Privacy Policy

Information we collect

Accounts. Our authentication provider, Clerk, handles account details such as your name, email address and login credentials. We do not store your password ourselves.

Bookings and payments. We store booking details and history to provide the service. Stripe processes payments, optional subscriptions and instructor payouts. Payment card details are handled by Stripe, not stored on YogaFlow's servers.

Location. With your permission, the Near Me feature uses your device location to find nearby classes. You can deny or revoke device-location access in your browser or device settings.

Technical and usage information. Our service providers may process IP addresses, browser/device details, online identifiers, page interactions and error/security logs. The information collected depends on the service used, your choices and applicable law.

How we use information

We use information to operate accounts, directory and booking features, process payments and payouts, communicate about accounts and bookings, prevent fraud, maintain security and improve service reliability. With the applicable choices and permissions, we also measure website use and support advertising and affiliate referrals.

Cookies, local storage and analytics

Necessary cookies and similar storage support features such as sign-in and security. We also store preferences, including your language and analytics-consent choice, in your browser.

We use Google Analytics on website pages other than this privacy page. Selecting Accept in YogaFlow's analytics notice allows analytics storage; it does not grant advertising consent. Selecting Decline keeps analytics storage denied. Google's Consent Mode may send limited cookieless signals while storage is denied.

With analytics consent, we also use Replit-hosted analytics (Umami) for sign-out request diagnostics. These custom events record the request stage and whether it is a retry, not user identifiers, provider error messages, credentials or page URLs. Request resolution does not confirm that a session has ended. The analytics provider may process technical request information as described above.

With the same analytics consent, booking-confirmation diagnostics on published web pages record fixed outcome categories and whether a check is a retry or resumes a pending check. These custom payloads exclude account, session, checkout and booking identifiers, payment client secrets, raw errors, page URLs, query strings, referrers and titles. A widget callback or completed request is not confirmation: a confirmed outcome requires an authoritative confirmed booking record for the signed-in student and relevant class. These best-effort events are not payment receipts, unique-booking counts or security audit logs.

Use Analytics cookie settings at the bottom of an app page to reopen the analytics notice and change your choice. You can also block or delete cookies and clear site data using your browser settings. Clearing site data resets stored preferences and may sign you out. Read how Google uses information from sites that use its services.

Google advertising and third-party vendors

YogaFlow uses Google AdSense technology and may show Google-supplied advertisements when ad serving is approved and enabled. Google and other third-party vendors may use cookies or similar technologies to serve ads based on your prior visits to this website or other websites. Google's advertising cookies can enable Google and its partners to serve personalized ads based on those visits, subject to your consent where required.

Advertising providers may process IP addresses, device/browser information, online identifiers and ad interactions for ad delivery, measurement, security and fraud prevention. The vendors involved depend on the advertising configuration and your choices.

When a Google consent message is shown, use Do not consent or Manage options to make the choices offered there. Use Advertising privacy choices at the bottom of an app page to request Google's message again when it is available for your region. The analytics notice is separate and does not substitute for advertising consent. You can manage personalized advertising at Google Ads Settings, and opt out of participating vendors' personalized advertising through YourAdChoices. These tools do not necessarily stop all ads or all data processing.

See Google's Privacy Policy and Google's advertising technologies information. This privacy page does not load advertising, analytics or consent-message scripts.

Affiliate links

Our Shop includes links to third-party retailers and programs, including Impact, CJ and Amazon Associates. We may earn a commission when you purchase through these links, at no extra cost to you. As an Amazon Associate, we earn from qualifying purchases.

Affiliate networks and retailers may use referral identifiers, cookies or similar technologies to attribute visits and purchases. We may measure product-link interactions through website analytics according to your choices. Once you follow a link, the retailer's or network's own privacy policy and choices apply.

Service providers and sharing

We share information as needed with providers such as Clerk (authentication), Stripe (payments and payouts), hosting and database services, and email delivery providers. Instructors receive information needed to manage their students' bookings. Google and affiliate providers process information as described above. We may also disclose information to comply with law or protect the service.

We do not sell personal information for money. Advertising-related disclosure or processing may qualify as sharing or targeted advertising under some privacy laws; the rights and choices below apply where required. Providers may process data in countries other than your own, under their applicable terms and safeguards.

Retention and security

Studio claim verification. We process the requesting account, listing, destination contact, code hash, submitted evidence and reviewer decision to verify authorization, not as marketing consent. These records, codes and contact details are not sent to analytics or application logs. Our retention schedule clears expired or unusable code hashes and destination contacts on the next hourly cleanup; removes submitted evidence and free-text reviewer notes 30 days after the later of expiry and use; and deletes inactive requests after 90 days from that same point. Unexpired pending or approved requests remain usable. For a listing's current claimed owner, only a minimal authorization audit remains after those sensitive fields are removed. Cleanup runs in bounded batches, so a backlog may delay removal. Production cleanup requires explicit owner approval and is disabled until that approval is configured; this schedule does not mean historical production records have already been removed. Backups and email-provider copies are subject to their own retention and applicable legal obligations. Verification does not subscribe anyone to marketing.

We retain information as needed to provide the service and meet legal, accounting, dispute-resolution and security obligations. You can request account and data deletion; some records may need to be retained for these purposes. We use safeguards to protect information, but no internet service can guarantee absolute security.

Your rights and choices

You can update account information in account settings and change device-location permissions in device settings. Depending on your location, you may have rights to access, correct, delete or receive a copy of information, withdraw consent, object to or restrict processing, or opt out of sale, sharing or targeted advertising. Contact us to make a request or ask how to exercise an applicable right. We may need to verify your request.

Where applicable, you may complain to your local data-protection authority. Withdrawal of consent does not change the lawfulness of processing before withdrawal. Privacy and advertising rules vary by region.

Children's privacy

YogaFlow is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information.

Changes and contact

We may update this policy and revise the date above. For privacy questions or data requests, email hello@yogaflow.world.