Namasté Online is operated by Yoga Bible ApS (CVR 41295252, Torvegade 66, 1400 København K, Denmark), the data controller for the personal data described here. This policy covers the website namasteonline.com and the Namasté Online apps for iPhone and Apple TV (and for Android phones and TVs as they become available), which are published by Yoga Bible ApS. Accounts can be created on the website or in the iPhone and Android phone apps. The Apple apps can also sell a membership through Apple's in-app purchase system to someone signed in to an account.
Your account: your name, email address, date of birth, country and city, and whether you want news emails from us. These are given when you create an account on the website or in the phone app. On the website, country and city may be suggested from your approximate location, based on your IP address, and you can change them. The phone apps ask for your date of birth when you create a free profile; in the apps you can edit your name, country and city. When you use the service: your bookings (including which website or app you booked from), the classes you attend, your live-viewing activity (see section 3), your membership status and your payment history (date, amount and status of each payment). For Apple-billed memberships, we store Apple's transaction identifiers, renewal and expiry dates, and refund or revocation status to grant access; Apple handles payment details. If you write to us, we keep your message and our reply. With every request we also record technical data: your IP address, platform or device type, and browser or app version. Authorized staff can view account and class activity, membership and studio-pass crossover, and coarse device, browser and app observations for operational reporting. Unknown technical details remain unknown; we do not create a device fingerprint.
When you watch a class, the website and the apps record viewing activity against your account: when you join, when playback starts, a periodic signal while you keep watching, when you pause and when you leave, each with your position in the class and the technical data described above. We use it to confirm attendance, keep your access to the stream working, fix playback problems and understand how classes are used. You can choose a private music mix for the class. Teacher and music levels are saved to your account for this brand; sound starts off for each class, and reconnecting during that class keeps your choice until you leave. Where available, the sound button shows studio microphone activity aligned to the video. This uses timestamps and numeric studio mic levels kept for at most 90 seconds, with no raw audio or viewer identity in that feed. It does not measure your microphone, speakers, TV volume or proof of listening. Mixes you star as favourites, and which new mixes you have previewed or chosen, are saved to your account so the player can show them; favourites from many members are counted together only to mark a few mixes as popular, never showing who or how many. Music diagnostics are off by default and are set in My account under Privacy. If you turn them on, we record the mix selected, playback attempts, player progress, levels, errors and device category for staff reports. Player progress does not prove sound came from a speaker or cast target. Turning diagnostics off erases your music events. You never appear in a class: the website and apps never use your camera or microphone, and classes are streamed one way, from the studio to you.
Classes are filmed in our studio in Copenhagen and broadcast live, one way, to members. The people who can be seen or heard in a broadcast are the teacher and, depending on the camera view, people taking the class in the studio. Online members never appear. People who book a studio class are told about the camera before they book. We broadcast classes because that is the service our members buy; for people in the studio, the legal basis is our legitimate interest in offering live classes (GDPR Art. 6(1)(f)), and you can object at any time (section 3c), and for teachers it is also our agreement with them (Art. 6(1)(b)). We do not use the broadcast or recordings to identify, profile or track people taking the class; training recordings are used only to give teachers feedback.
Our live-video provider records each broadcast while it is live, because that is how its service delivers live video. Recordings are never offered to members, never published and never sold. Routine recordings: our system deletes each recording automatically when the broadcast ends; in practice this happens within minutes, recordings that cannot be matched to a class are removed by a daily clean-up, and our target is deletion within 24 hours. If a deletion fails, our system tries again. Training recordings: we may select a recording of a class and keep it for internal teacher training, feedback and teaching-quality review, which is our legitimate interest (Art. 6(1)(f)). Before we keep it, we crop or blur people taking the class so they cannot be recognised, unless they have agreed to appear. A kept recording is stored with restricted access, can be viewed only by authorised staff and the teacher who taught the class, and is deleted as soon as the training or review is finished and no later than 90 days after the class. If a teacher stops teaching with us, training recordings of them are deleted within 30 days. After deletion, a copy may remain for a limited time in a provider's backups under its data-processing terms.
If you take classes in the studio, you can object at any time (GDPR Art. 21) to appearing in the live broadcast or in a recording. Write to info@namasteonline.com. We will stop unless we have compelling legitimate grounds that override your interests, which we will explain; a kept recording will be deleted or you will be removed from it. You can also ask whether we hold a recording of you and for access to it, within the limits that protect other people in it.
Recording, screenshotting or sharing a class is not allowed (section 3a of our terms). To discourage it, while you watch a class the website and apps show your first name and a short member code faintly on the video, moving to a new spot every so often. The code is the last six characters of your account ID (on the website, of your booking ID if your account ID is not available); the watermark never shows your email address or full name. It is made on your device from details we already hold, so showing it collects nothing new and sends nothing to us. If a recording or image of a class is shared, we may use the code to find the account it came from. The phone apps also use limits built into your phone. In the iPhone app, while your screen is being recorded or mirrored, the class video is hidden (playing it on a TV with AirPlay from the player still works), and after a screenshot the app shows a short reminder; screenshots themselves cannot be blocked. In the Android phone app, while the live player is open, screenshots, screen recordings and screen casting of the app show a black picture, unless you choose to allow casting. These checks happen only on your device: we are not told when you record, mirror, cast or take a screenshot, or when you allow casting. The website and the TV apps do not check for screen capture. Web browsers cannot reliably block or detect screenshots or recording by your operating system or another device. A watermark drawn by the website or app may not accompany video sent directly to a casting receiver. Our legal basis is our legitimate interest in protecting teachers, people in the studio and our classes from copying (Art. 6(1)(f)).
