PranaRoot (“we”, “us”, “our”) is a booking and studio management platform for yoga, Pilates, and wellness teachers. This Privacy Policy explains what data we collect, how we use it, and what rights you have over it.
1. Data we collect
For teachers (studio owners):
- Name, email address, and password (for your account)
- Studio name and public booking URL slug
- Timezone and plan details
- Payment gateway account identifiers (Razorpay Key ID) — we do not store secret keys
For students (people who book classes):
- Name, email address, and phone number (provided when booking)
- WhatsApp number (if provided, used only for class reminders)
- Health and injury notes — entered by the teacher and visible only to that teacher. This is considered sensitive health data and is never shared with third parties.
- Booking history and payment status
2. How we use your data
- To provide the PranaRoot service — bookings, class management, student rosters
- To send booking confirmation emails and class reminders
- To process payments via Razorpay (India) or Stripe (international)
- To send WhatsApp reminders once that feature launches, if you have provided a WhatsApp number and the teacher has enabled reminders
- We do not sell your data to any third party, ever
3. Health and injury notes
Teachers can record health notes (e.g. injuries, physical limitations) against a student profile. This information is:
- Visible only to the teacher who entered it
- Never shared with other users, third parties, or displayed publicly
- Stored encrypted at rest by our database provider (Supabase / PostgreSQL)
- Deletable at any time by the teacher or by contacting us
4. Third-party services
We use the following services to operate PranaRoot:
- Supabase — database and authentication hosting. Your data is stored on Supabase's servers.
- Razorpay — payment processing for Indian transactions. Card details are handled entirely by Razorpay and never pass through our servers.
- Stripe — payment processing for international transactions. Same as above.
- Paddle — billing for teacher subscription plans (Solo / Studio). Paddle acts as merchant of record and handles all card details for these subscriptions.
- Resend — transactional email delivery (booking confirmations, alerts).
- Vercel — application hosting and infrastructure.
5. Data retention
We retain your data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days, except where we are legally required to retain financial records (typically 7 years for payment records).
6. Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent for WhatsApp communications at any time
- Export your student and payment data as CSV from your dashboard, or request a full export by email
To exercise any of these rights, email us at privacy@pranaroot.io.
7. Cookies
We use only essential cookies: a cookie that remembers your currency preference (INR or USD), and authentication session cookies (set by Supabase) that keep you signed in. When a teacher opens the subscription checkout, Paddle may set cookies required to process the payment. We do not use advertising cookies or third-party tracking cookies.
8. Contact
For any privacy questions or requests, contact us at privacy@pranaroot.io. We aim to respond within 48 hours.