Privacy Policy

Last updated: November 6, 2026

1. Information We Collect

In this policy, "your AI coach" means the AI that coaches you in the app (Fury or Katana). "A coach you choose" means a person you link with in the app to coach you (section 23). They are different, and they see different things.

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

Personal Information

Name and email address
Date of birth, sex, country, and height
A profile picture, if you choose to add one
Payment information. In the app, Apple or Google processes your payment and we receive only confirmation of the purchase (sections 13 and 17). On our website you can pay by debit or credit card or with PayPal, and PayPal processes that payment: PayPal receives your card details and billing information, and we receive only the payment's amount, status, and PayPal's reference numbers. You can also pay by GCash, Maya, or bank transfer outside our system and upload a screenshot of your payment receipt, which usually shows the name and account number you paid from. We never receive or store card numbers.
Fitness goals and preferences, such as your training schedule and the equipment you can use
Food preferences you give us: your diet type, allergies, and foods you avoid or prefer
Notes you choose to write for your AI coach
The questions you ask your AI coach in Coach Chat, and its answers (section 20)
The partner or organisation code you enter: a creator's, a coach's or a gym's code, or the code of an employer or organisation that sponsors your membership
Messages you send us through our contact form or in-app support. In-app support messages include details about your device (such as its model, operating system, and app version) so that we can fix problems.

Usage Information

Workout completion data
App usage patterns
Device information and IP address
Performance metrics and progress data

Location Information

Precise location (GPS), collected only while you are recording an outdoor endurance activity such as a run, ride, or walk
The route you travelled, together with distance, pace, and elevation derived from it
Collected in the background, meaning while the app is not on screen, so a recording is not lost when your screen locks

See section 14 for full detail on how location is used, stored, and controlled.

Health and Fitness Data

Heart rate and workout data you choose to share from Apple Health or Health Connect, and heart rate recorded during the runs, rides, and walks you track in EnsayoHub
Body measurements you choose to share from Apple Health or Health Connect: weight, body fat percentage, lean body mass, and height
Completed workouts we write back to Apple Health or Health Connect at your request
Body metrics you enter yourself, such as weight, height, and training history
Workouts you log in the app, and your weekly check-ins: your weight, how hard training felt, how well you kept to your nutrition, your energy, sleep, soreness and motivation, and anything that got in the way
Meals and water you log: the foods, portions, calories, and macronutrients
Body scan estimates: your estimated body fat percentage and the figures we calculate from it (section 19)
Health conditions and injuries you choose to declare, such as heart, lung, metabolic, joint or balance conditions, recent injuries, and pregnancy. These are used only to build and adapt your training safely, including by our AI provider when it builds your plans and weekly reviews (section 18), and to let a coach you choose coach around them, if you share them with that coach (section 23). They are never sold, never shared with anyone else, and never included in any email we send you.

Videos, Audio and Photos

Technique videos, strength form videos, circuit form check clips, Mastery attempts, and daily Technique Analysis videos that you record, or upload from your phone, for AI analysis
Microphone audio recorded as part of the technique, strength form, Mastery, and Technique Analysis videos you choose to capture, and the sound in a Technique Analysis video you upload. Circuit form check clips are recorded without sound.
Meal photographs you choose to submit for nutrition analysis
Body scan photographs you choose to capture: a front photo, and optionally a side photo. These are used to estimate your body composition and to generate your "Future You" preview (section 19). They are stored privately, are never public, and you can delete them and the preview from the app at any time.
An AI-generated image of you ("Future You"), created from your body scan photo to preview how your training could change your physique. It is stored privately alongside your scan and is deleted with it.
Workout share images saved to your photo library at your request
Photos you upload for a challenge programme such as Ensayo Season 1: a photo of your scale showing your weigh-in, and screenshots of your social media share (section 21)

Coach's Notes

Short notes your AI coach keeps about you so it can personalise your coaching: things you tell it, milestones from your own records, and patterns it notices in your weekly reviews. You can see and correct all of them in the app (section 20).

Coaches and Gyms You Choose

If you link with a coach you choose: which coach, which of your programs they coach or can only view, what you chose to share with them, and when you made or changed each choice (section 23)
Your messages with your coaches, and notes you add to an activity for a coach
Your coaches' reviews, comments, high fives and verdicts on your AI grades, your replies to them, and the changes coaches make to your plans and targets
Sessions and classes a coach invites you to, your replies, and your attendance and check-ins (section 23)
If you join a gym: when and how you joined, your check-ins, the passes the gym gives you, and the gym location you usually visit (section 24)
Your answers when we ask whether you still train with a coach, and reports you make about a coach

If you coach or run a gym on EnsayoHub, we also collect the details in section 25.

