Privacy Policy

This English translation is provided for convenience; the French version prevails.

Data controller: Alisa Akulieva — contact@heelsschool.com. This page describes what we collect, why, for how long, and how to exercise your rights.

What we collect, and why

Account and purchases

Email address, first name, purchase history and subscription status — needed to perform the contract: opening your access, issuing your invoices, answering your requests.

Progress

Playback position and completed classes — so you can pick up right where you left off. This data stays internal and is never used for profiling.

Payment

Payment is processed by Stripe; we never see your card number. Stripe acts as a processor and, for fraud prevention, as a separate controller.

Analytics

We use Vercel Analytics, a cookie-free measurement with no cross-site tracking: no consent banner is required. The website sets no advertising cookies.

Emails

If you leave your address to receive a free document, you can unsubscribe in one click from every message. We never buy or sell mailing lists.

The Heels Club

The Heels Club is a private discussion space, by invitation from Alisa. What follows concerns only those who join it.

Your phone number

Alisa invites you using the number she already has for you. That number is used as a key once, at the door: it is never stored in clear text. We keep only a cryptographic fingerprint of it (HMAC-SHA256 with a secret server key), from which the number cannot be recovered, plus the country dialling code and the last two digits — enough for Alisa to recognise you in her list, not enough to reconstruct your number. No other member sees your number, your email address or your name. This limit is not merely a display rule: the database itself only permits reading the first name you chose.

What you post

Your messages and files are kept so the conversation can exist. Messages exchanged privately with Alisa are readable only by her and you. A message you withdraw disappears immediately for everyone else.

Who can technically read it

We would rather say this plainly than let you assume otherwise: the club is not end-to-end encrypted. The following can therefore technically access the content: Alisa (for moderation), the site's technical administrator, and our database host (Supabase). This is a deliberate choice — it is what makes it possible to actually remove someone, to withdraw a message, and to send you a readable notification. We do not promise anonymity; we guarantee that no contact details are visible to other members.

Notifications

If you turn them on, we store the subscription identifier provided by your browser so we can alert you. Notifications say who wrote and where, never the content of the message. You can turn them off at any time from within the club.

For how long

• Photos, videos and voice messages: 90 days, then deleted automatically;
• Written messages: 12 months;
• Number fingerprint: for as long as you are a member, erased when you leave the club (on simple request);
• Notification subscription: until you turn it off or change device.

To leave the club and erase what concerns you, a message to Alisa or to contact@heelsschool.com is enough.

Where your data lives

• Supabase (database hosting, European Union) — accounts and progress;
• Stripe Payments Europe (Ireland) — payments;
• Bunny.net (Slovenia) — video streaming;
• Vercel (United States, standard contractual clauses) — website hosting;
• Resend — transactional emails.

For how long

• Account: as long as it is active, then 3 years after your last login;
• Invoices: 10 years (accounting obligation);
• Waiting-list address: 3 years without interaction;
• Progress: deleted along with the account.

Your rights

Access, rectification, erasure, portability, restriction and objection: write to contact@heelsschool.com from the address linked to your account — reply within one month. The steps for deleting your account are also set out in your account area. You may lodge a complaint with the CNIL, the French data protection authority (cnil.fr), if you believe your rights have been ignored.