1. Information We Collect

When you create an account, apply to practice, or book a class, we process your name, email address, phone number, practice preferences, selected membership plan, and class booking history. If you submit an optional health declaration or movement note, this information is stored under strict Row Level Security to assist teachers in offering safe asana modifications.

2. Android Health Connect & Pedometer Data

If you pair the native Jijivisha Android application with your member account:

• What we access: With your explicit runtime permission, the app reads daily aggregated step counts (StepsRecord.COUNT_TOTAL) from Google Health Connect. If your sensor provides distance or active minutes, those are recorded without estimation.
• Why we use it: To display your personal daily movement progress and goal consistency in your private Daily Practice journal.
• No third-party transfer: Your step and movement data is never sold, transferred to data brokers, or used for advertising.
• Hardware token security: The Android app connects via a scoped bearer token stored in Android Keystore-backed EncryptedSharedPreferences. The token can only write your daily step totals.
• Revocation: You can disconnect your phone at any time from your member account under Connected Devices, which instantly invalidates all synchronization.

3. Teacher Visibility & Member Consent

Your account includes a share_progress_with_teachers privacy control. When enabled, assigned instructors can view your step trends, Surya Namaskar rounds, and breathwork to personalize your coursework. When disabled, teachers can only see your studio attendance and assigned tasks; personal health and step metrics are strictly withheld.

4. Immutable Access Audit Trail

To prevent unauthorized surveillance, every cross-user inspection of personal student practice metrics by studio staff is permanently logged in an immutable database audit log (recording actor, student, resource, and timestamp), accessible only to the primary studio owner.

5. Payments & UPI Verification

We operate transparent manual UPI billing. When you purchase a membership or pass, you transfer funds directly to the studio UPI ID and submit your 12-digit bank transaction reference (UTR) and optional receipt screenshot. We store this reference solely to verify payment against bank records and issue your invoice.

6. Data Storage & Infrastructure

Account authentication and database records are hosted on Supabase (PostgreSQL with Row Level Security enforced at the database layer). Email notifications are dispatched via Resend. Push notifications for the Android app are routed via Firebase Cloud Messaging (FCM).

7. Contact & Rights

You have the right to inspect, correct, export (via CSV), or request deletion of your account and practice records. Contact the studio team at Jijivishayog@gmail.com or visit us in Rewa, Madhya Pradesh.