Privacy Policy

1. Information we handle

Camera recordings and AI Pose Check

With camera permission, you can record an individual pose for up to 30 seconds and review it on your device. If you choose “Upload and analyze”, YogaShot sends that recording and the selected pose identifier to our analysis service hosted on Google Cloud. The service sends a processed, silent video to Google’s Gemini model through Vertex AI to generate posture feedback and grades. Your appearance, movement, surroundings, and anyone else visible in the recording can be included. Only record yourself or people who have agreed to this processing, and avoid including private information in view.

The camera recording flow does not request microphone audio. Our analysis service also strips audio and file metadata from the processed video before sending it to the AI provider. Opening the camera, recording, or reviewing a video does not by itself authorize upload; the app asks you to choose “Upload and analyze” separately.

The service uses temporary working files and removes them through its request-cleanup process after analysis or a handled failure. Pose Check recordings are not added to a cloud video library. Temporary copies can remain on your device until app or operating-system cleanup. Google processes AI inputs and outputs under its applicable Cloud terms and generative AI data-governance policies, including retention that may apply for service operation or abuse monitoring. We do not promise zero retention by every provider.

AI reports may contain pose names, grades, feedback, timestamps, and recording duration. The app saves up to 50 recent reports locally for the current account, without saving the returned image frames in that report history. AI grades are estimates, not medical assessments or measured flexibility. Legacy on-device camera features, if available in an older version, may work differently from the current upload-based Pose Check.

Accounts

Firebase Authentication helps create and secure accounts, including a guest identifier before you register. If you create an account or use Google or Apple sign-in, we handle an account identifier and the email address, name, and sign-in information provided by that service. Sign-in providers handle your credentials according to their own policies.

Google Sign-In also declares processing of phone numbers, approximate location, user and device identifiers, usage information, and other service data. Depending on the category, Google uses this information for sign-in functionality, fraud prevention, and analytics. Approximate location can be inferred from an IP address. YogaShot does not ask you to enter a phone number or grant precise-location permission; these disclosures describe the integrated sign-in service, not an additional YogaShot profile requirement. Google’s sign-in privacy guidance and SDK privacy manifest provide more detail.

Preferences and practice history

YogaShot stores onboarding answers on your device, including your experience, practice preferences, body areas of interest, and wellness goals. Some goals may relate to stress, mood, or sleep. Practice history includes session times, duration, poses, and derived performance results. History is stored locally and may be copied to Firebase Cloud Firestore, including existing local sessions, when cloud history is enabled for your account. The local history view retains up to 200 recent sessions; this is not a promise that older cloud records are automatically deleted.

Subscriptions and payments

Apple, Google Play, or Stripe processes your payment, depending on where you subscribe. RevenueCat helps us validate purchases and keep membership access consistent across platforms. We use your account identifier, purchased plan, transaction or receipt information, and subscription status for that purpose. Payment providers may collect billing details, payment information, and fraud-prevention data. YogaShot does not store your full payment-card number.

Account-linked purchase history also supports subscription analytics, such as understanding active plans, renewals, and cancellations in our RevenueCat dashboard.

Support and technical information

If you contact us, we receive your message, email address, and any information you choose to include. Our hosting, authentication, app-update, and billing providers may process IP addresses, device and app details, timestamps, and operational logs to deliver and secure their services. The website does not add advertising trackers or an advertising analytics service. Hosting infrastructure may use necessary cookies or similar technologies for security and service operation.

Usage and reliability

We keep account-level feature usage, including daily analysis counts and temporary in-progress analysis records, to enforce usage limits and prevent overlapping requests. Service diagnostics can include error codes, crash information, app-update failures, request timing, and other performance information. We use these records to troubleshoot failures, deliver updates, and keep the app reliable. These records and third-party SDK data may be linked to an account or device; we do not describe them as anonymous. We do not use this information for advertising tracking.

2. How we use information

• Provide guided practice, posture feedback, saved preferences, and practice history.
• Authenticate accounts and restore or synchronize membership access.
• Process subscriptions, address payment issues, and prevent fraud or misuse.
• Respond to support and privacy requests, maintain reliability, and meet legal obligations.

