Privacy Policy & Data Covenant
At YogicTown (www.yogictown.com), we honor the sanctity of your spiritual journey and your personal data as a sacred trust (Amanat).
1. Identity of the Data Fiduciary
YogicTown is operated under YogicTown Spiritual Foundation & Community Sangha (“YogicTown”, “we”, “our”, or “us”). This Privacy Policy applies to the web platform, mobile applications (iOS and Android), APIs, and associated spiritual retreats.
Registered Entity Address: Tapovan, Rishikesh, Uttarakhand 249192, India.
Official Privacy Inquiries: [email protected]
2. Categories of Data We Collect
- Account Credentials: Full Name, Email Address, Hashed Passwords (via PBKDF2/SHA-256), Phone Number (for 2FA and retreat admission OTPs).
- Spiritual Sadhana Data: Saved articles, mantra loop listening streaks, daily sadhana progress, and retreat attendance records.
- Dietary & Wellness Preferences: Satvik food requirements (e.g., Ahimsa Vegan, Phalahari, or Lacto-Satvik) submitted voluntarily for residential retreat kitchen preparation.
- Transaction & Billing Data: Order IDs, GSTIN (optional for tax invoices), masked card digits, and subscription expiration. We NEVER store raw card numbers, CVVs, or UPI MPINs (handled securely by Razorpay).
- Technical Device Telemetry: Anonymized crash logs, IP address (for geographic tax calculation and DDoS defense), device OS, and push notification tokens.
3. Third-Party Processors & Zero Data Sale Guarantee
We pledge on our sacred dharma: We NEVER sell, rent, monetize, or trade seeker personal data to third-party ad networks or data brokers.
Data is strictly shared with certified infrastructure partners essential to providing the spiritual service:
- Razorpay Software Private Limited: For Reserve Bank of India (RBI) compliant card authorization, UPI tokens, and e-mandates.
- PostgreSQL Database Services: Encrypted at rest and in transit via TLS 1.3.
- Apple & Google Push Services: For daily sadhana Brahma Muhurta and retreat admission reminders.
4. Seeker Right to Erasure & Account Deletion
In compliance with Apple App Store Guideline 5.1.1(v) and Google Play User Data policies, any seeker may initiate immediate, permanent deletion of their account and all associated spiritual records directly within the application:
- Log in to your account and navigate to Dashboard → Settings.
- Scroll to “Danger Zone: Permanent Account Deletion”.
- Click “Delete My Account & Purge Data” and confirm with your password.
Alternatively, you may email [email protected] with the subject “Account Erasure Request” from your registered email. Data is completely purged within 7 business days, except mandatory tax invoice records retained for 7 years under Indian Income Tax Act.
5. Grievance Redressal Officer (Rule 3(11) of Information Technology Rules 2021)
For any data privacy concerns, statutory grievances, or DPDP Act compliance inquiries:
Officer Name: Acharya Shanti Prakash (Grievance Officer)
Designation: Head of Digital Governance & Trust
Address: YogicTown Parishad, Tapovan Ashram Marg, Rishikesh, Uttarakhand 249192, India
Direct Email: [email protected]
Response Time: Acknowledgment within 24 hours; resolution within 15 days.