Privacy Policy
Last updated: August 15, 2026
Satori Yoga Coach (“Satori”, “we”, “us”) is a mobile application that builds a personal yoga plan around your goal and adapts it with an AI-assisted coach. This policy explains what personal data we collect, why, how long we keep it, who processes it on our behalf, and the rights you have. We wrote it to be read, not skimmed — it is short on purpose.
We collect only what the app needs to work: your account e-mail, your onboarding answers (goal, experience, schedule, age, gender, optional weight), your practice history and your messages to the coach. We use it to build and adapt your plan and to run the service. We never sell your data and never use it for advertising. You can export or delete everything at any time.
1. Who we are
The data controller is Satory World Trade OÜ (registry code 16114390), Järvevana tee 9, 11314 Tallinn, Estonia (“Satori”). You can reach us at privacy@satoriyogacoach.com. If you are in the EU/EEA or the UK, the GDPR / UK GDPR applies to our processing of your data.
2. Data we collect
| Category | What exactly | Source |
|---|---|---|
| Account | E-mail address; a hashed password (if you sign up with e-mail); or the identifier, name and profile picture URL your sign-in provider shares (Google, Apple) | You / your sign-in provider |
| Onboarding profile | Your main goal, what success looks like for you, yoga experience, practices per week, preferred pace, age, gender, weight (optional), a 1–5 self-rating of your current shape | You |
| Practice history | Which practices you completed and when, session duration, the daily programme the coach chose for you, your mood before practice | Generated by your use of the app |
| Coach conversation | The messages you send to the Satori Coach and its replies | You / generated |
| Subscription | Your plan (trial, monthly, annual, free), trial and renewal dates, and an anonymous store customer identifier. We never see your card number. | App Store / Google Play |
| Device & diagnostics | Basic technical logs needed to keep the service running (request timestamps, error messages, app version). We do not use advertising identifiers or third-party analytics SDKs. | Generated |
We do not collect precise location, contacts, photos, health data from other apps, or anything from your device beyond what is listed above.
3. Why we use it (and on what legal basis)
- To provide the service you asked for — build your 4-week plan, choose each day's practice, show your progress. Basis: performance of a contract.
- To adapt the plan through the coach — your onboarding answers, recent practices and messages are used to pick a suitable practice and reply to you. Basis: performance of a contract.
- To manage your subscription — trial, renewals, restores. Basis: performance of a contract; legal obligation for billing records.
- To keep the service secure and working — logs, abuse prevention. Basis: legitimate interest.
- To answer you when you write to support. Basis: legitimate interest.
We do not use your data for advertising, profiling for marketing, or selling to third parties. If we ever want to send you marketing e-mails, we will ask for your consent first and every message will have an unsubscribe link.
4. The AI coach
The Satori Coach is powered by a large language model. When you send a message, we pass to the model your message, your onboarding profile (goal, experience, schedule, pace, age, gender, weight if given), your recent practice history and today's conversation, together with our catalogue of practices. The model returns a reply and, where appropriate, a practice recommendation. This is what makes the coach personal.
- Your data is sent to the AI provider only to generate the reply; under our agreement it is not used to train their models.
- The coach is a wellness assistant, not a medical professional. Please do not share medical records or other sensitive health information in the chat; if you do, we treat it with the same care as the rest of your data but we ask you not to.
- You can delete your full conversation history at any time (see “Your rights”).
5. Who processes data on our behalf
We use a small number of service providers (“processors”) bound by data-processing agreements. They may only process your data on our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase Inc. | Database, authentication, secure API — stores your account, profile, practice history and coach messages | EU (Frankfurt, Germany) |
| Mistral AI | Language model that generates the coach's replies | EU (France) |
| Bunny.net | Video streaming of yoga practices — receives your IP address to deliver video | EU (Slovenia), global CDN |
| Google LLC / Apple Inc. | Optional sign-in with Google or Apple; app distribution and in-app subscriptions | USA / global, with EU standard contractual clauses |
Where a provider is outside the EU/EEA, transfers rely on the EU Standard Contractual Clauses or an adequacy decision. We do not share your data with anyone else, except if required by law.
6. How long we keep it
- Account, profile, practice history — for as long as your account exists.
- Coach messages — for as long as your account exists, or until you delete them from Settings.
- Subscription records — as long as required for tax and accounting law (typically 6–10 years), then deleted.
- Technical logs — up to 30 days.
When you delete your account, everything above is deleted within 30 days, except billing records we must keep by law.
7. Your rights
You can, at any time:
- See and export your data (a copy in a machine-readable format);
- Correct your profile — most fields can be changed inside the app;
- Delete your coach conversation, or your whole account and all data;
- Object to processing based on legitimate interest, or restrict it;
- Withdraw consent where processing is based on consent;
- Complain to your local data-protection authority — though we would appreciate the chance to help first.
Use the options in the app's Settings, or write to privacy@satoriyogacoach.com. We answer within 30 days.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to the people who need it to run the service, protected by strong authentication. Row-level security in our database means each user can only ever read their own records. No system is perfectly secure; if a breach ever affects your data we will notify you and the relevant authority as the law requires.
9. Children
Satori Yoga Coach is intended for adults. You must be at least 16 years old (or the age of digital consent in your country, if higher) to create an account. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top always shows the current version.
11. Contact
Satory World Trade OÜ
Järvevana tee 9, 11314 Tallinn, Estonia
Registry code 16114390 · VAT EE102801699
E-mail: privacy@satoriyogacoach.com