Privacy Policy

1. Information We Collect

When you interact with YogaPracticeHub ("the Academy", "we", "us", or "our"), we collect only the minimum necessary information required to operate our training portal and deliver an exceptional practice experience:

• Account Credentials: Name, email address, and encrypted password hash (utilizing industry-standard bcrypt salt algorithms).
• Practice & Progression Telemetry: Session completions, hold timer records, streak counts, bookmarked poses, and program pathway selections stored to provide continuity across your devices.
• Inquiries & Correspondence: Communication received through our contact form, support requests sent to yogapracticehub@protonmail.com, and technical error logs.
• Technical Diagnostics: Browser type, operating system, preferred language, and timestamp telemetry to optimize page load speeds and prevent unauthorized credential attacks.

2. How Payment Data is Processed

All financial transactions, currency conversions, subscription billings, and invoicing are conducted exclusively via our authorized global payment merchant, DodoPayments.

YogaPracticeHub never receives, processes, or retains sensitive raw cardholder numbers, CVV codes, or banking PINs on its servers. DodoPayments operates under strict PCI-DSS Level 1 compliance with 256-bit SSL encryption. We receive only tokenized payment identifiers and confirmation status codes to activate your subscription tier.

3. Use of Collected Data

We process your information strictly for lawful purposes including:

• Authenticating your member portal access and verifying active subscription entitlements.
• Maintaining your personalized streak records, multi-week program progression, and practice timers.
• Responding promptly to support, billing, or curriculum inquiries within 24–48 hours.
• Dispatching critical account notifications, payment receipts, password reset links, or essential safety notices.
• Protecting the security and integrity of our network against automated fraud and abuse.

4. Cookies & Local Session Storage

We utilize essential session cookies and local browser storage solely to remember your login token, active video timer preferences, and theme state. We do not sell tracking cookies or provide your digital fingerprint to third-party ad networks. You may disable cookies through your browser settings; however, certain interactive session features may require login verification.

5. Your Rights: Access, Correction & Deletion (GDPR & CCPA)

Regardless of your geographical location, we extend full global privacy protections:

• Right to Access: You may request a complete export of your personal information and practice telemetry at any time.
• Right to Rectification: You may correct or update your profile information directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the irreversible, permanent deletion of your account and related records by contacting our privacy officer.
• Right to Non-Discrimination: You will never receive diminished service quality or pricing variations for exercising your statutory privacy rights.

6. Third-Party Service Providers

We collaborate exclusively with reputable infrastructure partners bound by confidentiality and data processing agreements:

• DodoPayments: Global merchant of record and payment gateway.
• FormSubmit & ProtonMail: Encrypted inquiry ingestion and secure customer support communications.
• Cloud Hosting & CDN Infrastructure: Low-latency global edge network with encrypted data transmission.

7. Contact Our Privacy Officer