Privacy policy

Effective 2 October 2026

This policy explains what personal data Bodhi School of Yoga Pvt Ltd collects when you use bodhi.yoga, the student and affiliate portals, and the Bodhi.Yoga apps, why we collect it, who we share it with, and the choices you have. We don’t sell your data and we don’t use it for advertising.

Who we are

Bodhi School of Yoga Pvt Ltd runs live online yoga classes and the Bodhi.Yoga apps, and is responsible for your personal data under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Flat No. B1D, Door No. 6-3-901&900/10Cosmopolitan Apartments, Durganagar ColonySomajiguda, Hyderabad 500082Telangana, India

Questions about this policy: support@bodhischoolofyoga.com.

What we collect

If you join the classes (students)

Who you are: your name, WhatsApp number and city, and an email address if you add one to sign in.
Your classes: your batch and slot, which classes you join and when, your streak and attendance, the classes you plan, and your 14-day certificate.
Referrals: your invite code, and the first names and progress of people who joined through your link.
Reviews: a review or reflection you choose to write, and whether you agree to it being published.
Payments: when you buy a membership on our website, our payment provider gives us the payment reference, amount, date and the name, phone and email on the payment. We never see or store your card, UPI or bank details.
Messages and preferences: whether you agreed to WhatsApp messages or opted out, and your notification settings.

If you’re an affiliate

Your name, phone number, email, city, social media profiles and follower count, your Bodhi batch and certifications (for teachers), and the people who joined through your link and the rewards you earned.

From everyone who uses our website or apps

Sign-in data: session cookies that keep you signed in, and one-time sign-in codes (stored only as a scrambled hash, deleted after use or 10 minutes).
Usage and diagnostics: which pages and features are used, and error reports when something breaks, so we can fix and improve the service. In the apps this never includes session recordings.
Device data: if you allow notifications, a notification token for your phone or browser. Your IP address and browser details reach our servers with every request and are used to keep the service secure (for example, to limit repeated sign-in attempts).

The apps don’t access your contacts, photos, location, camera or microphone. They don’t track you across other companies’ apps or websites.

How we use it

To run your account: sign you in, give you your classes, track attendance and streaks, issue certificates and rewards.
To send you what you asked for on WhatsApp, by email or as notifications: class links, reminders and sign-in codes. You choose which reminders you get.
To process payments made on our website and issue invoices.
To run the referral and affiliate programmes.
To keep the service secure, prevent abuse and fix problems.
To understand how the service is used and improve it.
To meet legal obligations, such as tax and accounting records.

We use your data because you gave consent when you registered (which you can withdraw at any time), to provide the service you signed up for, and where the law requires it.

Where it's stored

Our servers and some of our service providers are outside India — for example in Singapore, Australia, the European Union and the United States. Wherever your data is processed, we protect it as described here and as Indian law requires.

How long we keep it

Your account data, for as long as you have an account with us.
Sign-in codes, until they’re used or 10 minutes pass.
After you delete your account, your personal details are removed within 30 days. Records we must keep by law, such as payment and tax records, are kept for the period the law requires, without your personal details where possible.

Your rights and choices

See and correct your data: your details are on your Profile; message us to correct anything.
Delete your account: in the student portal or app, Profile → Delete my account; in the affiliate portal or app, Account → Delete my account; or see bodhi.yoga/account/delete.
Stop WhatsApp messages: reply STOP in our WhatsApp chat.
Notifications: turn reminder types on or off in Profile, or turn notifications off in your phone’s settings.
Withdraw consent at any time; this doesn’t affect what we did before, and some features may stop working.
Nominate someone to exercise these rights if you die or can’t act yourself.
Complain: to our Grievance Officer (below). If you’re not satisfied, you can complain to the Data Protection Board of India.

Age

Our classes and apps are for adults aged 18 and over. We don’t knowingly collect data from anyone under 18; if you think we have, contact us and we’ll delete it.

Security

Data is encrypted in transit (HTTPS) and access is limited to staff who need it, with two-step sign-in for staff. Sign-in codes are never stored in readable form. No system is perfectly secure; if a breach affects you, we’ll tell you and the authorities as the law requires.

Changes to this policy

If we change this policy we’ll update the date at the top, and tell you on WhatsApp or in the app if the change is significant.

Grievance Officer

Ashok Kumar Vankineni, Grievance Officer, Bodhi School of Yoga Pvt Ltd
Email: grievance@bodhischoolofyoga.com

We’ll acknowledge your complaint within 24 hours and resolve it within 15 days.