Privacy Policy

Last Updated: June 29, 2026

Easy Yoga ("we," "us," "our," or the "Company"), accessible at easyyoga.app and app.easyyoga.app (the "Site," "App," or "Platform"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website, applications, products, and services (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

Easy Yoga is the data controller responsible for your personal information. For any privacy questions or requests, contact us at support@easyyoga.app.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and any optional profile details. Easy Yoga uses passwordless sign-in (magic link) — we do not collect or store passwords.
• Onboarding Quiz Responses: Answers to our onboarding questionnaire, including your age, gender, fitness level, target focus areas (e.g. back, abs, legs), goals, current and target weight, height, and activity preferences.
• Health-Related Information: Some quiz answers describe your physical condition, fitness level, body measurements, and wellness goals. See Section 3.1 for how we treat this as special-category data.
• Payment Information: Billing address and payment method details. Payment card data is processed directly by Stripe, Inc. and is never stored on our servers. We retain only limited transaction metadata (e.g. last 4 digits of your card, subscription status).
• Communications: Any messages, emails, or other communications you send to our support team.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features used, time spent, content watched, watch progress, click patterns, quiz completion progress, and navigation paths.
• Log Data: IP address, access timestamps, referring URLs, and error logs.
• Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to enhance your experience and analyze usage. See Section 8 for details.

1.3 Information from Third Parties

• Payment Processors: Transaction confirmations, payment status, and fraud indicators from Stripe.
• Analytics Providers: Aggregated usage data from analytics tools.
• Advertising Partners: Conversion data from advertising platforms when you interact with our advertisements.

2. How We Use Your Information

• Providing the Service: To create and manage your account, process your onboarding responses, deliver access to our yoga and pilates video library, track your watch progress and favorites, and manage your subscription.
• Payment Processing: To process subscription payments, manage billing cycles and renewals, and send invoices or receipts.
• Communications: To send you transactional emails (sign-in links, receipts, account notices) and, with your consent, marketing communications.
• Improvement: To analyze usage patterns, identify bugs, improve features, and develop new functionality.
• Security: To detect fraud, prevent abuse, and protect the security of our Service and users.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or government requests.

3. Legal Basis for Processing (GDPR)

If you are located in the EEA or United Kingdom, we rely on the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have subscribed to.
• Consent: Where you have given explicit consent (e.g. health-related data, marketing emails, non-essential cookies).
• Legitimate Interests: Analytics, fraud prevention, and service improvement.
• Legal Obligation: Processing necessary to comply with a legal obligation (e.g. tax record retention).

3.1 Health-Related Data (Special Category)

Some onboarding answers (fitness level, body measurements, physical goals) may qualify as special-category data under GDPR Article 9. We process this data only with your explicit consent, captured at onboarding, and only to recommend and frame content within the library. You may withdraw this consent at any time by contacting support@easyyoga.app; withdrawal does not affect processing carried out before withdrawal. We do not use this data for automated decision-making with legal or similarly significant effects, and we do not sell it.

Important: Easy Yoga is a fitness and wellness product, not a medical service. The content is not medical advice and is not a substitute for professional healthcare. See our Terms & Conditions for the full health disclaimer.

4. Data Storage and Retention

4.1 Storage Location

Your data is stored on servers operated by Supabase and Amazon Web Services (AWS), and video content is delivered via our video CDN provider. Data may be transferred to and processed in the United States and other jurisdictions where our providers operate. If you are located outside these jurisdictions, your data will be transferred there subject to the safeguards in Section 11.

4.2 Retention Periods

4.3 Account Deletion

You may request deletion of your account and personal data at any time by contacting us at support@easyyoga.app. Your personal data will be permanently deleted within 30 days. Payment records will be retained as required by law.

5. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

5.1 Service Providers

5.2 Legal Requirements

We may disclose your information if required by law, regulation, court order, or government request.

5.3 Business Transfers

In the event of a merger or acquisition, your personal data may be transferred. We will notify you of any such change.

6. Your Rights

6.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time.

6.2 EEA / UK (GDPR)

You additionally have the right to restriction, objection, withdrawal of consent (including consent to health-data processing), and to lodge a complaint with your local supervisory authority.

6.3 California Residents (CCPA/CPRA)

You have the right to know, delete, correct, and opt-out of the sale or sharing of your personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, contact us at support@easyyoga.app. We will respond within 30 days (or 45 days for CCPA requests, where permitted).

7. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@easyyoga.app.

8. Cookies and Tracking Technologies

You can control cookies through your browser settings or our cookie banner. Blocking essential cookies may prevent you from using certain features.

9. Data Security

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS).
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. Row-Level Security (RLS) ensures each user can only access their own records.
• Payment Security: Payment card data is processed by Stripe (PCI DSS Level 1 certified). We never store full card numbers.
• Infrastructure: Our servers are hosted on secure, SOC 2-compliant infrastructure.

While we take reasonable precautions, no method of transmission or storage is 100% secure.

10. International Data Transfers

If you are located outside the United States, your data may be transferred to and processed in the United States and other jurisdictions. We ensure that appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses (SCCs) where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last Updated" date and notify you via email or a prominent notice on the Platform at least 14 days before the changes take effect.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@easyyoga.app
• Website: easyyoga.app