Privacy Policy

Who we are

YogaVoice is operated as a sole trader under Patrick Joyce, based in Ireland. In this policy, "we", "us", and "YogaVoice" mean the service and the sole trader running it.

Under GDPR we are the data controller for your personal data.

What we collect

We only collect what we need to run the service.

• Account data: your email address, display name, and optional profile details (photo, yoga style, teaching style).
• Authentication data: one-time passcodes sent to your email. We do not store passwords.
• Conversation data: your chat messages with the AI companion and the extractions it produces.
• Recordings: any voice recordings or reels you save to the service.
• Subscription data: your current plan, trial status, and Stripe customer ID. Stripe holds your card and billing details — we do not.
• Technical data: basic log data (IP, user-agent, error traces) needed to operate the service and debug issues.

How we use your data

• to run your account and deliver the service you signed up for
• to send chat context to the AI so it can produce meaningful responses
• to process your subscription via Stripe
• to send essential service emails (sign-in codes, billing notices, important changes)
• to keep the service secure and fix bugs

Legal bases under GDPR: performance of our contract with you, our legitimate interest in running a working service, and your consent where required.

We do not train third-party AI models on your data. We do not sell your data.

Where your data lives

Your data is stored in Supabase, which uses EU-based data centres for this project. Data is encrypted in transit (TLS) and at rest.

Who we share with

We use a small number of trusted service providers (sub-processors):

• Supabase — hosts the database, authentication, and file storage (EU region).
• Stripe — processes subscription payments.
• Google (Gemini API) — processes the messages you send to the AI companion so it can respond. Google states that Gemini API data is not used to train their models.
• Vercel — hosts the application itself.

Some of these providers operate infrastructure outside the EU. Where they do, they rely on Standard Contractual Clauses and equivalent safeguards.

We do not share your personal data with anyone else, except where required by law.

Cookies

We use the minimum cookies needed for the service: a session cookie so we can keep you logged in, and (if you check an OTP "remember me" option) a cookie that keeps you signed in on this device. We do not use third-party advertising or tracking cookies.

Your GDPR rights

You have the right to:

• access the personal data we hold about you
• correct inaccurate data (rectification)
• delete your account and associated data (erasure)
• export your data in a portable format (portability)
• restrict or object to certain processing
• withdraw consent at any time
• complain to the Irish Data Protection Commission: dataprotection.ie

To exercise any of these, email privacy@yogavoice.app. We aim to respond within 30 days.

Data retention

We keep your data for as long as your account exists. When you delete your account, we delete your personal data within 30 days, except for:

• minimal billing records we are legally required to keep
• basic log data that may persist in backups for up to 90 days before being cycled out

Security

We use row-level security in the database, encrypted connections, managed hosting with reputable providers, and minimal-privilege access. No system is perfectly secure, but we take this seriously. If we ever discover a breach that affects you, we will notify you without undue delay as required by GDPR.

Children

YogaVoice is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has signed up, please contact us and we will remove the account.

Changes to this policy

We may update this policy as the service evolves. We will post material changes in-app or by email. The "last updated" date at the top tells you when the policy was last changed.

Contact

Questions, access requests, or deletion requests: privacy@yogavoice.app.