Privacy, in plain language

Account and service basics

We use account details to sign you in, keep your preferences, and show your own history. The active language, current page, and support message are used to provide the experience you request.

Health-related information you choose to share

You may report experience, body awareness, pain areas, pregnancy, high blood pressure, vertigo, energy, mood, or comments. The app uses these self-reported details to adjust practice and apply fixed safety rules. They are not a diagnosis and are not shared in an identifiable group report.

Practices and groups

We store practice plans, progress, check-ins, and feedback so your history and next session work. Group rooms store membership and shared session state. Group summaries are designed to be aggregated rather than identify a person's health details.

AI and provenance

AI may suggest a level, routine, or reflection in your selected language. Fixed safety rules review practice content and can override AI. Generated records keep locale and prompt-revision metadata so their source can be understood; AI output is not medical advice.

Billing and payment data

If you subscribe to Pro, Stripe processes your payment as Yoga's payment processor. Yoga never receives or stores your card number, CVC, or bank details; that information stays with Stripe. We store only what a subscription needs: your Stripe customer and subscription identifiers, the plan, its status, and its billing dates. Stripe may use your billing details for fraud prevention and tax compliance under its own terms.

Optional YouTube connection

If you connect YouTube, the app requests the read-only youtube.readonly scope. Access and refresh tokens stay in server-side storage. The server reads your channel title and playlist metadata when needed; playlist and channel titles remain in their original language. Yoga cannot upload, edit, or delete YouTube content with this scope.

Disconnecting in Yoga deletes the stored connection and tokens from this app. It does not promise to revoke Google's authorization; you can also revoke Yoga in your Google Account permissions. A support deletion request can include the Yoga-side connection record.

Service providers and external sites

Convex provides application storage and authentication. The configured AI provider processes the structured context needed to generate a suggestion. Google and YouTube handle OAuth and external playlist pages under their own terms. We do not translate or control third-party titles.

Retention and deletion

Account and practice records remain available while the product needs them to provide your saved experience. Use Support to request access or deletion. We will use the contact you provide to confirm the scope and next steps; this page does not claim an automatic completion time.

Your choices

You can practice without YouTube, stop sharing optional check-in details, disconnect YouTube, and request account-data access or deletion through Support. If you cannot sign in, the support form still works without an account.

Limits

No online service can guarantee absolute security. Avoid putting health or medical details in support reports. If a report concerns personal data, choose Privacy or Data deletion and provide only what is needed to locate the account.