Sadhana Saarthi
Data Stewardship

Privacy Policy

SURYANSH PROJECT HATHA YOGA LLP operates Sadhana Saarthi with strict data minimisation. This policy describes what we collect, why we collect it, and how we protect it.

Last updated: June 2026

1. Data Fiduciary & Grievance Officer

Under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), the data fiduciary for personal information processed through sadhanasaarthi.in is SURYANSH PROJECT HATHA YOGA LLP, New Dwarikapuri, Shivpuri, Madhya Pradesh, India, 473551.

Grievance Officer: for any question, complaint, or exercise of your rights under this policy, contact our Grievance Officer at support@sadhanasaarthi.in. We acknowledge grievances within 48 hours and aim to resolve them within 30 days, consistent with the timelines stated in our Shipping and Disclaimer policies.

2. Information We Collect

We collect personal data when you interact with the Platform, including:

  • Account details — email address, name, and login credentials when you register or sign in.
  • Onboarding profile — city, postal code, country, timezone, general location, medical restrictions, chosen premium track, and related wellness disclosures such as dietary phase, pregnancy month, surgery recovery date, child age, or mobility preferences.
  • Practice history — sadhana experience level, goals, practice names, session duration, meal timing, and safety-related inputs you voluntarily log.
  • Payment records — transaction identifiers, currency, amount paid, and plan tier, as provided by our payment processor after a successful purchase.
  • Consultation bookings — name, email, optional phone number, and your preferred consultation date and time.
  • Regional preferences — country and currency settings used to display fair local pricing.

2a. Your Consent for Health & Wellness Data

Medical restrictions, pregnancy, surgery recovery, and other wellness disclosures you share during onboarding or yatra registration are used solely to personalise your practice guidance and flag safety considerations to your teacher — never for any other purpose. By submitting this information, you give explicit, freely given consent for us to process it for this specific purpose.

You may withdraw this consent at any time by emailing support@sadhanasaarthi.in. Withdrawing consent may limit our ability to safely personalise your practice guidance, and does not affect the lawfulness of processing carried out before withdrawal.

3. Practice & Journey Data

Practice streaks, session counts, and monthly statistics are derived from your logged sessions and shown on your dashboard. Your 12-month journey roadmap is stored in your account after an active subscription is confirmed.

For premium track members, the Platform may retain advisory notes related to practice safety. These remain private to your account and are not published externally.

4. What We Do Not Collect or Share

Sadhana Saarthi does not collect biometric telemetry such as heart rate, EEG, camera-based posture scanning, or wearable device streams. We do not sell personal data to third-party advertisers.

Certified teacher information shown in our public directory is not shared with external parties for marketing or resale. Teacher discovery features are available only to authenticated members within appropriate use limits.

Health parameters, location data, and practice metrics are shared with third-party service providers only when strictly necessary to deliver your subscription benefits — such as generating a personalised journey or answering your practice questions — and only for accounts with valid authentication.

5. Data Storage & Security

Your data is stored on secure, access-controlled systems. Only authorised personnel and essential service providers may access account records, and only to operate the Platform.

Payment card and UPI details are processed entirely by our payment partner. Sadhana Saarthi does not store card numbers, CVV, or UPI PINs.

All communications with the Platform are encrypted in transit. We apply industry-standard security measures to protect your information.

6. Data Retention & Your Rights

We retain personal data only as long as needed for the purpose it was collected:

  • Account & practice data — for as long as your account is active, and up to 12 months after your last activity before we delete it, unless you request earlier deletion.
  • Payment & transaction records — 8 years, as required under Indian tax and financial record-keeping law.
  • Health & wellness disclosures — deleted or anonymised no later than 24 months after your account becomes inactive, or immediately on request under Section 2a above.
  • Yatra enquiry data (including age and health declarations submitted for a yatra you did not book) — deleted within 12 months of submission if you do not proceed with a booking.

Your rights as a Data Principal under the DPDP Act, exercisable by emailing support@sadhanasaarthi.in:

  • Access a summary of the personal data we hold about you
  • Correct or update inaccurate or incomplete data
  • Request erasure of your data, subject to our legal retention obligations above
  • Withdraw consent for any processing based on consent (see Section 2a)
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
  • Lodge a grievance with our Grievance Officer (Section 1), and if unresolved, with the Data Protection Board of India

You may opt out of promotional outreach at any time by contacting support or updating your communication preferences where available.

7. Third-Party Service Providers

We work with trusted third parties to operate the Platform, including providers for secure payments (Razorpay), cloud hosting and deployment (Vercel), database storage (Supabase), transactional email (Resend), and AI-assisted journey and chat features (Google Gemini). These partners process data only on our instructions and for defined purposes.

8. Cross-Border Data Transfer

Some of our service providers process data on servers located outside India, including in the United States and Singapore. Where personal data is transferred outside India, we rely on our service providers' contractual and technical safeguards to protect it, consistent with the DPDP Act, 2023. We do not currently restrict transfers to any specific country, in line with the Act's general allowance for cross-border transfer outside a notified restricted list.

9. Cookies

We use a small number of first-party cookies to run the Platform:

  • ss-country / ss-currency — strictly necessary, non-advertising cookies holding the country our host resolves from your connection, so we can show pricing in your local currency without a round trip. They mirror that value rather than storing a choice, and are refreshed on every visit. No personal identifier is stored in them, and they are not used to decide what you are charged.
  • Supabase session cookies — strictly necessary to keep you signed in to your account.
  • Vercel Analytics — privacy-focused, cookieless product analytics that helps us understand which pages and features are used. It does not use tracking cookies or build cross-site profiles.

Because these are strictly necessary or privacy-preserving by design, we do not currently show a cookie consent banner. You can clear cookies at any time through your browser settings; this will reset your saved region and sign you out.

10. Children's Data

The Platform is intended for users 18 years and older, except for minors enrolled in the Pragya youth track under a parent or legal guardian's account, per our Terms & Conditions. We do not knowingly collect personal data directly from a child; a minor's participation is authorised and supervised by their parent or guardian at all times.

11. Policy Updates

We may update this Privacy Policy to reflect regulatory changes or new platform features. Material changes will be noted on this page with an updated revision date. Continued use of the Platform after changes constitutes acceptance.