On a TV you can sign in with a short code that you approve from a signed-in phone or computer. The code expires after 10 minutes and only links that TV to your account. The TV then stays signed in until you sign out on it.
Under the GDPR (Article 6) we rely on: performance of our contract with you (Art. 6(1)(b)) to run your account, bookings, membership, payments, live streams and the service emails that go with them, and to answer your messages; legal obligation (Art. 6(1)(c)) to keep bookkeeping records of payments; our legitimate interests (Art. 6(1)(f)) in the live broadcast and the recordings described in sections 3a–3b, in the personal watermark described in section 3d, and in keeping the service secure, preventing fraud and abuse, fixing errors and playback problems and understanding how classes are used; and your consent (Art. 6(1)(a)) for news emails, optional analytics and advertising measurement. You can withdraw consent at any time; that doesn't affect anything done before.
We send service emails you need to use your account: sign-in and password messages, booking and membership confirmations, receipts and important changes to the service. News and offers are sent only if you have opted in, and every news email has a link to stop them. We don't send marketing or come-back emails to anyone who hasn't opted in.
Our service providers handle personal data to deliver this service. They are: BookingBible, our booking and membership system, which holds accounts, bookings, memberships and viewing activity in a Supabase database in an EU region; Cloudflare Stream (Cloudflare, Inc.) and Mux, our live-video providers, which carry the configured studio broadcast to you and record it as described in section 3b (on the website, Mux's player also measures playback quality); Stripe, which processes card payments on the website (we store only the last four digits of your card and your membership status); Apple, which processes purchases made in the iPhone and Apple TV apps and sends us signed subscription status; Vercel, which hosts the website and checks contact-form submissions for bots; Resend, which delivers our emails; Sentry, which monitors errors; Cloudflare Turnstile, which checks the website's account forms for bots; and, where verified and enabled with your consent, Google Analytics for site measurement and Meta Pixel for advertising measurement.
Your account data is stored in the EU. Some of our providers (for example Apple, Mux, Cloudflare, Stripe, Vercel, Resend, Sentry, Google and Meta) are based in, or may access data from, countries outside the EU/EEA such as the United States. Where that happens, the transfer is covered by an EU adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or by the EU Standard Contractual Clauses.
The apps contain no third-party advertising or optional analytics SDK, and we don't track you across other companies' apps or websites. First-party class viewing and coarse technical observations support the operational purposes described above. On the website, verified and enabled optional integrations may use Google Analytics to measure site use and Meta Pixel to measure advertising performance, after you accept the corresponding cookie category. Consent does not itself enable an unverified provider. With analytics consent, we retain first and recent acquisition information in your browser for up to 30 days and attach it when you create an account; advertising click identifiers additionally require marketing consent. You can withdraw either choice through Cookie settings. Administrative and sign-in pages are excluded from optional measurement. We do not sell personal data.
Necessary cookies support authentication, colour preferences, security and payment fraud prevention. Your cookie choice is stored in your browser. When you join a membership from a class booking on the website, necessary storage in that browser tab retains your selected class for up to 12 hours so you can return after bank verification. It is scoped to your account and studio and cleared when you close or continue the flow; it contains no payment tokens. The website's video player may store an identifier that Mux uses to measure playback quality. Google Analytics and Meta Pixel cookies are optional, and you can change or withdraw your choice at any time through Cookie settings.
Account, booking, membership and viewing data are kept while you have an account. Music diagnostic events, when enabled, are kept for at most one year and erased when you turn diagnostics off or delete your account. When the account is deleted, these records are deleted or anonymised so they can no longer be linked to you (see section 12). Bookkeeping records of payments are kept as long as Danish bookkeeping law requires, currently five years from the end of the financial year, and then deleted. Class recordings are kept only as described in section 3b.
You can delete your account in the Namasté Online app on your phone (Account → Delete account) or by writing to info@namasteonline.com. Requesting deletion in the app normally ends your access straight away; requests by email, or ones that need a manual check, end it when we start the deletion. The deletion is completed within 30 days. Website-billed memberships are canceled as part of deletion. If Apple bills your membership, you must also cancel it in your Apple Account subscription settings; deleting this account cannot stop Apple's renewals. Records we're legally required to keep, such as bookkeeping records of payments, are anonymised rather than removed. Step by step: namasteonline.com/delete-account.
Under the GDPR you may request access to your data, correction, erasure, restriction of processing or a portable export, object to how we use it, and withdraw any consent you have given. Write to info@namasteonline.com and we'll respond within 30 days. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the data protection authority where you live, such as the Information Commissioner's Office (ico.org.uk) in the UK.
Questions or data requests: info@namasteonline.com, or by post to Yoga Bible ApS (CVR 41295252, Torvegade 66, 1400 København K, Denmark). Namasté Online is an online service; classes are streamed live from Namasté Offline, Torvegade 66, 1400 København K.