Your Dressage Journey — Legal

Privacy Policy

Version: 1.0 Effective: May 1, 2026 Entity: Your Training Journey, LLC — Sadorus, Illinois
Our commitment to you: Your Dressage Journey exists to help you understand your own riding — not to profit from your personal data. This policy explains, in plain language, exactly what information we collect, why we collect it, who sees it, and what rights you have over it. Questions? privacy@yourdressagejourney.com

1 What Information We Collect

We collect only the information needed to provide and improve the Service.

1.1 Information You Give Us Directly

Account information
Your email address and a hashed password. We do not store your password in plain text.
Rider profile
Your riding level, years of experience, competition history, training frequency, learning style preferences, and long-term goals.
Horse profile(s)
Your horse's name, breed, age, competitive level, temperament, training history, and any quirks or challenges you describe.
Post-ride debriefs
Date, horse ridden, numerical ratings across training dimensions, narrative descriptions, emotional check-ins, and exercises practiced.
Reflections
Narrative responses across six categories: Personal Milestones, External Validation, Aha Moments, Obstacles, Connection, and Feel/Body Awareness.
Self-assessments
Rider self-assessment (focus, confidence, patience, feel), physical self-assessment (position, balance, strength, flexibility), and technical/philosophical self-assessment.
Observation notes
Notes from lessons, clinics, or video reviews, including observer feedback.
Journey events
Competition results, clinic participation, significant milestones, and other events you log.
Show preparation plans
Goals, concerns, and preparation details for upcoming competitions or clinics.
Payment information
Billing is handled entirely by Stripe. We do not receive or store your full credit card number — only a Stripe customer ID and the last four digits for display.

1.2 Information Generated by Your Use

AI coaching outputs
Journey Maps, Multi-Voice Coaching analyses, Grand Prix Thinking reports, Physical Guidance, Pre-Lesson Summaries, and Self-Assessment analyses — generated from your data and stored so you can access them over time.
Usage data
Pages visited, features used, time spent in the app, and error logs — collected to keep the platform running well.
Technical data
Browser type, operating system, and device type for compatibility and security. We do not use persistent advertising identifiers.

1.3 Information We Do Not Collect

  • Social Security numbers, government IDs, or financial account details beyond what Stripe provides
  • Health or medical records beyond what you voluntarily share in the context of your riding
  • Precise geolocation data
  • Data from advertising networks or third-party tracking pixels
  • Data from children under 18 — the Service is for adults only

2 How We Use Your Information

2.1 To Provide the Service

  • Store and display your training data so you can review your full history
  • Generate AI-powered coaching insights, pattern analyses, and reports
  • Enable longitudinal analysis across your training history over time
  • Process subscription payments and manage your account
  • Send transactional emails: account confirmation, billing receipts, password resets

2.2 To Improve the Service

With your consent (see Section 5.4), we may analyze anonymized, aggregated patterns across the platform — for example, identifying common obstacles at a particular training level. This analysis uses data from which all personally identifying information has been removed. Your individual riding content is never used for this purpose without your opt-in.

2.3 To Communicate With You

  • Service-related notices: Terms or Privacy Policy updates, maintenance windows, security alerts
  • Product updates or newsletters — only if you have explicitly opted in
  • Responses to your support requests

2.4 To Keep the Service Safe

  • Detect and prevent fraud, abuse, and unauthorized access
  • Monitor for security anomalies
  • Comply with applicable legal obligations

3 How Your Data Flows: Third-Party Processors

We share your data only with the service providers below, who process it on our behalf. We do not sell your data to, or share it with, any third party for their own marketing or advertising purposes.

ProcessorWhat they do with your dataTheir Policy
Google / Firebase Secure cloud storage of all training data; user authentication; application hosting; crash reporting policies.google.com/privacy
Anthropic (Claude API) Receives your training data to generate AI coaching insights. Transmitted over encrypted connections. Under our API agreement, Anthropic does not use your data to train its models. anthropic.com/privacy
Stripe Processes subscription payments. Receives billing information directly; we receive only a customer token and last-4 digits. stripe.com/privacy
Google Analytics Anonymized, aggregated usage data only — page views, feature usage. No personal riding content is shared. policies.google.com/privacy
Note on Anthropic: When you use YDJ's AI features, your training entries are transmitted to Anthropic's Claude API for analysis. This is core to how the Service works. Anthropic processes your data as a service provider under our agreement. We will update this policy if the terms of that agreement change in any way that affects your data.

4 Data Security

Encryption at rest
All data stored in Firebase is encrypted using AES-256.
Encryption in transit
All data transmitted between your device and our servers uses HTTPS/TLS 1.3. The same applies to data transmitted between our servers and third-party processors.
Per-user data isolation
Firestore security rules enforce strict isolation — no user can access another user's data.
Authentication
Email verification is required at registration. Passwords are hashed and never stored in plain text. Session tokens expire after 30 days.
Access controls
Admin access to production data is limited to authorized personnel only.

No security system is impenetrable. In the event of a data breach that materially affects your personal information, we will notify you as required by applicable law.

5 Your Choices & Rights

5.1 Access & Export

You can export your personal data at any time through Settings → Export My Data. Your export includes all structured data you have entered: training entries, reflections, self-assessments, lesson notes, profile data, journey events, and account settings including coach sharing consent records. Data is provided in JSON format. AI-generated coaching outputs are accessible within the platform and may be saved individually by copying or screenshotting them.

