Privacy Policy
Last updated: September 2026
This policy describes how YogaOS — the mobile app and connected web platform used by Studio OS, YTTC OS, and independent teacher accounts — collects, uses, and protects your information.
Information We Collect
When you create an account or use the app, we collect:
- Contact information: your name, mobile number, and email address
- Login credentials: your password, stored in encrypted (hashed) form — we never store or have access to your actual password
- Class and booking activity: classes you book or cancel, attendance records, and package/credit balances
- Course progress (for teacher training academies): quiz scores, lesson completion, and enrollment status
- Payment status: amounts due and payment due dates for course fees, where applicable. The app itself does not collect or process card payment details — any actual payment is arranged directly with your studio, academy, or teacher
- Messages: the content of any messages you send through the app to your academy or studio
- Device information: a device token used solely to deliver push notifications, and your device's platform (iOS or Android)
Biometric Login (Face ID / Touch ID / Fingerprint)
If you choose to enable biometric login, your fingerprint or face data is never seen, transmitted, or stored by YogaOS. This is handled entirely by your device's own operating system — the app only receives a yes/no confirmation that you were successfully verified, and uses that to unlock your already-stored login session on that device.
How We Use Your Information
- To operate your account — logging you in, showing your bookings, packages, and progress
- To send you push notifications about your own activity — a booking confirmation, a cancellation, or a quiz result
- To let your studio, academy, or teacher manage their own business — your class schedule, attendance, and payment status
We do not sell your personal information to third parties, and we do not use your data for advertising.
Third-Party Services
We use Firebase Cloud Messaging, a service provided by Google, solely to deliver push notifications to your device. Google's own privacy policy governs how Firebase handles the minimal technical data (your device token) needed to deliver these notifications.
Data Sharing
Your booking, attendance, and progress information is visible to the specific studio, academy, or teacher you're linked to — this is necessary for them to run their classes and manage your enrollment. If you're linked to more than one studio or academy, each one only sees your activity with them, not with the others.
Data Retention
We retain your information for as long as your account remains active with a studio, academy, or teacher. If you'd like your data deleted, contact your studio, academy, or teacher directly, or reach out to us using the contact details below.
Your Rights
You can request access to, correction of, or deletion of your personal information at any time by contacting your studio, academy, or teacher directly, since they manage your underlying account record.
Children's Privacy
If a studio or academy enrolls a minor, their account is managed on their behalf by a parent, guardian, or the studio itself in accordance with that studio's own policies. YogaOS does not knowingly collect information directly from children without such oversight.
Security
Passwords are stored in encrypted form. Your login session, once established, is stored using your device's own secure storage (Keychain on iOS, encrypted storage on Android) — never in a location other apps on your device can access. All communication between the app and our servers is encrypted in transit.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected with an updated "Last updated" date above.
Contact Us
Questions about this policy or your data can be directed to: info@kasiyoga.com