Last updated 3 November 2026. Ashtanga Yoga is made by Catico Apps, which is the data
controller for the information described below. You can reach us at support@ashtoga.com.
Your privacy is critically important to us. We aim for full transparency on how we collect,
store, use, and share your personal information. This Privacy Policy applies to all information
collected through our mobile application and/or any related services or websites (we refer to
them collectively as the "Services"). It also describes how you can control and protect your
privacy. If there are any terms in this Privacy Policy that you do not agree with, please
discontinue use of our Services.
Information We Collect
We are thoughtful about the personal information that we collect about you through the operation
of our Services. We only collect information about you if we have a reason to do so, for
example, to provide our Services, to communicate with you, or to make our Services better.
Information You Provide to Us
Account information: The app needs an account so that your practice
belongs to you rather than to a handset. Creating one means giving us an email address: it is
how you sign in — we send a one-time code to it rather than keeping a password — and how we
reach you about the app. We also keep a record of the device currently signed in, so that
signing in somewhere new can sign the old device out.
Practice data: When you practice, the app records the date, how long
you practiced and which asanas you worked through. This is what your dashboard, your streak and
your progress are drawn from, and it is kept against your account so that it follows you to a
new device. The practice you set up in the app — which sections of the day, how many rounds,
which poses and vinyasas, the mantras and Shavasana — is kept against your account in the same
way, along with how far it has grown.
Purchase information: If you subscribe, the purchase is made through
the app store on your device and we never see your payment details. The store, and the service
we use to read it, tell us whether a subscription is active, which one it is and when it renews
— which is what unlocks the paid parts of the app.
Communications data: You may provide us information when you contact
us — through the support forms in the app (a message, a feature request, a bug report or a
review), or directly by email. A message sent from the app reaches us with the email address
on your account and with the version of the app, the device model and the operating system it
was sent from, so that we can answer it and reproduce what you're describing. We store these
messages so we can act on them.
Information We Collect Automatically
Log data: We may collect information that mobile devices, and servers
typically make available, such as IP address, unique device identifiers, language preference,
the date and time of access, operating system, and mobile network information. We may collect
log information whenever you use our Services to monitor and improve our Services.
Usage data: We may collect information about your usage of our
Services. For example, we may collect information about the actions that you perform in our
mobile application such as which screens you visited. We use this information to get insights
on how people use our Services, so we can make our Services better.
Information from Cookies & Other Technologies: A cookie is a string
of information that a website stores on a visitor's computer, and that the visitor's browser
provides to the website each time the visitor returns. Pixel tags (also called web beacons)
are small blocks of code placed on websites and emails. We may use cookies and other
technologies like pixel tags to help us identify and track visitors, usage, access preferences
for our Services and deliver targeted ads.
How And Why We Use Information
Purposes for Using Information
We use information about you as mentioned above and for the purposes listed below:
To provide our Services;
To further develop and improve our Services, for example by adding new features that we think
our users will enjoy or will make our Services more efficient;
To monitor and analyze trends and better understand how users interact with our Services,
which helps us improve our Services and make them easier to use;
To monitor and prevent any problems with our Services, protect the security of our Services,
detect and prevent fraudulent transactions and other illegal activities, fight spam, and
protect the rights and property of us and our users, which may result in us declining the use
of our Services;
To communicate with you, for example through an email, to solicit your feedback, or provide
support; and
To personalize your experience using our Services and serve relevant advertisements.
Legal Bases for Collecting and Using Information
A note here for those in the European Union about our legal grounds for processing information
about you under EU data protection laws, which is that our use of your information is based on
the grounds that:
(1) The use is necessary in order to fulfill our commitments to you to enable access to our
Services on your device; or
(2) The use is necessary for compliance with a legal obligation; or
(3) The use is necessary in order to protect your vital interests or those of another person;
or
(4) We have a legitimate interest in using your information, for example, to provide and
update our Services, to improve our Services so that we can offer you an even better user
experience, to safeguard our Services, to communicate with you, to measure, gauge, and improve
the effectiveness of our advertising, and better understand user retention and attrition, to
monitor and prevent any problems with our Services, and to personalize your experience; or
(5) You have given us your consent to do so for one or more specific purposes.
Sharing Information
How We Share Information
We do not sell our users' private personal information. We share information about you in the
limited circumstances spelled out below and with appropriate safeguards on your privacy:
Third Party Vendors: We may share information about you with third
party vendors who need to know information about you in order to provide their services to us.
This group includes vendors that help us provide our Services to you and those that help us
understand and enhance our Services, like data analysis, email delivery, hosting services,
customer service and marketing efforts. We may allow selected third parties to use tracking
technology on the Services, which will enable them to collect data about how you interact with
the Services over time. This information may be used to, among other things, analyze and track
data, determine the popularity of certain content and better understand online activity.
Legal Requests: We may disclose information about you where such
disclosure is necessary for compliance with a legal obligation to which we are subject, or in
order to protect your vital interests or the vital interests of another natural person. We may
also disclose your personal data where such disclosure is necessary for the establishment,
exercise or defense of legal claims, whether in court proceedings or in an administrative or
out-of-court procedure.
To Protect Rights, Property, and Others: We may disclose information
about you when we believe in good faith that disclosure is reasonably necessary to protect the
property or rights of us, third parties, or the public at large. For example, if we have a
good faith belief that there is an imminent danger of death or serious physical injury, we may
disclose information related to the emergency without delay.
