Privacy Policy

Updated: 24 December 2025

This Privacy Policy explains how Yogio and the associated website app.yogio.net (also referred to as "website", "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website(s), application(s), and services. Our mobile application is available on iOS (Apple App Store) and Android (Google Play), and via the web at app.yogio.net.

If you are located outside the United States (including the customers from the EU and EEA), the data controller of your personal data is:

PROMIN APPS LTD
Address: 27, 25 Martiou Str., D. MICHAEL TOWER, Office 105A, Engomi, 2408, Nicosia, Cyprus

If you are located in the United States, the data controller of your personal data is:

PROMIN APPS LLC
Address: 900 Foulk Rd., Ste 201, Wilmington, Delaware 19803, USA.

Our services include creating and delivering personalized yoga exercise programs ("Services").

By using our website(s), application(s), and Services, you confirm that you have read, understood, and agree to this Privacy Policy and accept its terms. If you do not agree, please do not use our website(s), application(s), or Services.

Information We Collect

We collect personal data directly from you, automatically through your use of our Services, and from third parties where applicable.

For U.S. residents, we provide this notice at or before the point of collection: we collect personal identifiers (such as your name, email address, and payment details), commercial information (purchase history), internet activity data (usage data, device information), and health-related information (if voluntarily provided for personalization purposes). The AI Coach feature (described below) is offered only to users located in the United States. If you are located outside the United States (including the EU/EEA/UK/Switzerland), the AI Coach feature is not available, and we do not enable or process AI Coach interactions for you through this feature.

Personal Data You Provide

When you use our Services, we may collect:

Identification and Contact Details: Name, email address, phone number, or similar identifiers.
Health and Fitness Information: If you choose to provide information about your physical condition, exercise preferences, or yoga experience, we will process this data solely to personalize your programs. Such information is collected only with your explicit consent and is never used for advertising or shared with third parties for marketing purposes, unless specified in this policy or in an applicable notice within the app. For US-based users of the AI Coach feature, if you choose to provide information about your physical condition, exercise preferences, injuries, limitations, pregnancy/postpartum status, or yoga experience, we use this information to personalize your programs and (if enabled) to support the AI Coach feature. We do not use health and fitness information for advertising. We may share this information with service providers acting on our instructions (including our AI service provider) only to provide the features you request, such as the AI Coach. For Washington residents and certain other jurisdictions, we obtain separate, affirmative opt-in consent where required for collection and sharing of consumer health data.
Payment Information: For purchases made via the App Store (iOS), payments are processed directly by Apple, and we do not collect or store your card details. For purchases made through our web platform, payments are processed by trusted third-party providers (such as [Stripe/Paddle/other]), who may collect payment card details in accordance with PCI DSS or other applicable standards. We only receive confirmation of payment and limited billing information (such as billing country and the last four digits of the card number, if applicable).
For purchases via Google Play, billing is processed by Google. Manage/cancel in Google Play → Profile → Payments & subscriptions. We do not collect or store card details for Google Play purchases. See Google Play Help for refunds and subscription management. Android app data categories (may vary by your use of features/SDKs): Identifiers (device/instance IDs), App activity (feature usage, crash logs), Diagnostics, Purchase info. Purposes: app functionality, analytics, fraud prevention, subscriptions. Sharing: no sale; service providers process under DPA. Retention: see ‘Data Retention’.

AI Coach (ChatGPT/OpenAI-Powered)

Our Services may include an optional in-app chat feature (“AI Coach”) that helps you with yoga-related guidance (e.g., routines, technique explanations, habit support, and general wellness suggestions). This feature is available in the US and the provisions of this policy related to AI Coach apply only to US-based users of the app. AI Coach service is provided by OpenAI. OpenAI Privacy Policy, terms of use and other legal documents apply in this case. Please review OpenAI policies here: https://openai.com/policies/.

Our AI provider acts as a service provider/processor and may process information only to provide the AI functionality to us and on our instructions, subject to contractual safeguards.

