Privacy Policy

The short version

• We collect what we need to run your account and your practice: your name, email address, and the plan, classes and meditations you use in the app.
• We don’t sell your data, show you ads, or track you across other companies’ apps and websites.
• Payments go through Apple. We never see your card details.
• You can delete your account from inside the app at any time.

1. Who we are

Ocean Yoga (“Ocean Yoga”, “we”, “us”) is a yoga practice based in Taiwan. We operate the Ocean Yoga app (the “app”) and the website oceanyoga.com.tw (together, the “Service”), and we are responsible for the personal data described in this policy.

You can reach us at hello@oceanyoga.com.tw or +886 958 080 066.

2. Information we collect

Information you give us

• Account details. Your name, email address and password. We store your password only as a one-way hash, never in readable form.
• Sign in with Apple, Google or Facebook. If you use one of these, we receive your name, your email address and an account identifier from that provider. With Sign in with Apple you can choose to hide your email, in which case we receive a private relay address from Apple.
• Profile photo. Optional. If you add one, the app asks for access to your camera or photo library and uploads only the photo you choose.
• Onboarding answers. Your goal, activity level, favorite yoga style, how you like to train, and whether you’d like your classes organized each week. We use these to build your plan.
• Messages to us. When you email us, we keep the conversation so we can help you.

We don’t ask for medical information. Please don’t send us health details you’d rather we didn’t hold.

Information created as you use the app

• Your practice. Your plan and weekly schedule, the classes you complete, the videos you save, your meditation sessions (length, sound and date), and the workshops you book.
• Your membership. Whether you have an active subscription or free trial, which plan it is, and your purchase history (product, dates and store transaction identifiers). Apple and our subscription provider RevenueCat send us this; we never receive your payment card details.
• Activity and country. When you use the app, we record when you were last active and the country you’re connecting from. The country is worked out from your IP address at the time of the request; we store the country, not the IP address.
• Technical logs. Like most online services, our servers keep standard logs (such as IP address, request time and app version) to keep the Service secure and to fix problems. We keep them only as long as needed for those purposes.

Reminders and permissions

Daily and workshop reminders are scheduled on your device by iOS. We don’t run a push notification server and don’t receive anything when a reminder fires. The app doesn’t use your location, contacts or microphone.

What we don’t collect

• We don’t use advertising identifiers, show ads, or include advertising or third-party analytics tools in the app.
• We don’t track you across apps and websites owned by other companies.
• If you use Facebook Login, it’s used only to sign you in. Automatic app event logging and advertising ID collection are turned off.

On our website

oceanyoga.com.tw doesn’t use advertising or analytics cookies. Pages load fonts from Google Fonts and Adobe Fonts, which receive your IP address and browser details when your browser downloads the fonts. If you join our mailing list, we use your email address to send you updates, and you can unsubscribe at any time.

3. How we use your information

• To provide the Service: create and secure your account, sign you in, build and update your plan, keep your practice in sync across devices, and manage workshop bookings.
• To manage your membership: check whether you have access, and restore purchases.
• To communicate with you: send service emails such as password reset codes and important account notices, and reply when you contact us. We only send marketing emails if you’ve signed up for them.
• To keep the Service safe: prevent abuse, fraud and unauthorized access.
• To improve the Service: look at aggregated, de-identified figures (for example, how many members are active in each country) to understand how the app is used.
• To meet legal obligations, such as tax, accounting and responding to lawful requests.

If data protection law where you live requires a legal basis, we rely on: performing our contract with you (running your account and membership), our legitimate interests (security and improving the Service), your consent (optional features such as a profile photo or marketing emails, which you can withdraw), and legal obligations.

4. Who we share it with

We don’t sell or rent your personal data. We share it only with service providers that help us run the Service, under agreements that limit how they can use it:

Provider	What they do for us	Data involved
Apple	App Store purchases, Sign in with Apple	Purchase details, Apple sign-in identifier
RevenueCat, Inc. (USA)	Subscription management	Your Ocean Yoga user ID, purchase history, basic device and app information
Google	Sign in with Google (if you use it), website fonts	Sign-in identifier, name and email; IP address for fonts
Meta Platforms	Facebook Login (if you use it)	Sign-in identifier, name and email
Resend (USA)	Sending account emails such as password reset codes	Email address and the email’s content
Cloudflare	Storing profile photos and class media	Your profile photo
Hosting providers, including Vercel	Running our website, servers and database	All the account and practice data described above

Live workshops take place on a third-party video meeting service linked from the app. When you join, that service’s own privacy policy applies.

We may also disclose information if the law requires it, to protect the rights and safety of our members, teachers or the public, or as part of a merger or sale of our business, in which case this policy will continue to apply to your data.

5. Where your data is processed

We’re based in Taiwan, and some of our service providers process data in other countries, including the United States. When data leaves Taiwan we rely on providers that protect it with appropriate safeguards and contractual commitments.

6. How long we keep it

• Your account and practice data are kept while your account is open. When you delete your account, we delete your account and the data linked to it (saved videos, progress, schedule, meditation history and bookings) from our systems. Copies in our backups are overwritten on a rolling basis within a limited period.
• Purchase records are kept by Apple and RevenueCat under their own policies and as required for tax and accounting.
• Emails with us are kept as long as needed to help you, then deleted.

7. Your rights and choices

• See and update your details: in the app, go to Profile → Account settings to change your name, email, photo, password and sign-in methods.
• Delete your account: in the app, go to Profile → Delete Account, or email us. Deleting your account doesn’t cancel an App Store subscription, so cancel that first under Settings → [your name] → Subscriptions on your iPhone.
• Notifications, camera and photos: turn these on or off at any time in the app or in iOS Settings.
• Marketing emails: use the unsubscribe link in any email.

Under Taiwan’s Personal Data Protection Act you can ask us to let you review your data, give you a copy, supplement or correct it, stop collecting, processing or using it, or delete it. Depending on where you live, you may also have the right to data portability, to object to some processing, and to complain to your local data protection authority. To make a request, email hello@oceanyoga.com.tw. We’ll reply within the time limits set by law and may need to confirm your identity first.

You don’t have to give us your personal data, but without an email address or a sign-in provider we can’t create an account for you, and without an account you can’t use the app.

8. Children

The Service isn’t directed at children under 13, and we don’t knowingly collect personal data from them. If you’re under 18, please use the Service with the permission of a parent or guardian. If you believe a child has given us personal data, contact us and we’ll delete it.

9. Security

We protect your data with encrypted connections (HTTPS), hashed passwords and restricted access to our systems. No system is perfectly secure, so please use a strong password and let us know right away if you think your account has been compromised.

10. Changes to this policy

We’ll update this page when our practices change and revise the date at the top. If a change is significant, we’ll tell you in the app or by email before it takes effect.

11. Contact us

Questions about this policy or your data: hello@oceanyoga.com.tw · +886 958 080 066.

This policy is published in English and Traditional Chinese. If the two versions differ, the Traditional Chinese version prevails.