5.2 Correction

You can update or correct your account information and profile data at any time through your account settings. For data that cannot be edited in-app, contact us at privacy@yourdressagejourney.com.

5.3 Account Deletion

You may delete your account at any time through Settings → Delete My Account. Upon deletion:

  • Your personal data will be removed from our active systems within 30 days
  • Encrypted backup copies will be fully deleted within 60 days
  • Anonymized or aggregated insights already derived from your data — which cannot identify you — may be retained as part of platform analytics
  • Stripe retains billing records as required by financial regulation; contact Stripe directly to exercise your rights over that data

5.4 Aggregate Data Opt-Out

If you prefer that your data not be included in anonymized aggregate analysis (Section 2.2), opt out at any time through Settings → Privacy → Data Usage Preferences. This does not affect your access to any feature of the Service.

5.5 Marketing Communications

If you have opted into newsletters or product updates, unsubscribe at any time using the link in any email or through Settings → Notifications. You will continue to receive transactional emails regardless of marketing preferences.

5.6 California Residents (CCPA)

Right to KnowRequest disclosure of what we've collected, sources, purpose, and who we share with
Right to DeleteRequest deletion of your personal information, subject to legal exceptions
Right to Opt Out of SaleWe don't sell personal data. We'll honor any such request regardless.
Right to Non-DiscriminationWe will not treat you differently for exercising your CCPA rights

To submit a CCPA request, email privacy@yourdressagejourney.com with subject "CCPA Request." We will respond within 45 days.

5.7 Canadian Users (PIPEDA & Quebec Law 25)

If you are a resident of Canada, your personal data is handled in accordance with PIPEDA and, where applicable, Quebec's Law 25. You have the right to access, correct, and withdraw consent for non-essential data uses at any time. You also have the right to be informed of automated decision-making that affects you — YDJ uses AI to generate coaching insights from your data, which constitutes automated processing. You may request a human review of any output by contacting us.

To exercise your rights as a Canadian user, email privacy@yourdressagejourney.com. We will respond within 30 days.

5.8 European Users (GDPR)

Right of AccessObtain a copy of your personal data
Right to RectificationCorrect inaccurate data
Right to ErasureRequest deletion ("right to be forgotten")
Right to PortabilityReceive your data in machine-readable format
Right to ObjectObject to processing based on legitimate interests
Right to ComplainLodge a complaint with your local data protection authority

Our legal basis for processing is primarily contract performance (to provide the Service) and legitimate interests (security, fraud prevention, service improvement). Where we rely on consent — for marketing and aggregate data analysis — you may withdraw it at any time.

To exercise your GDPR rights, email privacy@yourdressagejourney.com. We will respond within 30 days.

6 Data Retention

Training data & AI outputs
Retained for the life of your account. Longitudinal data is what makes YDJ's pattern analysis meaningful. You may save or copy individual outputs from within the platform at any time.
Account information
Retained until account deletion, then purged within 30 days.
Usage and analytics data
Identifiable usage logs retained for 90 days for security and debugging, then deleted. Anonymized, aggregated analytics may be retained indefinitely.
Billing records
Stripe retains transaction records as required by financial regulation (typically 7 years). We retain subscription history for the same period.
Backup copies
Encrypted backups on a rolling 30-day window. Following account deletion, all backups containing your data are fully purged within 60 days.

7 Cookies & Tracking

Essential cookies
Required for the Service to function — session management and authentication. You cannot opt out of these while using the Service.
Analytics cookies
Google Analytics uses cookies to collect anonymized usage data. You may opt out through Settings → Privacy or using your browser's built-in opt-out tools.
No advertising cookies
We do not use advertising, retargeting, or cross-site tracking cookies of any kind.

A cookie consent notice is presented on first visit. You may update your preferences at any time through Settings → Privacy.

8 Children's Privacy

YDJ is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that a user under 18 has created an account, we will promptly delete that account and all associated data. If you believe a minor has registered, please notify us immediately at privacy@yourdressagejourney.com.

9 Data Transfers

Your Training Journey, LLC operates in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the United States and other countries where our processors maintain infrastructure.

For EU/UK/Swiss users: We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data receives equivalent protection when transferred outside the EEA. Our primary processors — Google, Anthropic, and Stripe — each maintain current SCCs or equivalent frameworks.

For Canadian users: Your data is processed in the United States in accordance with our contractual obligations and applicable Canadian privacy law. We have taken steps to ensure our processors provide comparable protection to that required under PIPEDA.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and through a prominent in-app notice at least 14 days before the changes take effect. The current version will always be available at yourdressagejourney.com/privacy.

For changes that significantly affect how we use your personal data, we will seek fresh consent where required by law. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

11 Contact Us

For privacy questions, data rights requests, or concerns about this policy:

Your Training Journey, LLC — Privacy
Sadorus, Illinois
privacy@yourdressagejourney.com
yourdressagejourney.com/privacy

We aim to acknowledge all privacy inquiries within 3 business days and resolve them within 14 days. Formal data rights requests (CCPA, GDPR, PIPEDA) will receive a response within the legally required timeframe for your jurisdiction.