2. How We Use Your Information

We use the information we collect to:

Provide and personalize our AI-powered fitness programs
Analyse your videos, meals, and body scans with AI and give you feedback (section 18)
Process payments and manage subscriptions
Improve our services and develop new features
Communicate with you about your account and our services, and send the training reminders described in section 22
Run challenge programmes such as Ensayo Season 1, check entries, and award prizes (section 21)
Answer your support requests
Let the coaches you choose see, coach and comment on the training you share with them, and let you message each other (section 23)
Run memberships, passes and check-ins for the gyms you join (section 24)
Pay coaches and gyms the commission they earn, and check the identity of coaches and gyms (section 25)
Ensure the security and integrity of our platform

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy:

Service providers who assist us in operating our platform, each only for the job it does for us:
- Amazon Web Services hosts our servers and stores your data and uploads.
- OpenAI provides the AI analysis and coaching described in section 18.
- Google creates your "Future You" image with its Gemini model (section 19), shows route maps on Android and the map and address search in the portal's location settings for coaches and gyms (section 14), and provides Sign in with Google.
- Apple and Google process in-app purchases and provide sign-in (sections 13 and 17).
- PayPal processes card and PayPal payments made on our website, under PayPal's own privacy policy.
- Expo delivers push notifications, through Apple's and Google's notification services, and delivers app updates.
- Our email delivery provider sends the emails described in section 22.
If an employer or organisation sponsors your membership, it can see your name, email address, when you joined, when your access ends, and whether a payment for you is pending, plus an overall count of how many of its sponsored members trained in the last 30 days. It cannot see your workouts, meals, health data, photos, or videos.
Coaches you choose. Nothing about your training is shared with a coach until you link with them and confirm what they can see. You decide which of your programs each coach coaches or can only view, and you can change it or stop sharing at any time. Section 23 sets out exactly what a coach sees.
Gyms you join. A gym sees your name, your profile photo, your check-ins and your passes, never your workouts, meals, health information, progress photos or videos (section 24).
Partners. If you entered a partner's code (a creator's, a coach's or a gym's), that partner earns a commission on your payments and sees what they earn. A creator also sees your first name and last initial, the date you joined, and each commission credited for you. A coach or gym whose code you entered sees the totals they earn and how many of their members pay. Partners do not see your email address, and a code never shows a partner your training: only linking with a coach does (section 23).
Authorised EnsayoHub staff can access account and training records, including the photos and videos you upload, your Coach Chat conversations (and a coach's conversations with their AI coach, which can be about you), your messages with coaches, and the records of each coach link and gym membership, when needed to answer support requests, handle a report about a coach, verify payments, challenge entries and the identity of coaches and gyms, check that features are working as they should, and keep the service safe.
Exercise demonstration videos in the app are played from YouTube. When you play one, YouTube (Google) receives your device's IP address and information about your device, under Google's own privacy policy.
Legal requirements or to protect our rights
Business transfers (with your consent)

We do not use advertising or analytics tools in the app, and we do not share your information with advertisers or data brokers.

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Body scan photos, "Future You" images, meal photos, challenge photos, payment receipts, and the documents coaches and gyms upload for verification are kept in private storage. They can be opened only through short-lived links our systems create, never from a permanent public web address.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Some things are deleted automatically, and some are kept for a set reason:

Training videos (technique, strength form, circuit form check, Mastery, and Technique Analysis videos) are deleted automatically 10 days after they are recorded or analysed. Your grades and written feedback stay in your history. You can also delete a Technique Analysis session, and its video, from your history at any time.
Meal photos are deleted automatically 10 days after you log the meal. The meal and its calories and macronutrients stay in your history. A photo you only ask us to analyse, without saving the meal, is not stored.
Body scan photos and "Future You" images are kept until you delete the scan (section 19).
Challenge photos and screenshots are kept only as long as we need them to run the programme and judge its prizes (section 21).
Coach Chat conversations are kept with your account in Chat history, where you can read a past conversation again or continue it. A conversation you neither open nor write in for 30 days is deleted automatically, by the same rules as deleting it yourself (below); your Coach's Notes stay. Your AI coach follows only the open conversation, which closes after a few hours with no new message, or the one you choose to continue. Deleting a conversation deletes its messages, except any answer you reported and the question it answered, which we keep so our team can review your report. Your AI coach no longer sees any of it. For the other messages we keep only a record that each question was asked, because it counts toward your weekly allowance. The conversation, including any answers you reported, is deleted when you delete your account.
Messages with a coach are kept with your account. When you stop sharing with a coach, or they remove you, you can still read the conversation and the coach can no longer open it. If you link with the same coach again, they see the earlier conversation again.
A coach's reviews, comments and high fives on your training stay in your history after the link ends, unless the coach deletes them.
The record of each coach link (which coach could see what, and when) and of each change a coach made is kept after the link ends, to answer questions and reports.
What a coach's AI coach said about you is kept in that coach's Chat history while you train with them. Its words about you are deleted within a day after the link ends, and when you or the coach delete your account (section 23).
A coach's private notes about you are seen only by the coach who wrote them. They are not shown to you in the app or to other coaches, and the coach keeps them after the link ends. They are still your data: a copy of your data includes them (section 6).
Gym records. If you leave a gym, it keeps its record of your past visits and passes, under your name, without your photo.
Documents coaches and gyms upload for verification: identity documents and police or background checks are deleted 30 days after we decide on them. Certificates, first-aid certificates and a gym's business documents are kept until the coach or gym asks us to delete them. We keep a record of each check (section 25).
Payment receipts and purchase records are kept as records of your purchases.
Everything else is kept while you have an account, and after you delete your account until you ask us to erase it (section 6).

