Privacy Notice
Last updated: May 18, 2026
1. Who we are
High Performance Yoga, LLC ("we", "us") operates the High Performance Yoga AI sequence builder. We act as the data controller for personal data processed through the Service.
2. Data we collect
- Account data: email, display name, hashed password (when not using a social login).
- Authentication metadata: sign-in events, IP address, device and browser information for security.
- Content you create: intent prompts, sequence parameters, generated sequences you save.
- Support communications: messages you send us.
- Usage telemetry: aggregate feature use, error reports, performance data.
Payment-related data (card details, billing address, tax IDs) is collected directly by Paddle as Merchant of Record — we do not receive or store full card numbers.
3. Why we use it (and our legal basis)
- Provide the Service — performance of our contract with you.
- Account security, fraud and abuse prevention — legitimate interests.
- Customer support — performance of our contract.
- Service improvement and analytics — legitimate interests in measuring and improving the product.
- Required communications (billing, security, policy changes) — legitimate interests and legal obligation.
- Marketing emails — only with your consent; you can unsubscribe at any time.
4. Who we share it with
- Service providers / subprocessors: hosting, database, email, error reporting, AI model providers.
- Paddle.com as Merchant of Record — for payments, subscription management, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where reasonably necessary.
- Authorities where required by law or to protect our rights.
5. International transfers
Personal data may be processed in the United States and other countries where our service providers operate. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy decisions.
6. Retention
We retain account data for as long as your account is active and for a reasonable period after closure to handle disputes, taxes, and audits. Sequences you've created are deleted (or anonymised) when you delete your account, except where we are required to keep records by law.
7. Your rights
Depending on your country, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your local data protection authority. We respond to verified requests within one month.
8. Security
We use industry-standard technical and organisational measures including encryption in transit, access controls, and audit logging. No system is perfectly secure; please use a strong, unique password.
9. Cookies
We use strictly necessary cookies for authentication and session management. We do not currently use marketing or third-party analytics cookies.
10. Contact
For privacy questions or to exercise your rights, email privacy@highperformance.yoga.