Privacy Policy

Welcome to YogaFlow. YogaFlow is an AI-powered yoga platform that uses your device camera and pose-detection technology to guide your practice, track your progress, and personalize your sessions.

This Privacy Policy applies both to our website at yogaflow.ai and to the YogaFlow mobile app for iOS. It explains what information we collect, how we use it, and the choices you have. By creating an account or using YogaFlow, you agree to the practices described here.

We collect the following categories of information:

• Account information — your name, email address, and a securely hashed password.
• Profile photo — an optional picture you choose from your device's photo library to display on your profile. We request photo-library access only at the moment you choose to set one.
• Camera & pose data — body-position keypoints derived from your camera feed during a session (see Section 3).
• Purchase & credit data — your credit type (trial or purchase), remaining practice balance, and the transaction identifier for any practice-hour pack you buy.
• Technical data — basic device, browser, and usage information needed to operate and secure the service.

We do not collect microphone or audio recordings. The app plays spoken guidance to you, but never records sound.

YogaFlow needs access to your device camera to provide real-time pose feedback. During a session, your camera frames are processed to estimate body-position keypoints (the coordinates of your joints) so the AI can assess your form.

This processing happens entirely on your own device. Your camera frames, photos, and video are never uploaded to our servers and are never stored by us. Only the resulting numeric keypoints — a small set of joint coordinates, from which you cannot be identified or your surroundings reconstructed — are sent to our servers so the AI can evaluate your form and give live guidance.

We do not collect face data. YogaFlow does not use face detection, face recognition, facial geometry, or face authentication of any kind, and does not create a faceprint or template. The pose model we use produces a standard 33-point whole-body skeleton, and eleven of those points sit on the head — nose, eyes, ears and mouth corners. They are plain numeric coordinates, used only to work out where your head is and which way it is facing so we can judge your alignment. They are not facial geometry, they cannot identify you, and they cannot be used to recognise or authenticate anyone. Like every other keypoint, they are never stored: they exist only in memory while your session is running, and are discarded when it ends.

We use this pose information to give you live guidance and to record a summary of your session (such as average accuracy per pose). We do not sell your camera or pose data, and you can revoke camera access at any time through your browser or device settings — though pose-feedback features will not work without it.

We use your information to:

• Provide, personalize, and improve your yoga sessions.
• Track your progress, streaks, goals, and session history.
• Manage your account, subscription, and practice-credit balance.
• Send you account-related communications and, where you have opted in, product updates.
• Maintain the security, integrity, and performance of the service.
• Comply with legal obligations.

On the website we use cookies and browser local storage to keep you signed in, to remember preferences (for example, the last dashboard or admin tab you viewed), and to operate the service. You can control cookies through your browser settings, but disabling them may affect functionality.

The iOS app does not use cookies for sign-in. It stores your session token in the device's encrypted secure storage (the iOS Keychain) so you stay signed in between launches. Signing out or deleting the app removes it.

Practice-hour packs bought inside the iOS app are processed by Apple through the App Store's in-app purchase system. Apple handles the payment and your payment details entirely — we never see or receive your card, bank, or billing information. Apple provides us only with a signed transaction record, which we use to verify the purchase and credit the corresponding practice hours to your account.

Purchases made on our website are handled by a third-party payment processor, which receives your payment details directly under its own privacy policy. We store only the resulting order reference and the credits added to your account.

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers — trusted vendors who help us operate YogaFlow (such as cloud hosting, storage, and payment processing) under confidentiality obligations.
• Legal reasons — when required by law, regulation, or valid legal process, or to protect the rights, safety, and security of YogaFlow and its users.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you where required.

We use reasonable technical and organizational measures to protect your information, including encryption of passwords and secured access to our systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

You can permanently delete your account and its data at any time, directly in the app: open the Profile tab and choose Delete account. You will be asked to confirm, because the deletion cannot be undone.

Deleting your account removes your account information, profile photo, session history, and remaining practice credits. Any unused practice hours are forfeited and are not refundable. We may retain a minimal record of completed transactions where we are legally required to do so, and anonymized aggregate statistics that cannot be linked back to you.

If you cannot access the app, email us at hi@yogaflow.ai from your registered address and we will delete your account for you.

Depending on your location, you may have the right to access, correct, update, or delete your personal information, object to or restrict certain processing, and request a copy of your data. You can update much of your information directly in your account settings, or contact us using the details below.

YogaFlow is not directed to children. You must be at least 13 years old to create an account — or older where your country sets a higher minimum age for consent to data processing (for example, 16 in parts of the European Economic Area).

We do not knowingly collect personal information from children below those ages. If you believe a child has provided us with personal information, contact us at hi@yogaflow.ai and we will delete it.

YogaFlow relies on third-party technologies and services — for example, cloud hosting and storage, payment processors, and on-device pose-detection libraries. These providers process data only as necessary to deliver their service to us. This Privacy Policy does not cover the practices of third parties we do not control.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you. Your continued use of YogaFlow after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at hi@yogaflow.ai.