6. Your Rights

You have the right to:

Access and update your personal information
See and correct what your AI coach remembers about you, in Coach's Notes (section 20)
Change what each coach you chose can see, or stop sharing with them, at any time, from Your coaching team in the app (section 23)
Leave a gym at any time (section 24)
Report a coach you train or trained with (section 23)
Delete individual items in the app, such as a body scan, a meal, a Technique Analysis session, or an activity you added by hand
Delete your account, and ask us to erase your data (see below)
Opt out of marketing communications, using the unsubscribe link in any announcement email
Request a copy of your data, by writing to us (section 11), including any private notes a coach you chose keeps about you

Deleting your account

You can delete your account in the app, from the Account screen. This is exactly what happens today:

Your account is deactivated straight away, and you are signed out everywhere: every sign-in on every device and on our website is ended.
Your Coach's Notes and your profile details (such as your date of birth, sex, height, food preferences, health conditions, and coach note) are removed from your account and are not brought back if you sign in again.
Every link with a coach ends, and if you coach, your coaching is switched off.
Everything else is kept on our servers: your workouts, meals and photos, body scans, check-ins, activities and their routes, your messages with coaches, data imported from Apple Health or Health Connect, videos still inside the retention period in section 5, challenge entries, and payment records.
If you sign in again with the same email address, or the same Apple or Google account, your account is reactivated with that history.
Deleting your account does not cancel a subscription you bought through Apple or Google. Cancel it in your device's subscription settings.

Deleting your account does not yet erase your data automatically. To have your account and all of your data erased, email privacy@ensayohub.com from the email address on your account and ask for erasure. We will erase it and confirm to you when it is done.

7. Cookies and Tracking

We do not use cookies or similar technologies for analytics, advertising, or tracking you across other websites.

Our website (ensayohub.com) stores nothing in your browser: no cookies, no local or session storage, and no third-party scripts. If you visited before September 26, 2026, your browser may still hold a referral code cookie, a sign-in handoff cookie, or a sign-in token the website used to set. Nothing uses them any more, and they expire or can be cleared in your browser settings.
The member portal (portal.ensayohub.com) keeps your sign-in token and your account record (your name, email address, role, and subscription details, plus your profile and app settings once you open your account pages) in your browser's local storage until you log out. Logging out also cancels the token on our server. A referral code from a partner's link is kept in session storage until you sign in or close the tab, and can also appear in the login page's address. If you use a one-time sign-in link, its token is removed from the address bar once it has been used. The portal also remembers which sections of its menu you folded, for your account on that browser, and a tablet a gym sets up as its front-desk screen keeps the key that runs that screen.
Google and Apple sign-in. On the portal's login page, Google's sign-in script sets a g_state cookie that lasts about 180 days. While you sign in, Google and Apple may set their own cookies on their own websites, under their own privacy policies.
PayPal checkout. Only if you choose to pay by card or PayPal on the portal's billing page, PayPal's checkout script loads from PayPal and may set its own cookies, under PayPal's privacy policy. It does not load anywhere else.

See our Cookie Policy for the full list and for how to manage these items.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. You must be 18 or older to link with a coach, to join a gym through EnsayoHub, or to coach.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Our servers and file storage are hosted by Amazon Web Services in Singapore. Our AI providers, OpenAI and Google, and our other service providers may process your information in the United States and in other countries.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our application.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@ensayohub.com

12. Camera and Media Access

Our app requests access to your device's camera (android.permission.CAMERA on Android, camera access on iOS) only for features you choose to use:

Recording technique videos during martial arts workouts, form videos during strength workouts, Mastery attempts, and daily Technique Analysis sessions
Circuit form checks. If Form Check is switched on when you start a circuit (it is on by default when it is available to you, and you can switch it off before you press Start), the front camera records the first few seconds of each station during the first lap, without sound, so you never have to touch your phone mid-circuit.
Taking meal photos for nutrition analysis
Taking body scan photos
Scanning QR codes: a coach's or gym's code to add a coach or join a gym, a coach's check-in code at a session, and a gym's front desk code to check in (sections 23 and 24). Only the code is read; no photo is taken or kept.
Scanning a packaged food's barcode to log it. Only the barcode number is read; no photo is taken. Our server looks the number up in Open Food Facts, a public food database, which receives the barcode number only.

