1. What Data We Collect
Depending on how you use YOG Union (as a student/seeker or as an independent verified teacher/organisation), we collect the following categories of information:
A. Account & Identity Information
Name, email address, mobile phone number, profile photo, and authenticated credentials. For teachers, gurus, and studios: government accreditation certificates, qualifications, bio, and verification documents submitted during our onboarding audit.
B. Wellness & Health Preferences Sensitive Personal Data
Dinacharya daily routines (sleep/wake cycles, morning and evening habit logs, dietary preferences), yoga experience levels, body map / dosha selections, and consultation inquiries. This data is classified as sensitive wellness information and is protected with strict access restrictions.
C. Payments & Financial References
UPI transaction references (txnRef), UTR numbers, payment amounts, and order status timestamps.Security Guarantee: YOG Union never requests, accesses, or stores bank account PINs, credit or debit card numbers, CVVs, or internet banking passwords.
D. Technical, Device & Media Permissions
Device operating system (iOS, Android, Web), push notification tokens (managed through Expo EAS for class alerts), real-time connection diagnostics, and camera/microphone permissions. Camera and microphone access is requested strictly when joining live interactive studio video sessions and is never recorded without explicit prior consent.
2. Third-Party Service Providers & Data Sharing
We partner only with vetted technology infrastructure providers to deliver our core services. Each processor is contractually bound to process data strictly on our instructions:
- Supabase Inc.: Hosted cloud database, user authentication services, and secure cloud storage. Data is secured via PostgreSQL Row Level Security (RLS) policies.
- Daily.co: WebRTC encrypted streaming infrastructure used to host real-time interactive video and audio studio classes.
- Expo (EAS / 650 Industries): Push notification delivery routing for class schedule reminders and booking updates.
3. Data Subject Rights & Account Deletion (Google Play Mandate)
Under Indian law (DPDP Act 2023) and app store mandates (including Google Play and Apple App Store), you have sovereign control over your personal data:
- Right of Access & Correction: Review or modify your profile, contact details, and preferences at any time in your account settings.
- Right to Withdraw Consent: You may revoke push notification or media permissions at any time through your device operating system settings.
- Right to Complete Account Deletion: You can permanently delete your account directly inside our mobile applications under Settings → Account → Delete Account, or through our public web deletion page at yogunion.in/delete-account.
Account Deletion & Data Purge Guarantee:
Upon receiving an account deletion request, YOG Union permanently deletes your personal profile, authenticated credentials, past booking history, Dinacharya habits and routines, and chat conversations from our primary active databases. Backups are rotated and purged within thirty (30) days, except where retention of transaction records is strictly required by Indian taxation or accounting statutes.
4. Grievance Redressal Officer (Mandatory in India)
In accordance with the Information Technology Act 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Digital Personal Data Protection Act (DPDP Act 2023), YOG Union has designated a Grievance Redressal Officer:
Response & Redressal Timeline: The Grievance Officer shall acknowledge your communication within 48 hours and work to investigate and resolve grievances within 15 days of receipt.
5. Children’s Privacy
YOG Union is intended for individuals aged 18 and older. We do not knowingly collect personal information from minors without verifiable parental or guardian consent. If we become aware that an account belongs to a minor without parental authorization, we take prompt steps to terminate the account and purge the associated data.
6. Policy Updates & Modifications
We may periodically revise this Privacy Policy to reflect changes in regulatory statutes or platform features. When changes are made, we will update the date at the top of this document and notify active users via email or in-app notice where required by law.