Where a legal basis is required, we process information to provide the service you request, pursue legitimate interests in operating and protecting the service, meet legal obligations, or rely on your consent where required. Camera access is optional and controlled through your device or browser permissions.

3. When information is shared

We share information with service providers as needed for the purposes above. These include Google Cloud and Vertex AI/Gemini for requested video analysis, Google Firebase for authentication and optional cloud history, RevenueCat for subscription management, Stripe for web payments where offered, Apple and Google for store purchases and sign-in, Expo for app updates, and our website hosting and security providers. Current personal Pose Check videos are sent to Google’s AI service, not to OpenAI for analysis; OpenAI Sites hosts this website. Relevant provider policies include Google, RevenueCat, Stripe, Apple, Expo, OpenAI, and Cloudflare.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when required by law, to protect people or the service, or as part of a business transfer subject to applicable privacy protections. Links to social networks take you to services governed by their own policies.

4. Retention, security, and international processing

We retain account, practice, subscription, and support information for as long as needed to provide the service, resolve disputes, prevent abuse, and comply with legal requirements. Payment providers may retain transaction records after an account is closed. Deletion from backups may take additional time. Local data on another device must be removed on that device.

To complete and recover interrupted account deletion, we keep a restricted deletion checkpoint. It is scheduled for automatic removal seven days after completion, or after 30 days while incomplete. Automatic storage cleanup is not instantaneous. Apple revocation tokens are removed from that checkpoint after successful revocation.

We use access controls and other reasonable safeguards, but no method of storage or transmission is completely secure. Our providers may process information in the United States and other countries. Where required, applicable safeguards govern international transfers.

5. Your choices and privacy requests

• Camera: allow or revoke access in your device or browser settings. Camera-based feedback requires permission.
• Local data: removing app data or browser site data can remove locally stored preferences and history. Uninstalling, signing out, or retaking the quiz does not by itself delete your cloud account or cancel a subscription.
• Subscriptions: manage or cancel through the provider that billed you. See our subscription terms.

Delete your account in YogaShot

In versions that include account deletion, open Account → Delete account and data → Delete permanently. Confirm your identity with your sign-in provider; email/password accounts use their current password. You do not need an active subscription to delete your account. Guest or local-only accounts can use the deletion controls to remove their YogaShot data.

Completed deletion removes your YogaShot sign-in account, cloud practice history and analysis-usage records, its RevenueCat customer record, and that account’s routines, onboarding answers, reports and history on the device used for deletion. For accounts linked to Sign in with Apple, we revoke YogaShot’s Apple sign-in connection. Data saved locally on other devices must be removed on those devices.

If a provider is still processing removal, keep the app installed and use Retry deletion on the same device. Practice and saving are paused until deletion finishes. Wait for the Account deleted confirmation, then use Start fresh or close and reopen the app. Deletion cannot be undone.

Deleting an account does not cancel App Store, Google Play, or Stripe billing. Cancel your subscription separately with the provider that billed you to stop future renewals. Store and payment providers may retain their own transaction records.

Request help or other data deletion

If your app version does not show these controls, you cannot access your account, or deletion cannot finish, email support@yogashot.app with the subject “YogaShot account deletion”. Include the email used for your account, if any, and tell us whether you want to delete your account, practice history, or other information. For a guest account, contact us for help identifying the relevant records. Do not send your password or payment-card details.

We may ask for reasonable information to verify ownership. We will handle verified requests as required by applicable law, including deletion of account and linked practice information, subject to necessary legal, security, and transaction-record exceptions.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information, restrict or object to certain processing, withdraw consent, or complain to a privacy regulator. Contact us to exercise these rights. We will not discriminate against you for making a privacy request.

6. Children

YogaShot is a general wellness service and is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.

7. Changes to this policy

We may update this policy as the service changes. We will update the date above and provide additional notice when required by law.

8. Contact

Fewdy LLC — YogaShot
Privacy, support, and deletion requests: support@yogashot.app