Viora YogaViora Yoga/ Privacy Policy
πŸ”’ Legal Document

Privacy Policy

We care about your data and your practice. Here's exactly how we handle both.

Effective: March 12, 2026
Governed by Spanish Law & GDPR
Controller: Andres Cruz
1

Who We Are

Viora Yoga is an AI-powered yoga pose analysis application developed and operated by Andres Cruz ("we", "us", or "our"), an independent developer based in Spain.

Data Controller
Andres Cruz
Contact Email
Jurisdiction
Spain (GDPR / LOPDGDD)
Platform
iOS (Apple App Store)

This Privacy Policy applies to the Viora Yoga mobile application and any related services. By using our app, you agree to the collection and use of information as described herein.

2

Data We Collect

We collect only the data necessary to provide and improve the Viora Yoga service.

Account information: First name, last name, email address, and password (hashed, never stored in plaintext)

Profile data: Age, weight, height, gender, yoga level, goals, preferred yoga style

Photos and videos: Images you upload or capture for pose analysis β€” processed by AI to generate feedback

Pose analysis data: Detected body joint positions, calculated angles, AI-generated feedback scores

Session history: Records of each analysis including timestamp, pose name, score, and feedback

Profile avatar: Optional photo you choose to upload as your profile picture

Usage data: App interactions and feature usage to improve the service (no advertising identifiers)

πŸ“Œ Health data note: Yoga pose images and body measurements are considered health-adjacent data. We treat this information with the highest level of care and never share it with third parties for advertising or commercial profiling.

3

How We Use Your Data

Your data is used exclusively to provide the Viora Yoga service:

Pose analysis: Images are analysed on-device to detect body joints, then processed by AI to generate personalised alignment feedback

Account management: To create and maintain your user account securely

Session history: To store your past analyses so you can track progress over time

Personalisation: Profile data (level, goals, style) is used to tailor AI feedback to your needs

Service improvement: Anonymous usage patterns help us fix bugs and improve features

Legal compliance: To comply with applicable Spanish and EU law

We do not use your data for advertising, sell it to third parties, or use it to train AI models.

4

Third-Party Services

Viora Yoga relies on a small number of trusted third-party services to function. Each is bound by its own privacy policy and by our data processing agreements where required under GDPR:

πŸ€–
AI inference service
Your pose images and joint data are sent to a third-party AI API to generate personalised feedback. This provider processes data solely to fulfil the request and does not retain or use submitted content to train models.
πŸ—„οΈ
Secure cloud database & authentication
User accounts, profiles, and session data are stored in a secure cloud database hosted in the EU. All data is encrypted at rest and in transit.
πŸ“Š
Anonymous product analytics
We use a privacy-first analytics service to understand how the app is used and where we can improve. No personally identifiable information is collected or transmitted β€” data is aggregated and anonymised before leaving your device.
πŸ’³
In-app purchase processing
Pro subscription purchases are handled entirely by the platform's native payment system. We never see or store your payment card details.
5

Data Storage & Security

We take reasonable and appropriate measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Transmission
TLS encryption for all API calls
Storage
Encrypted at rest (EU cloud)
Passwords
Hashed, never stored in plaintext
Pose detection
On-device processing where possible

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6

Your Rights (GDPR)

As a resident of the European Union or EEA, you have the following rights under GDPR and Spanish data protection law (LOPDGDD):

πŸ‘οΈ
Right of Access
Request a copy of all personal data we hold about you.
✏️
Right to Rectification
Correct inaccurate or incomplete personal data.
πŸ—‘οΈ
Right to Erasure
Request deletion of your data (right to be forgotten).
⏸️
Right to Restriction
Restrict how we process your data in certain circumstances.
πŸ“¦
Data Portability
Receive your data in a structured, machine-readable format.
🚫
Right to Object
Object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

7

Data Retention

We retain your personal data only for as long as necessary to provide the service or as required by law:

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.

Session history & pose images: Retained until you delete individual sessions or your account.

Profile data: Retained while your account is active and deleted upon account removal.

Backup copies: May persist in encrypted backups for up to 90 days after deletion.

8

Children's Privacy

Viora Yoga is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal information, please contact us immediately at [email protected] and we will delete that information.

9

Policy Changes

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page and notify you via the app or email if the changes are material.

Continued use of Viora Yoga after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

10

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Response Time
Within 30 days