How we handle media captured by the camera:

On your device first: A photo or video is uploaded only when you submit it, for example to have a video analysed or to log a meal with its photo. Circuit form check clips are uploaded automatically once they are recorded. A video waiting to upload is kept temporarily in the app's own storage on your phone, and is removed when you sign out.
Uploads and server processing: Photos and videos you submit are transmitted to our servers over secure connections, analysed by our AI provider as described in section 18, and used only for the feature you used them for. Videos and meal photos are deleted automatically after the periods in section 5. Body scan photos are kept until you delete the scan.
Other people in your videos: If you record training with a partner, such as sparring or pad work, they will appear in the video. Please make sure they are happy to be recorded.

You can control camera access via your device settings and may revoke permission at any time. Revoking camera permission will disable features that rely on camera access. If camera access is required for a core feature, we will notify you and provide alternatives where possible.

If we make material changes to how we collect, use, or share media captured via the camera, we will update this policy and notify you where required by law.

13. Apple App Store

If you use EnsayoHub through the Apple App Store, the following additional terms apply:

Transaction Data: When you make purchases through the App Store (including subscriptions), Apple processes your payment information. We receive transaction confirmation and subscription status from Apple, but we do not receive or store your payment card details.
Apple's Data Collection: Apple may collect certain information about your use of the app in accordance with Apple's Privacy Policy, available at https://www.apple.com/legal/privacy/.
Analytics: We may receive anonymized and aggregated analytics data from Apple about app usage, crashes, and performance to help improve our services.
Account Information: If you sign in using Sign in with Apple, we receive limited information based on your sharing preferences (such as your name and a unique identifier or relay email address).

For information about managing your privacy settings on Apple devices, visit: https://support.apple.com/en-us/HT208982

14. Location Data

EnsayoHub accesses your device's location to power outdoor endurance tracking: recording a run, ride, or walk so we can show you your route, distance, pace, and elevation, and so your training plan can adapt to what you actually did.

What we access

Precise location (GPS). On Android this uses ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION. Approximate location alone is not accurate enough to measure a route.
Background location. On Android this uses ACCESS_BACKGROUND_LOCATION together with a foreground service (FOREGROUND_SERVICE and FOREGROUND_SERVICE_LOCATION). On iOS it uses the "Always" location authorisation. This exists for one reason: an activity recording must keep measuring when you put your phone in a pocket or your screen locks. Without it, your run would stop recording the moment the screen went dark.

When we access it

Only while you are actively recording an endurance activity. Location collection starts when you tap to begin a run, ride, or walk, and stops when you finish or discard the activity, or when it stops automatically after a long period without movement. While an activity is paused it is still in progress, so location stays on to notice when you start moving again. EnsayoHub does not track your location in the background at any other time. We do not collect location while you browse the app, log a gym workout, or when the app is simply installed and idle.

While a recording is running on Android, a persistent notification is shown so it is always visible to you that tracking is active.

How we use it

To calculate distance, pace, split times, and elevation for the activity
To draw the route map you see in the activity summary and history
To feed completed activity performance into your adaptive training plan and weekly review. Only figures such as distance, pace, and time are used for this: your route is never sent to our AI providers.

Where it is stored

Route points are first written to storage on your own device so that an in-progress activity survives a crash, a battery saver, or the app being closed. While the activity is in progress, and again when it is completed, the route is transmitted over an encrypted connection to our servers and stored with that activity record, so your history and maps are available across devices and after reinstalling.

What we do not do with it

We do not sell your location data.
We do not share your location data with advertisers or data brokers, and we do not use it for advertising or ad targeting.
We do not use your location to build a profile of the places you visit outside of activities you deliberately record.

Location data is shared only with the infrastructure providers that host and operate the service on our behalf (for example our cloud hosting and storage providers), and only so that we can deliver the features described above, or where we are legally required to disclose it.

Route maps are drawn on your phone, using Apple Maps on iOS and Google Maps on Android. The map provider loads map images for the area on screen; your recorded route itself is not sent to it.

Setting a location in the portal (coaches and gyms)

When a coach sets their listing area, or a gym sets a location, on the member portal (portal.ensayohub.com), the portal shows a Google map and an address search. Loading the map sends your internet address and the part of the map you are viewing to Google, and the words you type into the address search are sent to Google to find matching places, under Google's own privacy policy. If you click "Use my current location", your browser asks your permission and gives the portal your position once, to place the pin; you can search for the address or type the coordinates instead. We keep only the point you save: for a coach's area, a point we move to the nearest kilometre, and for a gym, the pin on its address, which members see.

Your control

Location permission is requested only when you open outdoor activity tracking, and background location only when you start recording. You may decline.
You can revoke location permission at any time in your device settings. Endurance tracking will stop working, but the rest of EnsayoHub continues to function normally.
Discarding an activity while you record it removes it from your history. To have a recorded activity and its route erased from our servers, write to us (section 11). Deleting your account does not erase your routes by itself (section 6).

15. Health and Fitness Data

With your explicit permission, EnsayoHub reads the following from Apple Health (HealthKit) on iOS and Health Connect on Android: heart rate, workouts (their type and timing, and on iOS the energy they burned), and your body measurements (weight, body fat percentage, lean body mass, and height). We also write your completed runs, rides, and walks back to them so your activity appears alongside the rest of your health record: on iOS with their distance and the energy burned, on Android as the activity and its time. On Android we also write activities you add by hand. We never write heart rate, routes, or body measurements to them.

