Privacy policy

About this policy

AYMC Kula is the student and alumni hub for Alchemy Yoga & Meditation Center. This policy explains how information is handled when you visit aymckula.com, create an account, or use the hub. For privacy questions or requests, contact ashton@aymcbali.com.

Information we collect

Account information includes your name, email address, account identifier, approval status, and account permissions. Your optional profile may include a photo, biography, city, country, teaching location, website, and social-media links.

We store the information you provide in posts, replies, homework, certificates, past-training requests, and problem reports, along with training memberships, completion decisions, credited hours, teacher seals, preparation progress, notification preferences, private saved-item bookmarks, and relevant activity and administrative records.

We may also hold historical Alchemy Yoga training records containing names, email addresses, training names, locations, and confirmed completion information. Administrators can use these to check and connect your training history when you join. Importing a historical record does not create a login account.

Private messaging

Approved, active members can send text-only private messages across the Kula community. Messaging is available to all approved members by default, independently of map visibility. You can limit messages to people who share a training, turn messaging off, or block specific members in Messages settings.

We store message text, participants, timestamps, unread status, blocking preferences, and any reports you submit. Conversations are available to their participants. Administrators cannot browse private conversations through the hub. If you report a received message, that specific message and your report are shared with administrators and community moderators for review.

Messages are protected by HTTPS and account access controls, but are not end-to-end encrypted. Authorized infrastructure operators may access stored data for service operation or support. Optional email alerts contain a link to your inbox, not private message contents. Turning messaging off or blocking someone does not erase previous conversations.

Sign in with Google

Google sign-in is optional. If you choose it, Google and our authentication provider, Supabase, process your sign-in and provide account-identification information, such as your Google account identifier, name, email address, and basic profile information, which may include a profile picture.

We use this information to authenticate you, create or connect your hub account, and identify you within the hub. AYMC Kula does not request access to your Gmail messages, Google Drive files, calendar, or contacts. We do not receive your Google password.

You can remove AYMC Kula’s connection through your Google Account’s third-party connections settings. Removing that connection does not itself delete your hub account or training records. Contact us if you want those reviewed or deleted.

How information is used

We use information to operate your account; review membership and training requests; provide community and training features; record learning progress; deliver account and activity emails; respond to support requests; and protect the hub from misuse.

Your Google account data is used for these user-facing hub features, not advertising. We do not sell personal information or use Google account data for targeted advertising.

Who can see your information

The homepage and these policy pages are public. Community and training content requires an approved account and the relevant access permissions.

Other approved members can see shared profile information and content you post in spaces they can access. Community posts and announcements are visible to approved members; training discussions, announcements, and resources are restricted to people with access to that training. Your post or reply may identify you by name, photo, and teacher designation.

Private certificates and training evidence are available to you, authorized administrators, and teachers assigned to your trainings. Homework is available to its submitting student and authorized training staff. Authorized administrators can review account details, training records, approval requests, and problem reports.

A student appears in Alumni Search only after opting in and having a confirmed training completion, including an approved past training. Accounts designated as teachers are included automatically. Map pins require a saved city location and represent the city, not a home address. Removing a map pin clears its coordinates; it does not remove information you have shared in your biography or posts.

Service providers and external links

Supabase provides authentication. The hub is hosted through OpenAI Sites using Cloudflare infrastructure for its application database and uploaded-file storage. Resend delivers authentication and hub emails. These providers process the information needed to supply their services.

The alumni map requests map tiles from OpenStreetMap. When the map loads, the map provider receives technical request information such as your IP address. External websites, social-media links, and course-booking services operate under their own privacy policies when you visit them.

Our service providers may process information in countries outside the country where you live.

Cookies and security

The hub uses authentication cookies and related session information to keep you signed in and support secure access. Infrastructure providers may process technical logs to operate and protect their services. The hub does not include advertising trackers.

We use HTTPS, authenticated access, permission checks, and private file-serving routes. No online service can guarantee absolute security. Keep your login details private and tell us if you suspect unauthorized access.

Retention and deletion

We retain account, learning, and community records while needed to operate the hub, maintain accurate training history, resolve support matters, and meet applicable obligations. We review deletion requests individually, including whether records need to be retained for a legitimate purpose.

Hiding or suspending an account restricts access and discovery; it does not automatically erase the account, posts, certificates, or training records. Where information is deleted from active systems, backup copies may remain until the provider’s backup-retention cycle expires.

Your choices and requests

You can edit your profile, adjust optional email preferences, and remove your map pin. Essential account and security messages may still be sent. To request access to, correction of, or deletion of your information, contact ashton@aymcbali.com. We may ask you to verify your identity before acting.

Please avoid uploading unnecessary sensitive personal information about yourself or others. Obtain permission before sharing another person’s photo or private information.

Changes to this policy

We will update this page when our data practices change and provide notice of material changes where appropriate. New uses of Google account data will be disclosed before those uses begin.