Business Transfers: In connection with any merger, sale of company
assets, or acquisition of all or a portion of our business by another company, or in the
unlikely event of bankruptcy, user information would likely be one of the assets that is
transferred or acquired by a third party. If any of these events were to happen, this Privacy
Policy would continue to apply to your information and the party receiving your information
may continue to use your information, but only consistent with this Privacy Policy.
Aggregated or De-Identified Information: We may share information
that has been aggregated or reasonably de-identified, so that the information could not
reasonably be used to identify you. For instance, we may publish aggregate statistics about
the use of our Services and we may share a hashed version of your email address to facilitate
customized ad campaigns on other platforms.
Published Support Requests: And if you send us a request (for
example, via a support email or one of our feedback mechanisms), we reserve the right to
publish that request in order to help us clarify or respond to your request or to help us
support other users.
The Services We Rely On
Running the app means trusting a handful of other companies with parts of it. These are all of
them:
Supabase: hosting, the database and signing in. Your account, your
practice history and any support message you send are stored here.
Google Play Billing: takes the payment when you subscribe. Your
payment details go to the store and never reach us.
RevenueCat: reads your subscription back from the store, so the app
knows whether the paid parts are unlocked.
Google AdMob: the advertising shown in the free parts of the app. See
Your Choices About Ads below.
Sentry: crash and error reporting. When something goes wrong it
receives the error, the version of the app and the device model, so that we can find and fix it.
Resend: delivers our email, including the one-time code you sign in
with.
Transferring Information
The information about you that we process when you use the Services in the EU may be used,
stored, and/or accessed by third party data processors outside the European Economic Area (EEA).
This is required for the purposes listed in the Third Party Vendors section above. When
providing information about you to entities outside the EEA, we will take appropriate measures
to ensure that the recipient protects your personal information adequately in accordance with
this Privacy Policy as required by applicable law.
Ads and Analytics Services Provided by Others
Ads appearing on any of our Services may be delivered by advertising networks. Other parties may
also provide analytics services via our Services. These ad networks and analytics providers may
set tracking technologies (like cookies) to collect information about your use of our Services
and across other websites and online services. These technologies allow these third parties to
recognize your device to compile information about you or others who use your device. This
information allows us and other companies to, among other things, analyze and track usage,
determine the popularity of certain content, and deliver advertisements that may be more
targeted to your interests. Please note this Privacy Policy does not cover the collection of
information by any third party advertisers or analytics providers.
Your Choices About Ads
Where the law requires us to ask — across the EEA and the UK — the app asks your permission
before any advertising loads, and nothing about you goes to an advertiser until you have
answered. You can reopen that choice and change it at any time from the Support section of
Settings. Subscribing removes the advertising altogether.
How Long We Keep Information
We generally discard information about you when we no longer need the information for the
purposes for which we collect and use it, which are described in the section above on How and
Why We Use Information, and we are not legally required to continue to keep it. No purpose in
this policy will require us keeping your personal information for longer than the period of time
in which users have an account with us. When we have no ongoing legitimate business need to
process your personal information, we will either delete or anonymize it, or, if this is not
possible (for example, because your personal information has been stored in backup archives),
then we will securely store your personal information and isolate it from any further processing
until deletion is possible.
Deleting Your Account
You can delete your account from inside the app, under Settings, without asking us first.
Deleting it destroys the account and everything attached to it — your practice history, your
progress, your device record and any support message you have sent — and it cannot be undone. If
you have already uninstalled the app, you can ask for the same deletion at ashtoga.com/delete-account.
One thing deletion does not do: a subscription bought through the app store belongs to your store
account rather than to us, so deleting your account here does not cancel it. Cancel it in your
store account, or you will go on being billed for it.
Security
We have implemented appropriate technical and organizational security measures designed to
protect the security of any personal information we process. However, please also remember that
we cannot guarantee that the internet itself is 100% secure. Although we will do our best to
protect your personal information, transmission of personal information to and from our Services
is at your own risk. You should only access the Services within a secure environment.
Minors
The Services are not directed to individuals under 13 years of age. We do not knowingly solicit
data from or market to children under age 13. By using our Services, you represent that you are
at least 13. If we learn that personal information from users less than 13 years of age has been
collected, we will take reasonable measures to promptly delete such data from our records. If
you become aware of any data we have collected from children under age 13, please contact us.
Your Rights
If you are located in certain countries, including those that fall under the scope of the
European General Data Protection Regulation (AKA the “GDPR”), data protection laws give you
rights with respect to your personal data, subject to any exemptions provided by the law,
including the rights to:
Request access to your personal data;
Request correction or deletion of your personal data;
Object to our use and processing of your personal data;
Request that we limit our use and processing of your personal data; and
Request portability of your personal data.
You can delete your account, and everything we hold with it, from Settings → Account → Delete
Account in the app. Deleting Your Ashtoga
Account sets out exactly what that removes, and how to ask us to do it for you if you no
longer have the app installed. The email address on your account can be changed in the app as
well. If you aren't able to do one of those, or you would like to contact us about one of the
other rights, scroll down to Contact Us section. Providing the rights and freedoms of
others are not affected, we will supply to you a copy of your personal data upon request. EU
individuals also have the right to make a complaint to a government supervisory authority.
Privacy Policy Changes
We may update this Privacy Policy from time to time. We encourage visitors to frequently check
this page for any changes to the Privacy Policy. We may notify you of significant changes by
in-app notification or by email. Your further use of our Services after a change to our Privacy
Policy will be subject to the updated policy.
Contact Us
If you have a question or comments about this Privacy Policy, or you would like to contact us
about any of the rights mentioned in the Your Rights section above, please contact us at support@ashtoga.com.