Privacy Policy

1. Information we collect

Account and sign-in

We use Auth0 for sign-in (including social logins like Google or Apple, where offered). We receive your email, name, an internal user ID, and sign-in metadata.

Payments and subscriptions

Payments are processed by Stripe and RevenueCat. We receive your subscription and entitlement status and may store purchase tokens for native purchases. Payment processors handle your card details.

App usage, device, and diagnostics

• Usage: feature interactions, session times, app version, errors and crashes.
• Analytics: Google Analytics 4 and Countly, using browser/client identifiers and, where available, an internal account ID. These identifiers can connect visits and are pseudonymous rather than anonymous. Our analytics events do not include your name, email or intention text.
• Events: page views, joining the flow, practice milestones, signup invitations, account creation, calendar exports and subscription/payment outcomes. An invitation click is separate from account creation; a calendar export is separate from adding an event to a calendar.

The live flow

• Your intention: free accounts can choose a curated intention; subscribers can write their own. These preferences shape shared spoken cues and are sent to AI providers. Temporary preference records expire about an hour after their last update.
• Your display name and intention: a display name may be visible to others in the flow, and intentions may influence spoken cues heard by everyone. Curated intentions also appear in the day’s collective. Avoid submitting sensitive information.
• Pose choices, focus, intensity, ratings, and feedback: used to run and improve the service.
• Time in the live flow: we count the minutes you spend in the live flow each day, to apply the daily limits for free use. These totals are kept for two days.
• Practice history: for signed-in accounts we store live visits, their duration, and chosen character for your stats and streaks. These records are separate from the two-day allowance totals.

If you join as a guest

You don’t need an account to join the live flow. To count a guest’s free daily minutes, your browser keeps a random guest ID separate from your account, and sends it along with your time zone (so a “day” is your day). If a browser doesn’t keep that ID, we use its IP address for that count instead. Clearing your browser’s site data starts a new ID.

Stored in your browser

The app remembers some choices on your own device, not on our servers: the character you practise as, your live flow settings (including any saved join preferences), and the guest ID above. These browser records remain until you change them or clear site data.

Optional calendar export

Your chosen practice time is used on your device to create a downloadable calendar file. No contact details are collected for this feature. We measure the export action, not your selected time. You must open the file in your calendar to add it; Seed Yoga does not schedule an email, push notification or reminder delivery.

Optional background music

Choosing Play music loads a YouTube embed. YouTube receives the connection and device information needed to play its videos and may use cookies under its own policies. The music player is not loaded before you choose to play it.

What we don’t collect

Precise location, health records, contacts, or camera and microphone streams (beyond what your device normally does).

2. How we use it

• To run the service: sign you in, guide the live flow, keep everyone in step, and tailor the cues.
• Subscriptions and support: manage access, billing, and help when you ask.
• Fair use: apply the daily time limits for guests and free accounts.
• Safety and integrity: prevent abuse, troubleshoot, and secure the platform.
• Improvement: understand how features are used and how reliable they are (pseudonymously).
• Legal: comply with lawful requests and enforce our terms.

3. AI processing

The live flow is written and voiced with AI. We send the minimum needed: for example, the intentions and preferences of the people in the flow and where the flow is, to Anthropic (Claude) to choose poses and write the cues, and the cue text to OpenAI and Google Cloud Text-to-Speech to voice it.

The providers’ data handling also applies to these requests. Submitted intentions can influence shared narration, so please do not include sensitive information.

4. Sharing and processors

We share data with these vendors only to run the service:

• Sign-in: Auth0
• Payments and subscriptions: Stripe, RevenueCat
• Hosting and storage: Google Cloud (storage), Render.com (including Redis and Postgres on Render)
• Analytics: Google Analytics 4 and Countly (pseudonymous usage measurement)
• AI: Anthropic, OpenAI, Google Cloud Text-to-Speech

We do not sell your personal information or share it for cross-context behavioral advertising.

5. Cookies, storage, and SDKs

• Essential: sign-in session, and the browser storage described above.
• Analytics: Google Analytics 4 uses browser identifiers such as the _ga cookie; Countly is also configured for usage measurement. When available, browser analytics identifiers connect server-side subscription and session events to the same visitor.
• You can block cookies, storage, or identifiers in your browser or device settings; some features may not work without them.

6. How long we keep it

• Temporary preferences: expire about an hour after the last update. Curated collective intentions cover the last 24 hours. Generated audio and service logs are separate from these temporary records.
• Daily time totals (guests and accounts): two days.
• Account, practice history, subscription, ratings, and feedback: retained to run the service. Inactivity does not automatically delete an account. Contact us about deletion or export.
• Analytics, logs and generated media: retention also depends on hosting and provider settings. The two-day allowance expiry does not apply to these records.
• We may keep minimal records where the law requires (for example fraud prevention or accounting).

7. Your rights and choices

Where applicable (for example under GDPR/UK GDPR or CCPA/CPRA), you can access your data, correct it, delete it, export it, and object to or restrict some processing.

To do any of these, email hi@ntntn.io from the address tied to your account. We’ll respond within the required timelines. (Self-serve deletion isn’t available in the app yet.)

8. International transfers

We operate mainly in the United States and use vendors (including Anthropic, OpenAI, Google, Stripe, RevenueCat, Auth0, and Render) that may process data in the US and other countries. Where required, we rely on Standard Contractual Clauses and comparable safeguards.

9. Security

Sign-in is verified with Auth0, billing uses payment providers, and voice clips use time-limited signed storage links. These controls do not guarantee absolute security.

No system is perfectly secure. If we identify a breach, we’ll notify you and regulators as the law requires.

10. Children

Seed Yoga is not directed to children under 13 (or the minimum age where you live). We don’t knowingly collect personal information from children. If you believe a child has given us personal information, email hi@ntntn.io and we’ll delete it. We don’t perform age verification.

11. Changes to this policy

We may update this policy as Seed Yoga evolves. We’ll post changes here and update the effective date; for material changes, we’ll give additional notice (for example by email or in the app).

12. California and EU/UK notices

• No sale of personal information, and no cross-context behavioral advertising.
• You may have the right to know, access, delete, correct, opt out of certain sharing, and limit use of sensitive data. Please avoid submitting sensitive information in intentions; expiry of temporary preferences does not remove generated narration or service logs.
• For EU/UK residents, our legal bases are typically contract (to provide the service), legitimate interests (security, analytics, fair-use limits), and consent where required (cookies and SDKs).

13. Contact

Questions or privacy requests: hi@ntntn.io
Controller: Stoner Yoga LLC DBA The Intention Engine