Privacy Policy

Yodha is a corporate fitness-challenge platform operated by WiseCMB Technologies LLC, a company registered in Montana, USA (“Yodha”, “we”, “us”). Your employer (the “organisation”) runs a challenge and is the controller of your personal data; Yodha acts as the processor, handling that data on the organisation's behalf. For privacy questions, contact [email protected].

• Account details — your name and email, provided by your organisation or at enrolment.
• Fitness activity — daily steps and calories, read from Apple Health / Health Connect only with your permission, to score the challenge.
• Device token — to deliver push notifications, if you enable them.

We read activity data read-only. We never write to Apple Health or Health Connect, and we collect no other health information.

Solely to run the challenge: calculating scores, ranking clans and participants, showing leaderboards, and sending challenge-related notifications. We never sell your data, and we never use your health or personal data for advertising or marketing.

Health and fitness data is “special category” data under the GDPR. We process it on the basis of your explicit consent, which you give by ticking the consent box when you enrol or set up the app (we record the date and version you agreed to). You can withdraw consent at any time by disconnecting the health permission or deleting your account.

If you live in the United States, we do not sell your personal information and do not share it for cross-context behavioural advertising. California residents (CCPA/CPRA) may request access to, correction of, or deletion of their personal information and will not be discriminated against for doing so — use the export and delete links below or email us.

We treat your steps and calories as “consumer health data” under Washington's My Health My Data Act: we collect it only with your consent, use it solely to run your challenge, never sell it, and you can withdraw consent or delete it at any time.

Data is hosted on Oracle Cloud Infrastructure in Singapore. Yodha is operated by WiseCMB Technologies LLC in the United States, so authorised personnel may access your data from the US. We use Google Firebase Cloud Messaging to deliver push notifications. Where data is transferred internationally (including to Singapore and the US), we rely on appropriate safeguards such as the Standard Contractual Clauses.

Your data is encrypted in transit (HTTPS/TLS). Access to personal data is limited to authorised personnel and your organisation's administrators on a need-to-know basis, and we apply technical and organisational measures appropriate to the sensitivity of health data. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of any breach as required by law.

Our website uses only the essential cookies needed to keep you signed in and to operate the service. We do not use advertising or cross-site tracking cookies.

We keep your personal data only as long as needed for an active challenge. About 30 days after a challenge ends (unless a new one has started), we anonymise your personal and activity data — your name and email are removed. Unaccepted enrolment requests are cleared after 30 days. You re-enrol for each new challenge.

Export a copy of your data any time at yodhaclans.com/export-data. Delete your account from the app (Profile → Delete account) or online at yodhaclans.com/delete-account — deletion deactivates your account immediately and permanently removes your personal data within 30 days. To correct your details, contact [email protected] or your organisation admin. EU/UK users also have the right to lodge a complaint with their data-protection authority.

Yodha is intended for working adults and is not directed at children under 16.

We may update this policy; we'll revise the date above and, for material changes, notify you in the app.