← Back to Stara Yoga

Privacy Policy

Effective date: 18 March 2026

1. Who We Are

Stara Yoga operates the website at www.starayoga.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. We are committed to handling your information responsibly and in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. Information We Collect

We collect the following categories of personal information:

Account Information

Your name and email address, collected when you create an account via Manus OAuth.

Payment Information

Subscription and billing information is processed by Stripe. We store only a Stripe customer reference ID — we never see or store your full card number, CVV, or expiry date.

Usage Data

Information about classes and meditations you have watched or completed, including session duration and progress. This is used to power your personal journey stats.

Profile Information

Any optional profile details you choose to provide, such as a display name, bio, or avatar selection.

Technical Data

Basic analytics data including page views and session counts, collected in aggregate via our analytics provider. This data does not identify you personally.

3. How We Use Your Information

We use your personal information only for the following purposes:

  • To create and manage your account
  • To process subscription payments and manage billing
  • To provide access to on-demand classes, live sessions, and meditation content
  • To track your practice progress and display your journey stats
  • To send transactional emails (subscription confirmations, cancellation notices, and access expiry reminders)
  • To respond to your enquiries or support requests
  • To improve the Service through aggregated, anonymised usage analysis

We do not use your personal information for advertising, and we do not sell or rent your data to third parties.

4. Third-Party Services

We use a small number of trusted third-party services to operate the platform:

Stripe

Payment processing. Stripe processes and stores your payment card details under their own privacy policy. Privacy Policy →

Resend

Transactional email delivery (subscription and account notifications). Privacy Policy →

Bunny Stream

Video hosting and delivery for on-demand classes. Privacy Policy →

Manus

Platform infrastructure, authentication, and hosting. Privacy Policy →

Each of these providers is bound by their own privacy policies and applicable data protection laws. We only share the minimum information necessary for them to provide their services.

5. Data Storage and Security

Your data is stored on secure servers. We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active, or as long as necessary to fulfil the purposes described in this policy. If you delete your account, we will delete or anonymise your personal data within a reasonable timeframe, unless we are required by law to retain it.

6. Cookies and Analytics

We use session cookies to keep you logged in to your account. These are strictly necessary for the Service to function and cannot be disabled. We do not use advertising cookies or third-party tracking cookies.

We collect anonymised, aggregate analytics data (such as page views and session counts) to understand how the Service is used. This data cannot be used to identify you individually.

7. Your Rights

Under the Australian Privacy Act and applicable law, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your account and associated data
  • Opt out of non-essential communications at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify you by email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

10. Contact

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.