Privacy policy
In effect from [the date these policies take effect]
Embodha is run by [the company’s legal name] ("we"). This page explains what we collect when you use the Embodha app and website, why, who else handles it, how long we keep it, and what you can do about it. We've tried to write it the way we'd explain it to a friend.
- What we collect
- Why we use it
- How the app is used
- Who else handles it
- How long we keep it
- Your choices and rights
- Keeping it safe
- Children
- Changes and contact
What we collect
Your account
Your email address, which is how you sign in: we send a six-digit code or a one-tap link, and there's no password to remember. After you join we ask for your name, your country and the year you were born, which is how we check you're 18 or over. In India we also ask for your state, because it decides how GST is split on website invoices. Gender is up to you. We also keep your time zone, the goals you picked, your reminder time and your settings.
When you sign in we note which devices are signed in to your account, and the internet (IP) address a sign-in request came from, to stop people guessing codes.
Your practice
What you play and for how long (the app checks in every 30 seconds while something plays, on the phone or on a TV it has sent the chapter to), where you stopped, which chapters you've finished, your breathing sessions and your streak. Notes you write on a chapter are yours alone, and we store them encrypted. Reviews you post are public in the app, with your first name and the first letter of your last name. We keep what you search for, to improve search.
Downloads
If you download chapters to play without a connection, we keep a list of the phones your downloads are on (each phone's model, like "Pixel 8", and when it was last online) and which chapters are on each. That's how downloads stay on three phones at most, and come off a phone when a course stops being yours. The files themselves stay on your phone, and what you play offline reaches us when the phone is next online, like any other practice.
Purchases
What you bought, when, the price, the tax and the invoice number, and the payment's reference from Razorpay, the App Store or Google Play. Card, UPI and bank details go to those companies directly and never reach us.
Notifications
If you allow notifications, an address for your phone that lets us send them, which of our messages you've read, and when your daily reminder was sent.
If you teach on Embodha
Your teacher profile, your courses and uploads, your earnings and payouts, and the bank and tax details we need to pay you.
When you write to us
Your email and anything you send with it. Feedback sent from the app also carries the app version, your phone's model and system version, and the screen you were on, so we can look into what you saw. It reaches the team by email as well, so they can reply.
Why we use it
| To | We use |
|---|---|
| Sign you in and keep your account safe | Email address, sign-in codes, signed-in devices, IP addresses of sign-in requests |
| Run the app: play courses, remember where you were, keep your streak | Your practice |
| Keep downloads to your phones, and take them off when a course stops being yours | The phones your downloads are on, and which chapters are on each |
| Show the right prices and charge the right tax | Country, state in India, purchases |
| Issue invoices and credit notes, and keep the records tax law asks for | Purchases, name, email address, country, state in India |
| Send your reminder and the messages you've allowed | Notification address, reminder time, time zone |
| Check you're old enough to use Embodha | Year of birth |
| Send a message to the people it's meant for, for example a new course in Hindi to members in India | Country, year of birth, and gender if you gave it |
| Pay teachers their share | Purchases and minutes played, added up per teacher |
| See what's working and fix what isn't | How the app is used and crash reports (below), and feedback you send |
We ask for your consent when you create an account and when you switch things on, like notifications, and you can withdraw it at any time. We keep payment records because the law requires it.
We don't sell your information. We don't show ads, and we don't let advertisers track you in the app.
How the app is used
The app tells our own server about a few moments, so we can see whether people find what they came for:
- opening the app, and which screens you open;
- opening a course page, or reaching a chapter you don't have yet;
- starting, finishing or abandoning a purchase;
- starting a breath;
- how long a chapter took to start playing, and whether the phone was on Wi-Fi or mobile data (and which kind, like 4G);
- sending a chapter to a TV with Chromecast, and whether the TV could play it.
Each moment carries the course or screen it was about, never anything you typed. To count visitors who aren't signed in, each install of the app makes up a random number; signing out makes a new one. None of this goes to an outside analytics or advertising company.
If the app crashes or runs into an error, it sends us a report: what went wrong in the code, the screen it happened on, the app version, and your phone's model and system version. Never the name you gave your phone, and nothing you typed. A crash is kept on the phone until the app next opens, then sent.
To stop all of this, switch off Share how you use the app under You. We still need to know what you play, to keep your place and your streak and to pay teachers.
Who else handles it
These companies do part of the work for us. They may only use your information to do that work:
| Who | What for | What they see |
|---|---|---|
| Bunny.net | Storing and streaming videos, audio and photos | Your IP address and what's being streamed |
| Razorpay | Payments on the website | Your payment, your email address, and the details you enter at checkout |
| Apple and Google | Purchases in the iOS and Android apps, delivering notifications, and playing chapters on a TV with Chromecast | The purchase, and the notification itself. For a chapter on your TV, Google's Chromecast software gets its title, the course name, its picture, the link the TV streams it from, and a random tag for your phone; nothing about your account |
| Expo | Passing our notifications on to Apple and Google | Your phone's notification address and the message |
| [the company that sends the emails] | Sending sign-in codes, invoices and your data download, and passing feedback to our team | Your email address and the email |
| Our hosting provider | The servers Embodha runs on, in [where the servers are] | Everything above, stored for us |
Some of these companies work outside India, so your information may be handled in other countries. Teachers see how many minutes their courses were played and what they've earned, not who you are.
We share information with authorities only when the law requires it.
How long we keep it
- Your account: until you delete it. Deleting signs you out everywhere straight away. Thirty days later the account and everything tied to it is erased: profile, practice, notes, reviews, feedback, library and notification history. If you sign back in during those 30 days, the deletion is cancelled.
- Payments and invoices: kept for as long as tax law requires (in India, at least six years). If you've bought something, an empty account record stays for those payments to point to, with no email, name or other details.
- How the app was used, and what was searched for: once your account is erased, those records stay, but nothing links them to you.
- Crash and error reports: 90 days, then deleted.
- Sign-in codes: stop working after 10 minutes.
- Backups: kept for [how many days backups are kept] days, then overwritten.
Your choices and rights
- See it. Under You, Your data emails you a file of everything we hold about you.
- Correct it. Under You, Your details. For anything else, like your email address, write to us and we'll put it right.
- Delete it. Under You, Delete account. Or see deleting your account for other ways.
- Switch things off: notifications in your phone's settings, reminders and usage sharing under You.
- Name someone to act for you if you die or can't act yourself, as India's Digital Personal Data Protection Act allows. Write to us.
- Complain. Write to our Grievance Officer (below). We acknowledge complaints within 48 hours and answer within a month. If you're not satisfied, you can go to the Data Protection Board of India. If you live in the European Union or the UK, you can also complain to your data protection authority.
Keeping it safe
Everything travels encrypted. Notes are encrypted when stored. We keep sign-in codes and session keys only as fingerprints that can't be turned back into the real thing. Our team's access depends on their role, every change they make is recorded, and their sessions end after 12 hours idle. No system is perfect, and if something goes wrong that affects you, we'll tell you and the authorities as the law requires.
Children
Embodha is for adults. If you're under 18, please don't use it. If we learn a child has an account, we delete it.
Changes and contact
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
Grievance Officer: [the Grievance Officer’s name], [email protected]
Everything else: [email protected] or +91 73038 44485
[the company’s legal name]