Privacy Policy

We collect what we need to run your account and nothing else. We do not sell your data, we do not share it for advertising, and there are no third-party trackers on this website.

Your email address

Used to sign you in, to send account and billing notices, and to tell you when new content is published if you have asked for that.

Your password, if you have set one

Stored only as a cryptographic hash. We cannot read it, and neither can anyone who obtained a copy of our database.

Your Google or Apple sign-in, if you use one

When you sign in with Google or Apple, they tell us your name, your email address, whether they have verified that address, and an identifier for your account with them. We keep the identifier and email address so we can recognise you the next time you sign in, and your name only as a label. If they have verified your email address, we treat it as verified here too. We never see your Google or Apple password, and we cannot access anything else in those accounts.

A payment reference

Your card details are handled entirely by Stripe, our payment processor. We store only the customer identifier Stripe gives us. Your card number never reaches our servers.

The content you create

Class plans, dharma talks, playlists, templates, tags and notes. Some of this is public by default — see the section below.

Your notification preferences

Which emails you have chosen to receive.

When and where you sign in

When you sign up, sign in, or download a class plan, we record the date and time, your IP address and your browser type, and we keep a copy of each billing email we send you. We use these only to protect your account and to resolve billing disputes: a card issuer deciding a chargeback asks what you agreed to and whether you used the service, and these records are how we answer.

How you found us

When you sign up we record whether you arrived from a search engine, from another website, or directly — as one of those three categories. We do not store the address you came from.

• We do not sell or rent your personal information.
• We do not share it for cross-context behavioural advertising.
• We do not run advertising trackers, analytics scripts or third-party cookies on our public pages.
• We do not read your class plans to build a profile of you.

Class plans, dharma talks and playlists are public by default so that the community library has something in it. You can set any item to private, either when you create it or at any time afterwards.

Public content is visible to other subscribers along with the name it is attributed to. It is not visible to people without an account.

You can request deletion from your account settings. When you do, we remove your personal information from active systems within 30 days, and we tell you that timeline at the moment you make the request rather than afterwards.

Content you had made public stays in the community library, but it is disconnected from you: the attribution changes to "Deleted User" and it can no longer be traced back to your account. This is deliberate — other teachers may have built on your work, and removing it would break their libraries.

If you would rather your public content were removed as well, set those items to private before requesting deletion, or ask us and we will remove them.

One exception: billing records. Your payments, the receipts and billing emails we sent you, and the sign-in history described above are each kept for two years from when they happened, whether or not your account is still open; the terms you agreed to at sign-up are kept for as long as your account exists and for two years after it is deleted. Card networks allow a payment to be disputed long after it is made, and we need to be able to answer. If a payment of yours is under dispute, the records about it are kept until the dispute is settled and for 120 days afterwards. Beyond those periods they are deleted automatically, and the copies we keep cannot be altered in the meantime.

One more: if your account had its free trial, we keep a one-way fingerprint of your email address (a cryptographic hash, from which the address cannot be recovered) for as long as the service runs. Its only purpose is to recognise that address if it signs up again, so that the one free trial is not offered twice. It is not linked to anything else about you.

California residents have the right to know what personal information we hold, to have it deleted, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of — but the other rights apply and you can exercise them from your account settings or by emailing hello@yogasequencingstudio.com.

We will not treat you differently for exercising any of these rights.

You have the right to access your data, correct it, have it erased, restrict how we process it, and take it elsewhere. Deletion requests are fulfilled within 30 days.

We process your data because it is necessary to provide the service you have subscribed to, and — for optional emails — because you have consented. You can withdraw that consent at any time from your notification preferences.

Stripe

Processes payments and holds your card details. We never see them.

Google and Apple

Only if you choose to sign in with them. They confirm who you are to us, and in doing so they learn that you have signed in here. We send them nothing else.

Amazon Web Services

Hosts the platform and stores its data.

Our email provider

Delivers account, billing and notification emails.

That is the complete list. Each of these needs your data to do its job, and none of them receives it for any other purpose.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our public pages — this one, the rest of the site you can read without an account, and the blog — set no cookies at all.

Once you sign in, we set a cookie to keep you signed in. That is a necessary part of the service and is not used for tracking or advertising.

The sign-in and sign-up pages show Google's sign-in button, which Google serves from its own servers. Google's own cookies and privacy policy apply to that button; we set none of our own there.

If we change this policy in a way that affects you meaningfully, we will tell you by email rather than quietly updating the page. The revision date at the top always reflects the current version.