Privacy Policy

1. Who we are (Controller)

2. What data we collect

We collect the following categories of data:

• Account & Contact Data: name, email, password (hashed), country, time zone, and any profile details you add (photo, bio, yoga interests).
• Subscription & Billing Data: plan, status, renewal dates, purchase history, and limited payment details (e.g., last 4 digits, card brand) from our payment processor. We do not store full card numbers.
• Community Content: posts, comments, messages, reactions, and any media you share in the members area. Remember: content you share with the community may be visible to other members.
• Support & Communications: messages you send us (email, forms), feedback, and survey responses.
• Usage & Device Data: pages viewed, features used, IP address, device type, browser, approximate location, and cookies/analytics identifiers.
• Marketing Preferences: your opt-in/opt-out choices for newsletters and updates.

3. How we use your data (Lawful bases)

We use your data for:

• Providing the Services (create/manage your account, deliver classes, enable the community, process payments, send service emails) — contract.
• Community safety and moderation (enforcing rules, handling reports, protecting from abuse/fraud) — legitimate interests and legal obligations.
• Improving our Services (analytics, troubleshooting, research, new features) — legitimate interests.
• Marketing (newsletters, offers, event updates) — consent where required, otherwise legitimate interests with an opt-out.
• Legal and compliance (tax, accounting, regulatory requests, enforcing terms) — legal obligation and legitimate interests.

You can withdraw consent at any time where consent is the basis.

4. Cookies and analytics

We use cookies and similar technologies to:

• Keep you signed in;
• Remember preferences;
• Measure traffic and performance.

Some cookies are necessary for the Site to work. Others (e.g., analytics, marketing) are optional and used only with your consent where required. You can manage cookies through your browser settings and our cookie banner. (See our Cookie Notice for details.)

5. Payments

Payments are processed by reputable third-party processors (e.g., Stripe or similar). These providers act as independent controllers or processors for your payment data. We receive limited billing details (not full card numbers) to manage your subscription and receipts.

6. Community features

• Your profile and community content can be visible to other members according to your settings and the community rules.
• Please do not share sensitive personal information in public community areas.
• We may moderate, remove, or restrict content that breaches our rules or applicable law.

7. Sharing your data

We share data only as needed with:

• Service providers (processors): hosting, video streaming, analytics, email delivery, customer support, payment processing, and security.
• Other members: content you post in the community is visible to other members as designed.
• Legal/Compliance: regulators, law enforcement, or advisors when required by law or to protect our rights or users.
• Business changes: if we undergo a merger, acquisition, or asset sale, data may transfer as part of that transaction.

We do not sell your personal data.

8. International transfers

We operate from Spain and the UK and use service providers located in various countries. When transferring personal data outside the UK/EEA, we rely on lawful safeguards such as EU Standard Contractual Clauses, the UK Addendum/IDTA, or an adequacy decision.

9. Data retention

We keep personal data only as long as necessary for the purposes above:

• Account data: for your active account and a reasonable period after closure (e.g., up to 6 years for tax/accounting).
• Community content: while your account is active or until you delete it (some residual copies may remain in backups for a limited time).
• Marketing: until you unsubscribe or withdraw consent.
• Legal/compliance records: as required by law.

10. Security

We use reasonable technical and organizational measures to protect your data (encryption in transit, access controls, least-privilege practices). No system is 100% secure, so please use a strong unique password and keep it confidential.

11. Your rights (EU/UK and others)

If you are in the UK or EEA, you have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data (in certain cases)
• Restrict or object to processing
• Data portability
• Withdraw consent (where processing is based on consent)

You can exercise these rights by emailing [email protected]. You also have the right to lodge a complaint with your local authority. In the UK, this is the ICO. In Spain, the AEPD. Users outside the UK/EEA may have similar rights under local law.

12. Children

Our Services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will take appropriate steps.

13. Marketing communications

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in our emails or contacting [email protected]. We will still send essential service emails (e.g., receipts, password resets).

14. Third-party links

The Site may link to third-party sites or services. Their privacy practices are their own. Please review their policies.

15. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the new version on this page and update the effective date. Significant changes may be notified by email or in-app notice.