Privacy Policy

Introduction

At Vayu, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application ("Platform"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Platform.

By using our Platform, you consent to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Personal Data

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Sign up for our newsletter
• Contact us through our contact form
• Use our mobile application
• Participate in surveys or feedback
• Engage with customer support

This information may include:

• Name and email address
• Phone number
• Profile information (age, gender, fitness level, health conditions)
• Practice session data (duration, frequency, types of exercises)
• Heart rate and other biometric data (when provided)
• Photos or videos (if you choose to upload them)
• Payment information (processed through secure third-party processors)

Usage Data

We automatically collect certain information when you visit, use, or navigate our Platform. This information does not reveal your specific identity but may include:

• Device and usage information (time spent on pages, features used)
• IP address and approximate location
• Browser and device characteristics
• Operating system and version
• Language preferences
• Referring URLs and search terms
• Date and time stamps of activities
• App crashes and performance data

Location Data

With your permission, we may collect and process information about your location using GPS, WiFi, and mobile network data to provide location-based features.

Health and Biometric Data

We may collect sensitive health information including:

• Heart rate variability data
• Breathing patterns
• Sleep data (if integrated with wearable devices)
• Stress levels and mood tracking
• Medical conditions or limitations you choose to share

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Platform
• Process transactions and send related information
• Improve, personalize, and expand our Platform
• Understand and analyze how you use our Platform
• Develop new products, services, features, and functionality
• Communicate with you about updates, security alerts, and support
• Send you marketing communications (with your consent)
• Prevent fraud and enhance security
• Comply with legal obligations
• Conduct research and analytics (in aggregated, anonymized form)

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: When you provide explicit consent for specific purposes
• Contract: To perform our services under our Terms of Service
• Legitimate Interests: To improve our services and ensure security
• Legal Compliance: To comply with applicable laws and regulations

Information Sharing and Disclosure

We may share your information in the following circumstances:

Third-Party Service Providers

We may share your information with trusted third parties who perform services on our behalf, including:

• Payment processors
• Analytics providers
• Cloud hosting services
• Customer support platforms
• Marketing automation tools

Business Transfers

If we are involved in a merger, acquisition, or asset transfer, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

With Your Consent

We may share your information for any other purpose with your explicit consent.

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Specific retention periods:

• Account data: Until account deletion plus 30 days
• Usage data: 2 years from collection
• Health data: Until account deletion (or as required by law)
• Marketing data: Until you unsubscribe plus 1 year

Cookies and Tracking Technologies

We use cookies and similar technologies including:

• Essential cookies: Required for Platform functionality
• Analytics cookies: To understand usage patterns
• Advertising cookies: For targeted marketing (with consent)
• Preference cookies: To remember your settings

Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may limit Platform functionality.

Do Not Track

We currently do not respond to Do Not Track signals, but we provide you with choices about data collection.

Data Security

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions
• Binding corporate rules
• Your explicit consent

Your Data Protection Rights

Depending on your location, you may have the following rights:

Universal Rights

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request transfer of your data
• Withdraw Consent: Withdraw consent at any time

GDPR Rights (EU Users)

• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Automated Decision-Making: Protection against solely automated decisions

CCPA Rights (California Users)

• Know: Know what personal information is collected
• Delete: Request deletion of personal information
• Opt-Out: Opt-out of the sale of personal information
• Non-Discrimination: Equal service regardless of privacy choices

Exercising Your Rights

To exercise these rights, contact us at privacy@vayu-prana.com. We will respond within 30 days (or as required by applicable law).

Children's Privacy

Our Platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

Health Data Special Protections

Given the sensitive nature of health data we collect:

• We obtain explicit consent for health data processing
• Health data is stored with enhanced security measures
• We limit access to health data to authorized personnel only
• We provide additional rights for health data deletion

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify you of material changes via email or Platform notification
• For significant changes, obtain your renewed consent where required

Contact Information

Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer at:

• Email: privacy@vayu-prana.com

General Contact

For other inquiries:

• Email: info@vayu-prana.com