PRIVACY POLICY
Whispering Infinity – Mobile App for Art of Living Teachers
Last Updated: May 5th, 2026
This Privacy Policy is entered into by and between The Art of Living Foundation ("we", "us", or "our"), on behalf of itself and its affiliates, group companies, related entities, and licensors, and you, the user of the Whispering Infinity mobile application (the "App").
We respect and value the privacy of all users. We will only collect and use information in ways that are useful to you and consistent with your rights and our obligations under applicable law.
This Privacy Policy applies specifically to the Whispering Infinity mobile application. It governs how we collect, use, retain, and protect your personal data through the App. It supplements, but does not replace, the privacy policies applicable to our websites (artofliving.org and related regional domains).
By installing or using the App, you agree to the terms of this Privacy Policy. If you do not agree, please uninstall the App and discontinue use.
This Policy applies worldwide to users of the App and is based on globally accepted principles of data protection. Where applicable national law conflicts with or imposes stricter requirements than this Policy, the national law takes precedence.
This Policy does not extend to third-party websites or services linked from the App. We advise you to review their privacy policies before providing any personal data to them.
During login, the App may request access to your device's location (precise or approximate). This is used solely to automatically detect and pre-select your country, to provide a smoother login experience.
How your location data is handled:
Location is accessed only once, at the time of login.
It is processed on-device to determine your country code only.
Your location coordinates are never transmitted to our servers.
We do not store, track, retain, or share your location data.
The location data is discarded immediately after your country is identified.
Only the resulting country code (e.g. "IN", "US", "IE") may be stored locally on your device for future sessions.
Location permission is optional. If you deny or revoke it at any time via your device settings, you can still use the App by selecting your country manually.
To access the App, you are required to log in using your account credentials.
When you log in:
You enter your username (or email) and password within the App
These credentials are securely transmitted to a third-party authentication system for verification
We do not store your password within the App or our servers
Upon successful authentication:
We receive confirmation of your identity and associated access permissions
We generate and store a secure authentication token to maintain your session within the App
We may also receive limited account-related information, such as:
A unique user identifier (e.g. user ID or token)
Your email address (if provided by the authentication system)
Your country (if applicable)
This information is used solely to:
authenticate your access to the App
provide access to authorized features
ensure security and prevent unauthorized use
We may automatically collect certain technical information when you use the App, including:
Device type, model, and operating system version
App version
IP address
Date and time of access
Crash reports and diagnostic data
This information is used to ensure the App functions correctly, maintain security, and resolve technical issues.
We collect limited information about how the App is used in order to operate and protect our services, including:
Features accessed within the App
General interaction with App functionality
Account-related activity (such as API requests and session activity)
This data is used to:
maintain the proper functioning of the App
detect and prevent unauthorized use or abuse (such as account sharing)
enforce usage limits (for example, restricting use to one active device per account)
We do not use this data for profiling or behavioural advertising.
We use the information we collect for the following purposes:
To provide and operate the App
Including enabling access to features and maintaining core
functionality.
To
authenticate users and ensure secure access
We use your account credentials to verify your identity and maintain
the security of your account.
To
detect your country during login
Location data may be used one-time during login or registration to
determine your country. This data is not stored.
To
monitor usage and prevent misuse of the App
We track certain activity associated with your account (such as API
requests and device usage) to:
prevent unauthorized access,
enforce usage limitations (e.g. one active device per account),
detect and prevent abuse or sharing of accounts.
To
communicate with you
Including
sending important service-related messages such as:
account or login-related notifications,
updates about App functionality or new features,
maintenance notices or temporary service interruptions.
To
improve the App and fix issues
We may use technical data (such as error reports or performance
data) to maintain and improve the App’s performance and stability.
To
comply with legal obligations
Including responding to lawful requests and enforcing our terms and
policies.
We process your personal data in accordance with applicable data protection laws. Depending on the context, we rely on the following legal bases:
Contractual Necessity
Processing is necessary to provide you with access to the App and
its functionality, including authentication, maintaining your
session, and delivering services you request.
Legitimate
Interests
Processing is
necessary for our legitimate interests, including:
ensuring the security of the App,
preventing unauthorized access and misuse (such as account sharing),
monitoring system performance and stability.
We
ensure that these interests are not overridden by your fundamental
rights and freedoms.
Consent
Where required, we rely on your consent, for example:
to access your device location,
You
may withdraw your consent at any time through your device settings
or account preferences.
Legal
Obligation
Processing is
necessary for compliance with legal obligations, such as responding
to lawful requests from authorities or regulatory requirements.
We do not sell, rent, or trade your personal information to third parties.
We may share your data only in the following limited circumstances:
Within the Organisation: We may share your data within The Art of Living Foundation and its affiliated entities for the purposes described in this Policy.
Authentication System: Your login credentials are transmitted to our third-party SSO authentication provider for verification purposes only. This provider does not retain your credentials beyond the authentication request.
Service Providers: Trusted third-party vendors who assist in operating the App (e.g. cloud hosting, crash reporting) under confidentiality agreements.
Legal Requirements: Where required by law, court order, or governmental authority.
Business Transfers: In the event of a merger or acquisition, your data may be transferred as a business asset under equivalent privacy protections.
We do not share your location data with any third party under any circumstances.
Your data may be stored or processed outside your country of residence. Where this occurs, we take all reasonable steps to ensure your data is treated as safely and securely as it would be within your country.
For users in the EEA, UK, and Ireland:
We rely on EU Standard Contractual Clauses (SCCs) for cross-border data transfers.
We rely on the European Commission's adequacy decisions where applicable.
We comply with EU-US and Swiss-US Privacy Shield Frameworks where applicable.
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law.
Precise location data: Not retained. Discarded immediately after country detection.
Country code: Stored locally on your device only. Cleared when the App is uninstalled.
Authentication tokens: Retained for the duration of your active session. Invalidated on logout.
Technical and usage data: Retained for up to 24 months for operational and security purposes.
Legal/compliance records: Retained as required by applicable law.
We implement appropriate technical and organisational measures to protect your personal data, including:
Encrypted data transmission (HTTPS/TLS)
Secure session token management
Access controls and role-based permissions
Regular security reviews
No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Depending on your location, you may have the following rights:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to certain processing, including direct marketing.
Right to Withdraw Consent: Withdraw consent at any time (e.g. revoke location access via device settings).
Right to Complain: Lodge a complaint with global data protection supervisory authority.
To exercise any of these rights, please contact us using the details in Section 12.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. For significant changes, we will notify you via in-app notification or email. Your continued use of the App after any changes constitutes acceptance of the updated Policy.
If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us:
The Art of Living Foundation
Email : infinityapp@in.artofliving.org
Website: www.artofliving.org
Global Data Protection Officer (DPO) — EEA / GDPR enquiries:
Email: compliance@in.artofliving.org