On Android these are the Health Connect permissions READ_HEART_RATE, READ_EXERCISE, READ_WEIGHT, READ_BODY_FAT, READ_LEAN_BODY_MASS, READ_HEIGHT, and WRITE_EXERCISE. On iOS the permission screen also asks to read active energy and walking, running, and cycling distance alongside heart rate, because we request them together when saving your runs, rides, and walks; of that group we currently read only heart rate.

Body measurements keep your Fitness Metrics and daily calorie targets accurate without you retyping them. Imported workouts count toward your progress and your calorie balance.
Heart rate recorded during a run, ride, or walk you track in EnsayoHub (your average and maximum, your heart rate zones, and readings about every 15 seconds) is stored with that activity.
Health data is used only to display your activity, calculate your body metrics, and personalise your training programme. It is never used for advertising or marketing.
When a measurement from Apple Health or Health Connect is your most recent weight or body composition, it is used just like one you entered yourself, including in the details our AI provider receives to build your plans and weekly review (section 18).
We do not sell health data, and we do not share it with third parties for their own purposes.
You grant and revoke this access in Apple Health or Health Connect directly, independently of any other permission, and revoking it does not disable the rest of the app.

16. Microphone and Photo Library

Microphone. Audio (RECORD_AUDIO on Android) is recorded only as part of a technique, strength form, Mastery, or Technique Analysis video that you choose to record. Circuit form check clips are recorded without sound. It is not recorded at any other time, and there is no background or passive listening. The audio stays in the video file until the video is deleted (section 5); our AI analysis looks only at still images taken from the video and never listens to it.
Audio settings. On Android the app also uses MODIFY_AUDIO_SETTINGS so that workout sounds, such as the round bell, play correctly. This does not record anything.
Meal photographs. Photos you submit for nutrition analysis are uploaded for the purpose of estimating the meal's calories and macronutrients, are handled as described in section 12, and are deleted 10 days after you log the meal (section 5).
Choosing photos from your library. The app asks for access to your photos only when you choose a photo to use: a meal photo, a body scan photo, a profile picture, a challenge weigh-in photo or screenshot, or a background for a share image. Only the photo you pick is used. We never browse or upload the rest of your library, and a share image background stays on your phone.
Saving to your photo library. We request permission to add images to your photo library only so that we can save a workout share image at your request. Saving uses add-only access.

17. Google Play

If you use EnsayoHub on Android through Google Play, the following additional terms apply:

Transaction Data: Google processes purchases in the app, including subscriptions, through Google Play Billing (com.android.vending.BILLING). We receive a purchase token, order details, and subscription status from Google, and check them with Google to activate your premium access. We do not receive or store your payment card details.
Google's Data Collection: Google may collect certain information about your use of the app in accordance with Google's Privacy Policy, available at https://policies.google.com/privacy.
Account Information: If you sign in with Google, on Android, on iOS, or on our website, we receive your name, your email address, and a Google account identifier. We do not receive your Google password, and we do not store your Google profile photo.

18. AI Processing

EnsayoHub's coaching is powered by AI models from OpenAI and Google. To deliver a feature, we send the provider the content that feature needs. The provider processes it to deliver that feature to you and returns the result. We do not send your name or email address with it, and we do not send it to them for any other purpose.

What goes to OpenAI:

Your training videos, as still images taken from the video (never the audio), with your height, weight, age, experience level, earlier feedback, your equipment and accessories, and the Coach's Notes about your setup and any injury or limitation, to grade your technique and form
Meal photos and the foods you describe, with your country and goal, to estimate calories and macronutrients
Body scan photos, with your height, weight, age, and sex, to estimate your body composition (section 19)
Your profile, goals, equipment and accessories, health conditions, Coach's Notes, logged workouts, check-ins, and nutrition, to build your training and meal plans and your martial arts drills, and to write your weekly review. Your training plans also receive your recent body scan results, such as your body fat and lean mass (the figures, never the photos). Your weekly review also receives how your weight and body measurements have changed, including your body scan results.
Your Coach Chat questions, with the records your AI coach looks at to answer them, such as your profile, goals, health conditions, Coach's Notes, logged meals and workouts, check-ins, weight trend and body measurements, body scan results, technique feedback, and which of your partner perks you can use right now (section 20)

When a coach you chose asks their own AI coach about you, OpenAI receives what that coach can see of you (section 23), and nothing more, with your name and email removed.

When a coach you chose asks our AI to draft a program or meal plans for you, OpenAI receives the same details as when you ask for your own plans, plus the coach's written instructions, with your name and the coach's removed from them. When a coach fills in a meal plan's figures with AI, only the food names and portions are sent.

What goes to Google (the Gemini image model): your front body scan photo and a description of your goal, such as your target weight and timeframe, to create your "Future You" image (section 19).

