by confidentiality and data protection obligations consistent with applicable privacy laws.

Payments — Stripe

All financial transactions are processed by Stripe, Inc. We do not store or collect your payment card details. That information is provided directly to Stripe, whose use of your personal information is governed by their Privacy Policy.

Teachers receive payouts through Stripe Connected Accounts. When you register as a Teacher, identity and financial information is shared with Stripe to create a connected account. Stripe acts as an independent controller for this data.

Cloud Infrastructure — Supabase

WeeshWay uses Supabase for database hosting and backend services. All data is encrypted at rest and in transit. Supabase processes data on our behalf under a data processing agreement.

Analytics

We may use third-party analytics tools to monitor and analyze the use of our Service. Where these tools process personal data, we minimize identifiable information and use privacy-preserving configurations.

Push Notifications

With your consent, we send push notifications for booking updates and, optionally, promotional content. You can manage notification preferences in your device settings and within the App.

Additional Information for Teachers

Public Profile. Your Teacher name, bio, dance styles, class descriptions, ratings, and profile photo are publicly visible on the Service. You control what optional information you include beyond the required fields.

Platform Scoring. WeeshWay may maintain an internal reliability score based on objective factors such as cancellation rate, dispute history, and booking fulfillment. This score may affect search ranking. You can request information about the factors used and contest any determination you believe is inaccurate.

Tax Responsibility. You are solely responsible for all tax reporting and payment obligations in your jurisdiction. WeeshWay may provide transaction summaries but does not provide tax advice or withhold taxes on your behalf, unless legally required to do so.

Children's Privacy

Our Services are not intended for use by children under the age of 18 ("Child" or "Children").

We do not knowingly collect personally identifiable information from Children under 18. Bookings for minors must be made by a parent or legal guardian, and only the parent/guardian's personal data is collected for that booking.

If you become aware that a Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

Your Data Protection Rights Under GDPR

If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR.

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at contact@weeshway.com.

In certain circumstances, you have the following data protection rights:

• the right to access, update or to delete the information we have on you;
• the right of rectification — you have the right to have your information rectified if that information is inaccurate or incomplete;
• the right to object — you have the right to object to our processing of your Personal Data;
• the right of restriction — you have the right to request that we restrict the processing of your personal information;
• the right to data portability — you have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format (JSON or CSV);
• the right to withdraw consent — you also have the right to withdraw your consent at any time where we rely on your consent to process your personal information;
• the right not to be subject to solely automated decision-making — WeeshWay's recommendation system does not make decisions with legal or similarly significant effects (see Recommendation System section above).

Please note that we may ask you to verify your identity before responding to such requests. We will respond within one (1) month, extendable by two months for complex requests with notice to you.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EEA. For Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi.

Legal Bases for Processing (EEA/UK Users)

We process your Personal Data under the following legal bases:

• Contract performance: Account management, bookings, payments, payouts, dispute resolution, refunds.
• Consent: Precise location access, marketing communications, optional analytics.
• Legitimate interests: Platform security, fraud prevention, service improvement, recommendation optimization, enforcement of Terms of Service.
• Legal obligation: Tax records, regulatory compliance, lawful authority requests.

Your Data Protection Rights under CCPA

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data and not to sell (share) it. To exercise your data protection rights, you can make certain requests and ask us:

What personal information we have about you

If you make this request, we will return to you:

• The categories of personal information we have collected about you.
• The categories of sources from which we collect your personal information.
• The business or commercial purpose for collecting your personal information.
• The categories of third parties with whom we share personal information.
• The specific pieces of personal information we have collected about you.

Please note, you are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months.

To delete your personal information

If you make this request, we will delete the personal information we hold about you as of the date of your request from our records and direct any service providers to do the same. In some cases, deletion may be accomplished through de-identification of the information.

To stop selling your personal information

We don't sell or rent your personal information to any third parties for any purpose. You are the only owner of your Personal Data and can request disclosure or deletion at any time.

Please note, if you ask us to delete or stop selling your data, it may impact your experience with us, and you may not be able to participate in certain features which require the usage of your personal information to function. But in no circumstances will we discriminate against you for exercising your rights.

To exercise your California data protection rights described above, please send your request(s) by email to contact@weeshway.com. We will respond within 45 days, extendable by an additional 45 days with notice.

Your Data Protection Rights under the LGPD (Brazil)

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to: request confirmation of processing; access your data; correct incomplete or inaccurate data; request anonymization, blocking, or deletion of unnecessary data; request data portability; obtain information about public and private entities with whom data is shared; and revoke consent.

To exercise these rights, contact us at contact@weeshway.com.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update "effective date" at the top of this Privacy Policy. For material changes, we will provide at least thirty (30) days' advance notice.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: contact@weeshway.com

If you are located in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.