Privacy Policy

We collect what we need to run your account and nothing else. We do not sell your data, we do not share it for advertising, and there are no third-party trackers on this website.

Your email address

Used to sign you in, to send account and billing notices, and to tell you when new content is published if you have asked for that.

Your password

Stored only as a cryptographic hash. We cannot read it, and neither can anyone who obtained a copy of our database.

A payment reference

Your card details are handled entirely by Stripe, our payment processor. We store only the customer identifier Stripe gives us. Your card number never reaches our servers.

The content you create

Class plans, dharma talks, playlists, templates, tags and notes. Some of this is public by default — see the section below.

Your notification preferences

Which emails you have chosen to receive.

How you found us

When you sign up we record whether you arrived from a search engine, from another website, or directly — as one of those three categories. We do not store the address you came from.

• We do not sell or rent your personal information.
• We do not share it for cross-context behavioural advertising.
• We do not run advertising trackers, analytics scripts or third-party cookies on our public pages.
• We do not read your class plans to build a profile of you.

Class plans, dharma talks and playlists are public by default so that the community library has something in it. You can set any item to private, either when you create it or at any time afterwards.

Public content is visible to other subscribers along with the name it is attributed to. It is not visible to people without an account.

You can request deletion from your account settings. When you do, we remove your personal information from active systems within 30 days, and we tell you that timeline at the moment you make the request rather than afterwards.

Content you had made public stays in the community library, but it is disconnected from you: the attribution changes to "Deleted User" and it can no longer be traced back to your account. This is deliberate — other teachers may have built on your work, and removing it would break their libraries.

If you would rather your public content were removed as well, set those items to private before requesting deletion, or ask us and we will remove them.

California residents have the right to know what personal information we hold, to have it deleted, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of — but the other rights apply and you can exercise them from your account settings or by contacting us.

We will not treat you differently for exercising any of these rights.

You have the right to access your data, correct it, have it erased, restrict how we process it, and take it elsewhere. Deletion requests are fulfilled within 30 days.

We process your data because it is necessary to provide the service you have subscribed to, and — for optional emails — because you have consented. You can withdraw that consent at any time from your notification preferences.

Stripe

Processes payments and holds your card details. We never see them.

Amazon Web Services

Hosts the platform and stores its data.

Our email provider

Delivers account, billing and notification emails.

That is the complete list. Each of these needs your data to do its job, and none of them receives it for any other purpose.

Our public pages — this one, the rest of the site you can read without an account, and the blog — set no cookies at all.

Once you sign in, we set a cookie to keep you signed in. That is a necessary part of the service and is not used for tracking or advertising.

If we change this policy in a way that affects you meaningfully, we will tell you by email rather than quietly updating the page. The revision date at the top always reflects the current version.