Your location, routes, and heart rate readings are never sent to our AI providers. AI results are estimates, and you can always correct your own details in the app.

19. Body Scans and Future You

A body scan uses a front photo, and optionally a side photo, that you take or choose. We send them to OpenAI with your height, current weight, age, and sex to estimate your body fat percentage. From that estimate we calculate figures such as your lean body mass, which you see in the app.
Your recent scan results (the figures, not the photos) are also used to build your training plans, to write your weekly review and to answer your Coach Chat questions (section 18).
Your front photo is sent to Google's Gemini image model to create your "Future You" image. Your side photo is not used for it.
The photos and the image are stored privately and are never public. You see them in the app, and authorised EnsayoHub staff can view them in the same way as your other training records (section 3).
Deleting a scan in the app deletes its photos and its "Future You" image straight away. We keep a record that the scan took place, with its estimates, because it counts toward your scan allowance.

20. Coach's Notes, Coach Chat, and Your Journey

In Coach Chat you can ask your AI coach about your training, nutrition, recovery, and wellbeing. To answer, your AI coach reads your own records, as listed in section 18. Your name and email address are not sent with your questions. Your AI coach does not give medical advice.
A coach you choose never sees your Coach Chat or your Coach's Notes. If your AI coach suggests a change to a program that a coach you chose runs, the suggestion goes to that coach to accept or not, with your AI coach's reason only if you share your health conditions with them (section 23).
If you report one of your AI coach's answers, authorised staff read it, with the question it answered, to check and improve your AI coach (section 3). We keep a reported answer and its question even if you delete the conversation, until you delete your account (section 5).
Your AI coach keeps short notes about you so it can personalise your coaching: facts you tell it (for example an injury or a food you avoid), milestones from your own records (such as a badge you earned or a personal best), and patterns it notices across your weekly reviews.
You can see every note on the Coach's Notes screen in the app. You can confirm a note, edit the notes you wrote, or mark any note "Not true". A note marked "Not true" is never used again; we keep a record of it so that the same note is not created again.
Coach's Notes are part of the details our AI provider receives when it builds your plans and drills and writes your weekly review. Notes about your setup or an injury also go with your training videos, so the feedback fits what you train with (section 18).
Some reminder emails mention how many things your AI coach knows about you, and your latest milestone. They never include your health conditions or any other note.
Your Journey is built from your own records, such as your workouts, milestones, and badges, without AI.
Your Coach's Notes are removed when you delete your account (section 6).

21. Ensayo Season 1 and Other Challenge Programmes

If you join a challenge programme such as Ensayo Season 1, we collect:

The date you joined and your progress through the programme's checklists
A photo of your scale showing your starting weight (your weigh-in photo). We treat it as sensitive personal information.
Your starting weight and target weight, recorded when you qualify, to measure your progress
Screenshots of your social media share. Our staff read the reaction count from the screenshot. We do not connect to your Facebook account.
That you told us you joined the programme's Facebook group. We cannot check this and do not try to.

We use this to check your checklist items, grant the premium access you earn, and score and award prizes. Scoring also uses records you already keep in the app: your progress toward your target weight, your logged workouts and meals, and your form grades.

Your weigh-in photo and screenshots are stored privately, are seen only by the EnsayoHub staff who check challenge entries, and are never shown in the app or published. We keep them only as long as we need them to run the programme and judge its prizes. You can ask us to delete yours at any time (section 11); if you do so before judging, you may no longer be eligible for prizes.

22. Notifications and Email

Push notifications. The app asks for permission to send notifications (POST_NOTIFICATIONS on Android) from a prompt on your dashboard or from the Account screen, never when you first open it. If you allow them, your device's push token is sent to our servers and used, through Expo's push service and Apple's or Google's notification services, to send reminders and updates: morning, workout-day, and evening reminders at your local time, weekly summaries and check-in reminders, streaks and badges, news that a plan, analysis, or review is ready, messages, reviews, comments and high fives from your coaches, changes a coach makes to your plan, session invitations and reminders, news about your gym passes, payment updates, and announcements. If you coach or run a gym, we also send you alerts about your students, team and earnings, including a daily summary of the students who need you, at a time you choose. During an outdoor activity the app also shows notifications on your phone about the recording itself. You can turn notifications off at any time in your device settings.
Email. We email you about your account (such as verifying your email address and resetting your password), payments and renewals, replies to your messages, and, if an employer or organisation sponsors you, your sponsorship. If we cannot reach you with a push notification, some reminders are sent by email instead: when your plan is ready, a workout-day reminder, and a nudge if you have not trained for a week or more. Some coaching and gym notices go the same way: a question asking whether you still train with a coach, a coach link that ended because it went unanswered, a coach leaving your gym, changes to your gym passes, and being removed from a gym. An invitation from a coach or gym to someone without an account is sent by email. If you coach or run a gym, we also email reminders about your activity, documents and earnings, and gym owners get a weekly summary.
Announcements. We may email announcements about EnsayoHub. Every announcement email has an unsubscribe link. Reminder emails do not have one yet; to stop them, write to us (section 11).
Our emails contain no tracking pixels, and we do not track whether you open them or click their links.