When we use the OpenAI API for the AI Coach, OpenAI states that API data is not used to train or improve OpenAI models by default unless the customer explicitly opts in. OpenAI also describes retaining certain API content in abuse monitoring logs for up to 30 days by default (with options for approved customers to reduce retention).

You can use the app without enabling the AI Coach. When you open the AI Coach window you will be presented with a notice on the processing of your data. If you press ‘Continue’ you agree to the terms of processing your data per this policy. Please, email us at support@my.yogio.net if you have questions regarding the processing of your personal data by the AI Coach or you wish to object to such processing.

When you use the AI Coach, we may process and transmit to our AI service provider:

Your messages and prompts (anything you type into the chat);
Relevant account and app context needed to respond (e.g., your selected plan level, session preferences); and
Health and fitness information you have provided in the app (e.g., flexibility goals, injuries/limitations, pain areas, pregnancy/postpartum status, experience level), but only if you enable AI Coach sharing and only to the extent needed to generate the response.

Please do not share information in the AI Coach that you do not want processed by an AI system (for example, highly sensitive medical details). You control what you type into the AI Coach, and you can exit the AI Coach at any time.

The AI Coach provides informational content and general fitness guidance only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always seek the advice of a qualified healthcare professional for medical concerns or before starting a new exercise program.

Automatically Collected Data

When you interact with our website, we may collect:

Device and Technical Information: IP address, browser type, device details, operating system, and similar metadata.
Usage Data: Pages visited, time spent on the website, clickstream data, and other analytics.

Local push notifications
We use local push notifications to remind you about workouts and support healthy habits. These notifications are generated entirely on your device and are not linked to server-side logic or personal data processing.

We do not store push tokens or send personalized notifications based on user profiles.

You can enable or disable all notifications at any time in the Profile section of the app. On Android, we request the Notifications permission solely to deliver local reminders you enable. No push tokens are stored; no server-side targeting.

Data from Third Parties

We may receive information from:

Social Media Platforms: When you connect with our Services through platforms like Facebook or Google.
Analytics Providers: Data aggregated from tools like Google Analytics to improve our Services.

How We Use Your Information

We process your personal data to provide and improve our Services and ensure legal compliance.

Providing and Improving Services

● To design personalized programs based on your health data and preferences.

● To deliver and manage access to these programs securely.

● To process and verify payments.

If you enable and use the AI Coach, we use your information to:

Generate AI Coach responses and recommendations tailored to your stated preferences and goals
Maintain conversation context (e.g., to continue a coaching thread)
Detect and prevent fraud, abuse, and security incidents; and
Troubleshoot, improve feature reliability, and maintain quality (for example, by reviewing limited logs where permitted).

Communication

● To send updates, newsletters, or promotional content (you may opt out at any time).

● To respond to your inquiries and provide technical and customer support.

Legal Compliance

● To comply with legal obligations under applicable data protection, consumer protection, tax, or financial regulations.

● To enforce our terms of service, prevent fraud, and protect our legal rights.

Legal Basis for Processing (GDPR & Global Compliance)

Depending on your location, we rely on one or more of the following legal bases for processing your personal data:

● Consent: When you opt-in to receive communications or provide health-related information.

● Performance of a Contract: To deliver the Services you have requested.

● Legal Obligation: Compliance with applicable legal obligations.

● Legitimate Interests: To improve, develop, and secure our Services, provided that such interests are not overridden by your data protection rights.

Sharing Your Data

We respect your privacy and do not sell personal data. However, in certain situations, your data may be shared with third parties to ensure the provision of our services or compliance with legal requirements.

Service Providers

We collaborate with third parties that assist us in delivering our services, including:

● Payment Services: Processing your transactions via trusted providers that adhere to PCI DSS standards.

● Analytics: Tools like Google Analytics to understand your interaction with our website and improve services. We may use Google Firebase (Analytics/Crashlytics) and Google Play services for analytics, crash reporting, and core app functionality. These providers process limited data to operate these services. See Google’s privacy documentation. The Android app may access the Advertising ID (AAID) for analytics/attribution. You can reset/limit ad personalization in Android settings.

