This Privacy Policy describes how YoPeak, a service provided by Shouryanga Technologies LLP (“Company”, “we”, “us”, or “our”), collects, uses, and protects your personal data.
By using YoPeak, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
We collect the following categories of data:
- Account Information: email address used for authentication
- Health & Activity Data: data synced from wearable integrations (user-authorized), including sleep, recovery, activity, heart rate, and any other health or performance-related data made available by such devices and authorized by you
- Billing Information: your subscription plan and status; payment details are collected and processed directly by our payment provider (Dodo Payments) and are never stored on our servers
- Connection Data: the name of each AI assistant you connect, when you connected it, and which data tools it uses (stored as hashed access tokens and usage analytics)
- Usage Data: interactions with the platform such as pages viewed, features used, and in-app events
- Technical Data: device type, browser type, IP address, and system logs required for security and performance
2. Legal Basis for Processing
For users in applicable jurisdictions (including the European Economic Area), we process your data based on:
- Your consent (e.g., connecting wearable data)
- Performance of a contract (providing YoPeak services)
- Legitimate interests (product improvement, analytics, security, and fraud prevention)
3. How We Use Your Data
- To provide, operate, and improve YoPeak
- To generate personalized insights, analytics, and reports
- To authenticate users via passwordless login
- To analyze product usage and improve user experience
- To maintain platform security and prevent misuse
- To send essential service-related communications
- To deliver reports and insights you have opted into by email, which you can turn off at any time
- To process your data using AI models to generate insights and analytics as part of the service
We do not sell your personal or health data, and we do not use it for advertising.
4. Health Data
YoPeak processes health and biometric data obtained from connected wearable devices with your explicit authorization. This data may be considered sensitive personal data under applicable laws. We process it solely to provide insights and analytics within the platform.
YoPeak is not a medical service and does not provide medical advice, diagnosis, or treatment.
5. Data Sharing
We do not sell or share your personal data for advertising or marketing purposes. We only share data with trusted service providers required to operate YoPeak, including:
- Supabase — database, backend services, and authentication infrastructure
- Vercel — application hosting
- Railway — backend infrastructure and report generation
- Dodo Payments — payment processing and subscription billing
- Mixpanel — product analytics (event tracking and usage insights)
- Resend — transactional email delivery
- Anthropic Claude — AI processing for generating insights and analytics
6. Analytics & Tracking
We use analytics tools (such as Mixpanel) to understand how users interact with YoPeak, including feature usage and product performance. This data is used to improve the service and is not used for advertising or cross-site tracking.
7. Data Storage & Security
Your data is stored using secure infrastructure, primarily within the European Union where possible. We implement industry-standard safeguards including:
- Encryption at rest (AES-256 or equivalent)
- Encryption in transit (TLS 1.2+)
- Access controls and least-privilege principles
While we take reasonable measures to protect your data, no system can be guaranteed to be completely secure.
8. Data Retention
We retain your data for as long as your account remains active or as necessary to provide the service. We may retain certain data for a limited period after account deletion where required for legal, security, or operational purposes.
9. Data Deletion
You can delete your account and associated data at any time from within the app. Deletion is scheduled for 15 days after you request it. During that time you can cancel the request; after that date, your data is removed.
10. Third-Party Integrations
YoPeak integrates with third-party wearable providers. Access to such data is granted via your explicit authorization. You may revoke access at any time through the provider. Revoking access stops future data syncing but does not automatically delete previously collected data.
YoPeak also lets you connect your account to third-party AI assistants, currently Anthropic’s Claude and OpenAI’s ChatGPT, using the Model Context Protocol (MCP). This connection is created and controlled by you: you sign in to YoPeak and approve access on a YoPeak consent page. Once connected, the assistant can read, when you ask it to, your connected sources and your sleep, recovery, activity, daily summary, and body-metric data. Access is read-only. The assistant cannot change your account or your wearables, and it can only see your own data.
Data you access through an AI assistant is processed by that assistant’s provider under its own terms and privacy policy, not this one. YoPeak is not affiliated with or endorsed by Anthropic or OpenAI. You can disconnect at any time from within the assistant. We store a record of each connection (the assistant’s name and hashed access tokens), replace it when you reconnect, and delete it when you delete your account.
11. Cookies & Browser Storage
We use essential cookies required for authentication and session management. After you sign in, we also store anonymous product analytics identifiers in localStorage (Mixpanel) so we can understand how the app is used. We do not use advertising cookies, social media trackers, or any cross-site tracking. See our Cookie Policy for the full list.
12. Your Rights
Depending on your location, you may have rights including:
- Access to your personal data
- Correction of inaccurate data
- Deletion of your data
- Data portability (export)
- Objection to processing based on legitimate interests (including product analytics) — email us and we will stop
- Withdrawal of consent where consent is the basis (e.g., wearable connections)
13. International Data Transfers
Where data is transferred outside your jurisdiction, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection laws.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of YoPeak after changes constitutes acceptance of the updated policy.
15. Contact
For any privacy-related questions or requests, contact abhinav@yopeak.com.