23. Coaches You Choose

You can link with a person who coaches you, such as your gym's trainer or a coach you train with on your own. Coaches are independent: they are not EnsayoHub staff.

Linking

You link with a coach by entering their code, scanning their QR code, or accepting their invite, and then confirming what they can see. A coach sees nothing about your training before that.
For each of your programs (for example Boxing, Running or Nutrition) you decide whether a coach coaches it, can only view it, or sees nothing of it. Each program has at most one coach in charge. Your AI coach keeps reading every program so it can keep coaching you.
You must be 18 or older to link with a coach.

What a coach sees

About you: your name, profile photo, age, height, weight and goal weight (the weights you enter, never readings from Apple Health or Health Connect) and app level, and for each program they see, its goal, your experience level, and how many days and minutes you train.
Your health conditions and injuries, and what our AI wrote about you (the words of your reviews, plan and session names, and suggestions), because those words may mention your health. Shared unless you turn it off. Without it, a coach sees your grades and plans without our AI's words, apart from the feedback on Mastery attempts.
Which days you trained in your other programs: the days only, never what you did. Shared unless you turn it off.
Your body: your body scans with their estimates (body fat, lean mass, skeletal muscle and visceral fat) and photos. Only if you turn this on for that coach.
Your weekly review: if you share it, or if the coach coaches or can view every program you have. Its words also need your health conditions shared.
For each program they coach or can view: its plan; your logged sessions with every set and your remarks; activities of that kind, including workouts imported from Apple Health or Health Connect (their kind, when, and how long, never heart rate or other readings, and calories only for activities you typed yourself); your technique, form and Mastery reviews with their grades and videos (videos are deleted after 10 days, section 5); and for running, cycling and walking, your plan and each activity's distance, time, pace, splits, elevation and effort.
Nutrition, if they coach it or can view it: your meals from the last 14 days with their foods, portions, calories, macronutrients and photos (meal photos are deleted after 10 days, section 5), your daily totals, your nutrition targets, your meal plans, and how each day balanced: what you ate against your goal, with the calories you burned that day in total. That total counts every workout and activity, including ones in programs they do not coach and ones imported from Apple Health or Health Connect, but never says which workouts they were. They also see how your logged eating compares with how your weight moved over the last four weeks.
Notes you add to an activity for that coach, and your messages with them.

A coach never sees your location or routes, your heart rate, your Coach Chat or Coach's Notes, your payment details, or anything in a program they do not coach or view (apart from the calories it burned, inside a day's total, when they see your Nutrition).

Views are recorded. We log each time a coach opens one of your videos or body scan photos, and each time your meals load with their photos.

What a coach can do

The coach in charge of a program can change its plan, log a session for you, change your running, cycling or walking workouts, set your nutrition targets, write or change your meal plans, and ask our AI to draft a program or new meal plans for you (section 18).
They can review your training, including a verdict on an AI grade (agree, should be higher, or should be lower), comment on it and high-five it. You and any coach you link with can message each other.
A coach can invite you to sessions and classes, and sees your reply and whether you came (attended, no-show, late cancellation or excused), when you checked in and how. A session you attended is added to your history as an activity with that coach.
An online session opens in the meeting service your coach chose (such as Zoom or Google Meet), under that service's own privacy policy. We show its link only around the session's time.
A coach can ask their own AI coach (Fury or Katana) about the training you share with them. It reads only what that coach can see, as listed above, and your name and email are not sent to the AI provider (section 18). It can suggest a change to a program the coach runs, a message to you or a note, and nothing changes until the coach applies it.
Every change a coach makes to your plan, targets or sessions is shown to you in the app, and most send you a notification.
A coach can keep a record of your package with them (what it includes, its price, any discount and the sessions used) and of what you paid them (the amount, the date and how you paid, such as cash or GCash), to keep their own books. Payments to a coach do not go through EnsayoHub.

When sharing ends

You can change what a coach sees, or stop sharing with them, at any time from Your coaching team in the app. A coach can also remove you.
A link can also end without either of you choosing it: if we ask whether you still train with a coach (after 30 days without contact, or when your package with them ends) and the question goes unanswered for 14 days, or if a coach stops using EnsayoHub (section 25). We tell you when this happens. We may also end a link if we deactivate a coach.
When a link ends, the coach's access to your records ends at once, including your history. You can still read your messages, and their reviews and comments stay in your history unless they delete them. If you link with the same coach again, they see your earlier conversation again.
The coach keeps their private notes about you, any program they saved from your plan to reuse, and their record of your packages and payments.
Deleting your account ends every coach link (section 6).

Codes and reports

Entering a coach's code as your partner code credits that coach (section 3). It does not show them your training: only linking does.
Our coach terms forbid coaches from copying what you share or using it for anything other than coaching you. You can report a coach you train or trained with from the app, and our staff review every report.

