Privacy Policy | Yohana Life Coaching

At Yohana Life Coaching ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Information We Collect

Personal Information

When you create an account, we collect your name, email address, and profile image (if signing in via Google). If you register with email and password, we store a securely hashed version of your password (we never store plain-text passwords).

Payment Information

Payments are processed securely through Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers. Stripe may collect and store payment information in accordance with their privacy policy.

Usage Information

We may collect information about how you interact with our website, including pages visited, time spent on pages, and referring pages.

How We Use Your Information

To create and manage your user account
To process purchases and deliver digital products and courses
To display your product reviews (using your name and profile image)
To communicate with you about your account or purchases
To improve our website and services

Third-Party Services

We use the following third-party services that may collect data:

Google OAuth — for account authentication. Google receives your authentication request and provides us with your name, email, and profile image.
Stripe — for payment processing. Stripe collects payment information directly and is PCI-DSS compliant.
Sanity CMS — for content management. Sanity stores our website content (blog posts, products, etc.) but does not collect user data.
Cal.com — for session booking. When you use our booking calendar, Cal.com may collect scheduling information.

Cookies & Local Storage

We use the following cookies and local storage:

NextAuth Session Cookie (authjs.session-token) — Essential. Maintains your login session. Expires when you close your browser or after the session timeout.
CSRF Token (authjs.csrf-token) — Essential. Protects against cross-site request forgery attacks. Expires per session.
Callback URL (authjs.callback-url) — Essential. Stores the redirect URL during authentication. Expires per session.
Stripe Cookies — Essential for payment security. Stripe may set cookies for fraud detection during checkout.
Cookie Consent (cookie-consent) — Stores your cookie consent preferences. Persists for 1 year.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of Access — You can request a copy of the personal data we hold about you.
Right of Correction — You can request that we correct inaccurate personal data.
Right of Deletion — You can request that we delete your personal data. Note that this may affect your ability to access purchased products.
Right of Portability — You can request your data in a portable format.
Right to Object — You can object to certain types of data processing.

To exercise any of these rights, please contact us at the email address below.

Data Retention

We retain your account data for as long as your account is active. Order records are retained for accounting and legal compliance purposes. You may request account deletion at any time by contacting us.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted password storage (bcrypt hashing), HTTPS encryption, CSRF protection, and secure session management.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: hello@yohana.com