Privacy Policy

The controller is Gabriel Bernegozzi Ewert, c/o Online-Impressum 12324, Europaring 90, 53757 Sankt Augustin, Germany. For anything to do with privacy, write to contato@yogaminute.app.

• Account: your email address and, if you give it, your name. If you set a password, we keep only an encrypted version of it, never the text. If you sign in with Google, we receive your name, email address and profile picture from them; we do not receive your Google password or access to anything else in your account.
• Practice: the days you practised, the poses you have met, how many times you have practised each one, the sequences you created, and the preferences you chose when you started (how long you have practised, your focus, how long you hold a pose, and the moments of the day when yoga would help).
• Streak freezes: which missed days a freeze covered, and any extra freeze recorded on your account after you asked your teacher for one.
• How a pose felt: if you answer “how was it” after practising, how the balance, the breath and the stretch felt — easy, just right or hard — each one on its own and each optional. Kept as one answer per pose and replaced when you answer again.
• What you wrote to your teacher: if you choose to write a line about a pose, that line, kept with your name and shown to the teacher of your class. It is optional, you can clear it, and if you are in no class nobody sees it.
• Classes: if you join a teacher’s class, the link to that class and which of the week’s poses you have completed. If you are a teacher, the name of the class and the poses you chose.
• Daily reminder: if you choose a time to practise, that time and your time zone. If you allow notifications, also the delivery address your browser creates for that device.
• Technical data: IP address and browser information, processed by our providers to deliver the app and protect it from abuse, and error reports (the kind of error, the page and the browser) when something fails.
• Usage statistics: pages visited and actions such as finishing the day’s practice or the initial setup, along with device type, browser and approximate country. They do not include your name, email address or full IP, and they cannot follow you from one day to the next.
• Why you paused: if you answer the email we send after a week without practising, the reason you picked (no time, forgot, it got hard, or it was not what you expected).

We do not collect your location, contacts, photos, camera or microphone, and we do not run advertising.

• Providing the service — creating your account, signing you in, keeping your progress across devices, and connecting students to teachers. Basis: performance of the contract (Art. 6(1)(b) GDPR).
• Sending sign-in emails — the link or code that gets you into your account. Basis: performance of the contract.
• Sending the daily reminder — only if you choose a time, and only on days you have not practised yet. It arrives as a notification on the device where you allowed them, or by email if you did not. After two weeks without practice, the reminders stop on their own. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by turning the reminder off in your profile, or notifications off in your device settings.
• Keeping the app safe and working — technical logs and error reports. Basis: legitimate interest in fixing faults and preventing abuse (Art. 6(1)(f)).
• Understanding how the app is used — usage statistics with no personal identification, to decide what to improve. Basis: legitimate interest in improving the service (Art. 6(1)(f)). You can object by writing to contato@yogaminute.app.
• Asking what got in the way — one email after a week without practising, at most one a month, answered with a single tap. Basis: legitimate interest in improving the service (Art. 6(1)(f)). Every one of those emails carries a link to stop receiving them.

We do not sell or rent your personal data.

If you join a class, its teacher sees the name you gave, the days you practised, and which of the week’s poses you completed. That is what joining a class is for. They do not see your email address. The other students in the class do not see your practice. If you do not want a teacher to see it, leave the class; you can do that at any time.

They also see, for each pose of the week, how many of the class practised it and how the class found its balance, its breath and its stretch. Those are counts across the class: each of the three is withheld entirely until three people have answered it, and your name is not attached to them.

Your teachers see your own answers, with your name, only if you say yes. The first time you open a class, the app asks “Let your teacher see how poses feel to you?” with a yes and a no, and nothing named reaches a teacher until you answer yes. Your answer applies to every class you are in, and you can change it at any time with “Let my teacher see how poses feel to me” in your account; a no closes your answers to them at once, and they then count only in the class totals above. The legal basis is your consent, which you can withdraw the same way.

A line you write is different, and the app says so on the screen where you write it: it reaches your teacher with your name, word for word, because that is the only way she can answer you. Writing one is your choice and you can clear it at any time.

Teachers can switch on a listing so that people looking for a class can find them. It is off unless you turn it on, and switching it off removes it at once. What it shows is the name on your account, where you wrote that you teach, a line you wrote about your classes, and the kinds of class you run — never your email address, never anything about your students, and never a location taken from your device. The app does not detect where anyone is; you type it.

If nobody near you is listed, you can tell us where you practise so we can approach them. That is the place you typed and your account, kept for that purpose and nothing else, and it is deleted with your account.

We use service providers who handle data only on our behalf and under a data processing agreement:

• Supabase — database and authentication. The data sits on servers in Ireland (European Union).
• Google — only if you choose to sign in with Google, which then confirms your identity to us and learns that you use Yoga Minute.
• Cloudflare — hosting, the domain, network protection, and forwarding messages sent to our contact address.
• Resend — sending the sign-in emails and the reminders, from servers in Ireland.
• Your browser’s notification service (Google, Apple, Mozilla or Microsoft, depending on the device) — delivering the reminder as a notification, only if you allow it. The content is encrypted; they cannot read it.
• Sentry — receiving technical error reports so we can fix faults.
• PostHog — usage statistics, stored on servers in Frankfurt (European Union) with the IP address anonymised.

The app does not process payments today. If paid plans are offered, payment will be handled by a specialist processor, and this policy will be updated before that happens.

Google, Cloudflare, Resend, Sentry and PostHog are companies based in the United States, and some processing may take place outside the European Union. Where it does, the transfer relies on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission, as the case may be.

We keep your account and practice data for as long as the account exists. You can delete all of it yourself, at any time, from your profile under “Delete account”: the deletion is immediate and final. If you would rather ask by email, we delete without undue delay and within 30 days at the latest. Error reports and technical logs are kept for a limited time and deleted automatically by the providers.

Yoga Minute uses no tracking cookies and no advertising tools. To work, it keeps your sign-in session, your preferences and a copy of the screens and illustrations in your browser so the app runs without a connection. That storage is strictly necessary for the service you asked for, and it is cleared when you sign out. The usage statistics write nothing to your device.

Under the GDPR you have the right to:

• access the data we hold about you;
• correct data that is wrong or incomplete;
• ask for your data to be deleted — or do it yourself, on the spot, with the “Delete account” button in your profile;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw your consent, without affecting what was done before.

To exercise any of these, write to contato@yogaminute.app. You can also complain to a data protection authority — in Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

All traffic is encrypted (HTTPS), access to data is enforced in the database itself so that each person reaches only their own, and passwords are stored in encrypted form only. No system is entirely immune to failure; if an incident affects your data, we will inform you and the authorities as the law requires.

If you use the app in Brazil, you also have the rights set out in Art. 18 of the Lei Geral de Proteção de Dados (Law No. 13.709/2018), including confirmation, access, correction, anonymisation, portability, deletion and withdrawal of consent. Requests can be made to the same address, and you can complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Yoga Minute is not directed at children under 16. If you are responsible for a child who used the app without your permission, get in touch so we can remove the data.

We may update this policy. Significant changes will be announced in the app or by email before they take effect. The Terms of Use cover the rest of the agreement between us.