24. Gyms You Join

You can join a gym in the app by entering its code, scanning the QR code at its front desk, accepting its emailed invite, or through a coach who coaches you as part of the gym. A coach can move you into a gym's programme only after you say yes. Before you join, the app shows what the gym will see, and you confirm it. You must be 18 or older.
What a gym sees: your name and profile photo, how and when you joined, the gym location you usually visit, your coaches at that gym, your check-ins (with the class, or "1:1 session" for a private one), your visits, and the passes it gives you, including any note its staff add (such as how you paid). When you check in, the desk screen shows your first name and last initial for a few seconds.
A gym never sees your workouts, meals, health information, progress photos, videos, email address or phone number, unless the person looking is also your coach (section 23).
Figures. Figures about members' training in the app, such as how many trained this week, never describe fewer than 5 people. Figures from the gym's own records (its check-ins, memberships and the payments it records) are shown in full to its owner and managers. Its class calendar shows how many people are coming, never who.
Memberships and passes. A membership or pass is the gym's own record that you may come to its classes or visit. Its staff may also record its price, any discount, what you paid for it (the amount, the date and how you paid, such as cash or GCash) and when it is paused, so the gym can keep its own books. In the app you see your membership, when it ends and whether it is paused. Payments to a gym do not go through EnsayoHub.
People who are not on EnsayoHub. A gym can keep a record of a member who does not use the app, by name only, with their memberships, payments and visits. The gym can give that person a personal code: if they join the gym in the app with it, the record's memberships and visits become part of their history with the gym. Only the person with the code can do this; the gym cannot attach the record to anyone's account.
Checking in uses your camera to read the gym's code (section 12) and records when you checked in, at which location, and which pass it used. Staff can also check you in by hand. Your phone's location is not used.
Leaving. You can leave a gym at any time, and a gym can remove you. The gym keeps its record of your past visits, memberships and payments, under your name, without your photo.

25. If You Coach or Run a Gym

Coaches

Your profile: your headline, bio, the programs and specialties you coach, years coaching, languages, how and where you coach (your gyms, an area, home visits), the contact links you add, whether to show your student count, and when you want your daily summary. You must be 18 or older to coach.
Your public page. Anyone with your code can see your page on our website (ensayohub.com/c/ followed by your code): "Coach" with your first name, your photo, your headline, and what you coach. In the app, members who enter your code also see your bio, languages, years coaching, how you coach, whether your identity is checked, and your student count unless you hide it. Your full name and contact links are shown only to members you coach, have invited, or used to coach.
Your code. Anyone can enter it. We record which members entered it, to credit you.
Payouts. Your payout details (GCash, Maya or a bank account, or a PayPal account given before we stopped offering it) are stored encrypted and used only to pay you. Before we pay you, and whenever your payout details change, our staff check that the account is in your name.
Your books. Your package types, prices and discounts, and the payments you record, are seen only by you. We do not take, check or hold these payments, and they are separate from what EnsayoHub pays you.
Verification. To verify, you upload a government ID, and you can add a police or background check (an NBI clearance in the Philippines), certificates for what you coach, and a first-aid certificate. Our staff may also ask you for a selfie or a short video call. Government IDs and background checks are sensitive personal information, and we ask your consent when you upload them. Only authorised staff open your documents, through short-lived links, and each view is logged. Section 5 says how long each is kept. We keep a record of each check: the document type, issuer, masked number, expiry, how we checked it, who checked it, when, and the result.
Your activity. We record when you last used EnsayoHub. If you have not used it for 60 days we remind you, and if you still have not after at least 90 days, your coaching is switched off and your students are told.
Your students' data is visible to you only as each student allows (section 23), and each time you open a student's video or photos is logged. Your private notes about a student are seen only by you.
We record the version of the coach terms and Coach Code you accepted, and when.

Gyms

Your gym's details: its name, description, logo, contact links, and each location's name, address and map pin (section 14). Members see your gym's name, and in a session, the location's name and address.
Your team. You invite coaches and staff by email, with a role and a location, and your team list shows their names and email addresses to your gym. When you invite someone by email, we store the address you typed and send the invitation.
Verification. You upload a business registration or permit (in the Philippines, a business permit or a DTI or SEC registration) and the owner's government ID. Only authorised staff open them, through short-lived links, and each view is logged. Section 5 says how long each is kept. We remind you before your permit expires.
Payouts. Only the owner sees and sets the gym's payout details, which are stored encrypted. The account must be in the owner's name or the gym's registered business name, and our staff check it before paying.
Your gym's books. Your plans, prices and discounts, and the payments your staff record, are your gym's own records. The owner and managers see the gym's finances; location managers record payments and see what a member owes, never the totals. We do not take, check or hold these payments, and they are separate from what EnsayoHub pays you. When you keep a record of someone who does not use EnsayoHub, your gym is responsible for telling them and for deleting it when they ask.
Gym owners get a weekly email with figures about the gym's members, never describing fewer than 5 people (section 24).
We record the version of the terms the owner accepted, and when.