Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how YogaYathra collects, uses, stores, protects and shares information when people use the YogaYathra website, mobile application, learning portal and connected administrative services.

1. Information YogaYathra collects

Depending on the service you use, YogaYathra may process:

• account and profile information such as name, email address, phone number, member ID, course and batch assignments;
• registration and administration information submitted for YogaYathra programs and examinations;
• learning activity such as materials opened, progress and completion;
• practice and examination activity, including attempts, selected answers, scores and results;
• certificates or supporting documents uploaded to your YogaYathra account;
• support requests, account-deletion requests and service communications;
• limited technical information needed to operate the service, such as app version, device platform, session/security data and push-notification tokens where enabled.

2. How YogaYathra uses information

YogaYathra uses information to authenticate users, provide assigned courses and learning materials, operate classes, training and examinations, display results and credentials, send relevant service notifications, provide support, protect accounts, prevent abuse and maintain the reliability of the service.

3. Google OAuth and YouTube API access

YogaYathra uses Google OAuth and the YouTube Data API for an administrator-controlled class-recording workflow. An authorized YogaYathra administrator can connect a Google/YouTube account so that completed YogaYathra Zoom class recordings can be uploaded to the connected YouTube channel and, when configured by the administrator, added to the selected YouTube playlist.

The integration requests one YouTube authorization scope: https://www.googleapis.com/auth/youtube.force-ssl. This single scope is required because the production workflow both uploads the class-recording video and adds the resulting video to an administrator-selected YouTube playlist. YogaYathra does not request a separate youtube.upload scope because youtube.force-ssl already authorizes the video upload operation used by this workflow.

Google user data accessed

YogaYathra processes only the Google authorization and YouTube API information needed to operate this administrator-authorized workflow. This can include OAuth authorization credentials, the connected YouTube account authorization state, upload responses, the resulting YouTube video identifier, the administrator-configured playlist identifier, and playlist-assignment status.

Although Google's consent description for the requested scope is broader, YogaYathra does not use the authorization to read or modify unrelated YouTube videos, viewing history, subscriptions, ratings, comments, captions, contacts or other unrelated YouTube account information.

How Google user data is used

Google user data is used only to authorize, perform, maintain and troubleshoot the administrator-requested class-recording upload and playlist-assignment functionality. It is not used for targeted advertising, profiling, lending decisions, data brokerage, user tracking unrelated to the feature, or development, improvement or training of generalized AI/ML models.

Google user data transfer and sharing

YogaYathra does not sell Google user data. OAuth credentials are not provided to advertisers, data brokers or unrelated third parties. The class-recording video is transferred to YouTube only as directed by the authorized administrator. Operational API responses are used by YogaYathra only to complete and record the status of that workflow.

YogaYathra does not create, sell or transfer aggregated or anonymized Google user data for advertising, profiling, lending, data brokerage or AI/ML model training.

Protection, retention and deletion of Google user data

OAuth access and refresh credentials required for this automated workflow are kept on the YogaYathra server using server-side encryption and access controls and are not exposed in the mobile application or public browser code. They are retained only while the YouTube connection is needed for the administrator-authorized integration.

Operational records such as the resulting YouTube video identifier, playlist identifier and upload/playlist status may be retained as part of YogaYathra's recording-management and audit history. An administrator can disconnect the YouTube integration in YogaYathra, and the Google account holder can revoke access from Google Account settings. Disconnecting or revoking authorization prevents future authenticated YouTube API activity. Local integration credentials can be removed by disconnecting the YouTube integration.

4. Sharing and sale of information

YogaYathra does not sell Google user data or personal information. Information is shared only when needed to provide the service, with service providers acting on YogaYathra's behalf, when a user directs or authorizes the action, or when disclosure is required by applicable law. Google OAuth credentials are not shared for advertising purposes.

5. External services

YogaYathra may connect to external services such as Google/YouTube, Zoom, video hosts, notification providers or links used in course content. When you interact directly with an external service, that provider may process information under its own privacy terms.

6. Data security

YogaYathra uses HTTPS for network communication and applies authorization controls to protected learning and account content. Sensitive integration credentials are kept on the server rather than exposed in the mobile application or public browser code. No internet service can guarantee absolute security, but YogaYathra uses reasonable technical and administrative measures appropriate to the service.

7. Retention

YogaYathra retains information only for as long as it is reasonably needed to operate accounts and educational services, maintain security and audit records, meet legitimate operational requirements, and comply with applicable legal or regulatory obligations. Data that is no longer required is deleted or de-identified where appropriate.

8. Revoking Google/YouTube access

An authorized Google account holder can revoke YogaYathra's Google access at any time from the Google Account connections page. Revoking access stops future authenticated YouTube uploads until the account is connected again. YogaYathra administrators can also disconnect the connected YouTube account from the YogaYathra administration interface.

9. Account and data deletion

YogaYathra users can request permanent account deletion through the application or through the public account deletion page. Associated personal data will be deleted unless particular records must be retained for a legitimate legal, security, fraud-prevention, audit or regulatory reason.

For a connected Google/YouTube account, revoking Google access prevents further API use. If you also want YogaYathra to remove locally stored integration credentials associated with that connection, disconnect the YouTube integration in YogaYathra or contact YogaYathra support.

10. Children and students

YogaYathra educational services may be used by students. Account and course access is managed according to the relevant program and applicable requirements. YogaYathra does not knowingly use student information for targeted advertising.

11. Changes to this policy

YogaYathra may update this Privacy Policy when the service, legal requirements or connected integrations change. The latest version will remain available at this URL and the "Last updated" date will be revised when material changes are made.

12. Contact

For privacy questions, requests or concerns, contact YogaYathra through the public YogaYathra Support page.