Privacy policy

Who we are

This policy explains how YogOne Private Limited (“YogOne”) collects and uses personal data when you use yogone.in and our services. YogOne Private Limited is responsible for your data.

What we collect

Account details (name, email, mobile number), how you sign in (password — stored only as a secure hash — Google account email, or verified mobile number), the preferences you share during onboarding (age range, goals, preferred mode and time), addresses for home sessions, booking history and payment status.

Payment card and bank details are handled by Razorpay and never stored by YogOne.

One-time passwords

When you sign in with an OTP we send a 6-digit code to your phone (through our SMS provider) or email. We store only an encrypted fingerprint of the code, never the code itself, and it expires after 10 minutes.

How we use it

To provide and personalise your sessions, match you with trainers, send booking confirmations and reminders, keep your account secure and improve our services. Health information you share is used only to keep your practice safe and is visible only to your assigned trainer and our wellness team.

Sharing

We share information only with your trainer and with service providers needed to run YogOne: payment (Razorpay), hosting, email and SMS delivery, and Google (if you choose Google sign-in). We never sell your data.

Your rights

You can access, correct or delete your information at any time from Settings or by writing to us, in line with India’s Digital Personal Data Protection Act, 2023. You can withdraw consent to marketing messages at any time.

Retention

We keep account and booking records for as long as your account is active and as required by tax and accounting law. Expired sign-in codes are deleted regularly.

Security

Passwords are hashed, connections are encrypted, one-time codes are rate-limited, and payment verification happens on our servers.

Contact

For privacy questions or requests, write to care@yogone.in.