Privacy policy

Last updated: 5 October 2026

Who we are

ADHD Bachata (adhdbachata.com and checklist.adhdbachata.com, together "the service") is run by ADHD Bachata. We are the controller of your personal data. You can reach us at any time at hello@adhdbachata.com.

What we collect

• Account details. You sign in with your Google account. When you do, Google shares the basic profile information you agree to: your name, email address, and profile picture. We never see or receive your Google password.
• Your checklist progress. The skills you tick, your levels, your certificates, and the dates you earned them.
• Technical information. Like almost every website, our hosting provider automatically records basic technical data when you visit, such as your IP address, browser type, and the time of the request. This is used to keep the service running and secure.
• Messages you send us. If you email us, we keep that conversation so we can reply.

We don't collect payment details, precise location, or any sensitive information. Please don't enter health information or other sensitive details anywhere in the service.

How and why we use it

• To create your account, log you in, and save your progress so you can see it on any device. This is necessary to provide the service you asked for (GDPR Art. 6(1)(b)).
• To keep the service secure, prevent misuse, and fix problems. This is in our legitimate interest in running a safe, working service (Art. 6(1)(f)).
• To reply when you contact us (Art. 6(1)(b) or (f)).

We don't use your data for advertising, we don't build marketing profiles, and we never sell or rent your personal data to anyone.

Who helps us run the service

We use a small number of trusted providers who process data on our behalf, only to run the service:

• Supabase stores account and checklist data and handles logins.
• Vercel hosts the website and the checklist app.
• Google handles sign-in. Google's own privacy policy applies to what happens on their side.
• Google Fonts supplies the fonts on our website, so your browser connects to Google's servers, which receive your IP address.

Some of these providers may process data outside the EU/EEA, including in the United States. Where that happens, transfers are protected by safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

If you use the "Share to Instagram Story" button, the certificate image is created on your device and shared by you through Instagram. We don't receive anything back from Instagram.

Cookies and local storage

We only use cookies and similar browser storage that are strictly necessary: to keep you logged in and to save your progress. We don't use advertising cookies, tracking pixels, or analytics, so there's no cookie banner to click through.

How long we keep it

We keep your account and progress for as long as your account exists. If you ask us to delete your account, we delete your personal data within 30 days, apart from anything we're legally required to keep. Technical logs held by our hosting providers are kept only for a short period and then deleted automatically.

Your rights

Depending on where you live, you have the right to:

• get a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data and account deleted
• restrict or object to how we use your data
• receive your data in a portable format

To use any of these rights, email hello@adhdbachata.com. We'll reply within one month. If you're in the EU or EEA and you're not happy with how we handle your data, you can also complain to your local data protection authority.

If you live in the United States: we don't sell or share personal information for advertising, and we treat requests to access or delete your data the same way wherever you live.

Age limit

The service is meant for people aged 16 and over. We don't knowingly collect data from anyone younger. If you believe a child under 16 has created an account, please contact us and we'll delete it.

Keeping your data safe

We use encrypted connections (HTTPS), secure login handled by Supabase, and access controls so that only you can see your own progress. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If the changes are significant, we'll let account holders know.

Contact

Questions about privacy? Email hello@adhdbachata.com.