● Hosting and Data Storage: Providers ensuring secure storage of your data.

All service providers are contractually bound to protect your personal information and only process data as instructed, in compliance with applicable data protection laws and contractual data processing agreements (DPAs).

Legal and Regulatory Authorities

We may disclose your data to:

● Comply with applicable legal obligations.

● Respond to requests from law enforcement or court orders.

● Protect our rights, property, and safety, as well as the rights and safety of our users or third parties.

Business Transfers

In the event of a merger, acquisition, or sale of our business, your data may be transferred to the new owner or successor. Such transfers will occur in compliance with applicable data protection laws, ensuring continued protection of your rights.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable law.

Specifically:

Account Information (name, email, preferences)is retained for as long as your account is active. If you delete your account, we delete or anonymize this data within 30 days.
Payment and Transaction Records are retained for 7 years (or the period required by applicable financial and tax regulations).
Health and Fitness Data is retained until you delete your account or request deletion, whichever comes first.
Analytics and Usage Data is retained in aggregated or anonymized form for up to 24 months for service improvement.
Customer Support Communications are retained for 12 months after resolution of the issue.

Data Security

We implement industry-standard security measures to protect your personal information, including:

● Encryption: Encrypting sensitive data during transmission.

● Access Controls: Limiting access to your data only to authorized personnel.

● Monitoring: Regular security audits and monitoring for potential threats.

While we take reasonable steps to protect your information, no system can be 100% secure. You are encouraged to take appropriate precautions when using the Internet.

Your Rights

We adhere to international standards for protecting user rights. Please note, that we will not discriminate against you for exercising any of your privacy rights. This includes denying services, charging different prices, or providing a different level of quality based solely on your privacy choices. Depending on your location, you may have the following rights under GDPR, CCPA, LGPD, and other applicable laws:

Right to Access

You have the right to request information about the personal data we process about you.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure ("Right to Be Forgotten")

You can request deletion of your data under certain conditions. You may request deletion of your account and associated personal data at any time via the in-app settings or by contacting us at support@my.yogio.net. Upon deletion, we will remove or anonymize your personal data within 30 days, unless such data retention is required by law. You can request account and data deletion from within the iOS and Android apps (Settings → Account → Delete Account) or via support@my.yogio.net. We delete or anonymize personal data within 30 days, except where we must retain limited records to meet legal obligations (e.g., taxation, fraud prevention).

Right to Restriction of Processing

You can request limited processing while accuracy or lawfulness is verified.

Right to Data Portability

You can request your data in a structured, commonly used format to transfer to another service provider.

Right to Object

You may object to processing based on our legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Additional Rights (for California, Brazil, and other jurisdictions)

Right to Know (categories, sources, and purposes of data collection).
Right to Non-Discrimination for exercising your privacy rights.
Right to Opt-Out of certain data sharing (if applicable; we do not sell personal data).

How to Exercise Your Rights

To exercise your privacy rights, please contact us at:

support@my.yogio.net

Depending on your jurisdiction, we may ask for identity verification before processing your request.

Cookies and Tracking

We use cookies and similar technologies to improve your experience. These may collect:

● Session identifiers for navigation.

● Analytics data to optimize performance.

You may adjust your cookie preferences via your browser or device settings. Third-party tracking technologies used for analytics or advertising may be governed by separate privacy policies.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. Where required, we implement appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other approved legal mechanisms to protect your data.

Children’s Privacy

Our website(s), application(s), and Services are not intended for children under the applicable age of consent in your jurisdiction (typically 18). We do not knowingly collect personal data from children.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@my.yogio.net

Address for individuals located outside of the United States: 27, 25 Martiou Str., D. MICHAEL TOWER, Office 105A, Engomi, 2408, Nicosia, Cyprus

Address for individuals located in the United States: PROMIN APPS LLC, 900 Foulk Rd., Ste 201, Wilmington, Delaware 19803, USA

For more information and an up-to-date version of this Policy, visit our website at: https://www.yogio.net/.