Legal
Privacy Policy
How YOG collects, uses, stores, and protects personal data in compliance with the Digital Personal Data Protection Act, 2023 and applicable Indian law. Version 1.0.
Version 1.0 · Published 12 June 2026 · Document type: PRIVACY
1. Data fiduciary
YOG Fitness Technologies Pvt. Ltd. ("YOG", "we", "us"), registered in India, is the data fiduciary for personal data processed through the Platform. Contact: privacy@joinyog.com. Grievance Officer details are published on the Platform and updated as required by law.
2. Data we collect
We collect identity and contact data (name, email, phone), account credentials (hashed passwords), profile and fitness preferences, booking and payment metadata, wallet transactions, device and log data (IP address, user agent, app version), location you provide (city/state), communications with support, and consent records including policy versions accepted and timestamps.
3. Purposes & legal basis
We process data to provide marketplace services, authenticate users, process payments via Razorpay, send transactional and service notifications, prevent fraud, comply with law, improve the Platform, and—with consent—send marketing communications. Contractual necessity, legal obligation, legitimate interests, and consent apply as appropriate under the DPDP Act.
5. Retention
We retain data while your account is active and as needed for legal, tax, and dispute resolution purposes. Financial records may be retained for periods required under GST and company law. Consent audit records are retained to demonstrate lawful processing. See Account Deletion Policy for erasure requests.
6. Your rights
You may access, correct, or delete personal data, withdraw consent where processing is consent-based, nominate a contact for incapacity, and lodge grievances with our Grievance Officer or the Data Protection Board of India when available. Account deletion is available in-app and on the web per our Account Deletion Policy.
7. Children
The Platform is not directed at persons under 18. We do not knowingly collect children's data without verifiable parental consent as required by law.
8. Security
We implement administrative, technical, and organisational measures described in our Security Policy. No system is completely secure; report concerns to security@joinyog.com.