Privacy Policy

Last updated: October 5, 2026

Yama ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

Information We Collect

We collect only the information necessary to provide and improve our service:

• Account Information: Email address used for account creation and login. If you sign in with Apple, we receive the email and name you choose to share through Sign in with Apple.
• Profile Information: Optional details you add to your profile, such as your handle, display name, bio, teaching style, location, languages, social links, and a profile photo.
• User Content: Yoga sequences, cues, templates, and other content you create or upload.
• Photos You Provide: Photos you take or select — a profile photo, or a photo of your handwritten class notes that you ask us to transcribe. Camera and photo-library access are used only for these actions and only with your permission.
• Audio You Provide: Voice recordings you make in the app so that we can transcribe them into sequence text.
• Subscription Information: Your subscription product, status, renewal or expiration dates, and transaction identifiers, associated with your Yama account so we can provide and restore Pro access.

We do not request access to Apple Health data or use your photos for facial recognition or identification. You may choose to include fitness goals or health-related details in a class description or other content you submit; we handle that content as described in this policy.

How We Use Your Information

We use your information to:

• Provide and maintain the Yama app
• Store and manage your yoga sequences and content
• Improve product functionality and user experience
• Generate AI-assisted recommendations for cues and postures
• Transcribe photos of your handwritten notes and voice recordings into editable sequence text, using the third-party AI services listed below

Data Storage and Security

Your data is securely stored using Supabase. We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse.

However, no system is completely secure, and we cannot guarantee absolute security.

Third-Party Services

We use the following third-party services to operate the app:

• Supabase – database, authentication, and backend infrastructure where your account, profile, and content are stored
• OpenAI – AI-assisted planning and sequence generation from your class description, selected studio template content, and relevant sequence references; reference retrieval, custom-pose cues, similar-pose suggestions, and transcription of note photos and voice recordings you choose to submit
• Apple – Sign in with Apple authentication, and in-app purchases if you subscribe
• RevenueCat – subscription purchase and entitlement management, using your Yama account ID and subscription information

After you sign in, Yama asks you to review and accept its Terms and Privacy Policy if your account has not accepted the current agreement. The same in-app agreement explicitly asks for permission to send the data described here to OpenAI for AI-assisted planning. Accepting the agreement alone does not send content to OpenAI. If you use AI-assisted Build, we send your class description to OpenAI for reference retrieval and sequence generation. Relevant sequence references and selected studio template content may also be included in the generation request. If a custom pose needs a cue, we send the class description and pose names to OpenAI. If you use note-photo or voice transcription, we send the selected image or recording to OpenAI. If you use similar-pose suggestions, we send the current pose name to OpenAI. We send this content to provide the feature you requested. We do not and will not opt in to OpenAI's optional use of API inputs and outputs for model training.

You can withdraw data-sharing consent under Account → Terms and Privacy. This stops further AI sharing and signs you out. To use Yama again, you must accept the agreement.

We require third parties that receive user data to provide the same or equal protection of that data as described in this policy and required by the App Store Review Guidelines.

Under OpenAI's standard API controls, content sent for these features may be retained in abuse-monitoring logs for up to 30 days, with exceptions for legal or safety needs. Yama's text and image generation requests disable response storage. OpenAI currently lists no default abuse-monitoring or application-state retention for its audio-transcription endpoint. These provider periods are separate from how long Yama stores content you save in your account. See OpenAI's API data controls for current terms.

Templates and Content

All sequence templates provided in Yama have been legally obtained, licensed, or submitted with proper authorization from users or studios.

Data Sharing

We do not sell, rent, or trade your personal data to third parties.

Each of your sequences and your profile has a visibility setting that you control (public or private). When a sequence or profile is set to public, or you share a sequence via a public link, that content — along with the profile details you have chosen to display — becomes viewable by others, including people who are not signed in. When it is set to private, it is visible only to your account. You can change the visibility of a sequence or your profile at any time in the app.

7. User Rights and Data Deletion

You can delete your account and associated data from Yama's active systems directly in the app, at any time: go to Account → Delete Account and confirm. This removes your account, profile, sequences, and uploaded content from Yama and cannot be undone. Content already sent to third-party AI providers may remain temporarily under their retention practices described above; deleting your Yama account does not immediately erase those copies.

If you are unable to access the app, you may also request deletion by contacting us at the address below, and we will delete your data within a reasonable timeframe. We may retain limited information where retention is required for legal or operational purposes.

Depending on where you live, you may have additional rights over your personal data — such as the right to access, correct, export, or restrict the processing of it. To exercise these rights, contact us at the address below.

8. Children's Privacy

Yama is not intended for use by children under 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy, you can contact us at:

Email: support@yama.fit