Yoga With Pavan — Privacy Policy

In short: You can browse the whole app without an account. If you create one, what you tell us — your name, email, your course progress, and anything you fill into the optional wellness profile — is stored on our server so it follows you between devices. Health Connect data (your daily step count, and nothing else) is read only while you are looking at it, is never stored by us and never leaves your phone. We show no advertising and we do not sell your data to anyone.

This Privacy Policy explains how the Yoga With Pavan Android application ("the app", "we", "us") collects and handles your information. It applies to the app and to the backend service it talks to. By using the app you agree to the practices described here.

1. Using the app without an account

Most of the app — the home page, the programs catalogue, the resource library, the blog, the FAQs and the instructor's About page — works without signing in. In that mode we do not know who you are. The app still downloads that public content from our server, and caches it on your device so it works offline.

2. Information you give us

Your account

Creating an account requires your name, email address and a password. Passwords are stored on our server only in hashed form. Signing in returns a session cookie, which the app keeps on your device so you stay signed in; signing out deletes it along with every cached copy of your account's data.

Your learning

When you are signed in, the following is recorded against your account on our server so that it is the same on every device you sign in to:

Which programs you have enrolled in, and when.
Which lessons you have marked complete, and your progress in each program.
Certificates you have earned, including the certificate number and issue date.
The daily routine you have chosen, which of its practices you tick off each day, and the streak that follows from it.
Your daily water intake — each amount you log, the time you logged it, and your daily target.

Your wellness profile (optional)

The wellness profile is entirely optional and every field in it can be left blank or cleared later. If you fill it in, it is stored on our server.

It may contain your age, height, weight, your level of yoga experience, the wellness goals you select, and your preferred practice length and time of day. We use it to tailor what the app suggests to you. We do not use it for advertising and we do not share it.

Contacting us

If you send a message through the Contact screen we receive your name, email address, subject, message, and your phone number if you chose to give one. We use it only to reply to you.

3. Health and fitness data (Health Connect)

The Fit screen and the steps card on your Dashboard show your daily step count, which is already on your phone. The app reads it through Health Connect, Android's own health data store, and only after you explicitly grant permission. Steps are the only health data the app reads, and it writes nothing to Health Connect.

Permission	Why the app asks
Read steps	Shows your step count against a daily goal: today's total, your week, your month, your hourly profile and your goal streak, on the Fit screen and the Dashboard.

If you refuse it, the step charts are not shown and the rest of the app keeps working. None of this data is stored by the app and none of it is sent to us or to anyone else. It is read while you are looking at the page, used to draw the charts, and discarded. It never reaches our server.

The app also reads the names of the apps that recorded your steps, so the Fit screen can say "Google Fit" rather than a package name. That lookup happens on your device.

You can withdraw this permission at any time in Health Connect, in your Android settings.

4. Information collected automatically

Crash reports (Firebase Crashlytics). If the app crashes, an anonymous report is sent to Google. It may include your device model, Android version, app version and the technical stack trace. It does not include your practice history, your wellness profile or anything you typed.
Usage analytics (Firebase Analytics). Aggregate, anonymous information about how the app is used — which screens are opened, how often the app is launched — so we can see what is worth improving.

5. What stays on your device

The app is built to work offline, so it keeps a local copy of a good deal of what you see. On your device only:

A cache of articles, resources, programs, lessons and your own progress, so the app opens without a connection.
Downloaded images, and PDFs of resources you have opened.
Your language choice and whether you have seen the first-run tour.
Your session cookie, while you are signed in.
Certificates you download, which are saved to your Downloads folder and belong to you.

Signing out erases every cached copy of your account's data from the device. Uninstalling the app removes the rest, apart from certificates you saved to Downloads.

6. Who else is involved

Google (Firebase) — crash reporting and analytics, governed by Google's Privacy Policy.
Our hosting provider — the backend that stores your account runs on Render. Your data is stored there on our behalf.
YouTube — lesson videos and some resources play through YouTube's own embedded player. When a video plays, YouTube receives the request, subject to Google's Privacy Policy.
Content delivery networks — images, PDFs and audio files are fetched from the hosts they are stored on. Those requests carry no account information; the app deliberately does not send your session cookie to them.
WhatsApp — if you tap the "message Pavan" button, Android hands you over to WhatsApp, whose own privacy policy then applies.

We do not sell your data, and we do not use advertising networks.

7. Permissions the app requests

INTERNET and ACCESS_NETWORK_STATE — to load content and sync your account.
POST_NOTIFICATIONS (Android 13+) — asked only when you download a certificate, to confirm the file was saved. Refusing it changes nothing else.
The Health Connect steps permission described in section 3 — optional, asked for only when you open the Fit screen.

The app does not request access to your location, contacts, camera, microphone, photos or files.

8. Retention, and deleting your data

Account data is kept for as long as your account exists. You can ask us to delete your account and everything stored against it — profile, enrollments, progress, certificates, wellness profile, water intake and routine history — at any time.

To request deletion, see Account and data deletion, or email bhumanagapavan@gmail.com from the address on your account. We action requests within 30 days.

You can remove everything held locally at any time by signing out, clearing the app's storage in your device settings, or uninstalling it.

9. Children's privacy

The app is not directed at children under 13, and accounts are not intended for them. The wellness profile does not accept an age below 13. If you believe a child has given us personal information, contact us and we will delete it.

10. Security

Traffic between the app and our server is encrypted with HTTPS. Passwords are stored hashed, never in plain text. Your session is held in an HTTP-only cookie. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

You can access, correct or delete the information held against your account. Most of it you can change yourself in the app; for anything else, or to delete the account entirely, contact us at the address below.

12. Changes to this policy

We may update this policy as the app changes. Material changes will appear here with a new "Last updated" date, and the same text is shown inside the app under Settings → Privacy Policy.

13. Contact

Questions about this policy? Email bhumanagapavan@gmail.com.