Privacy Policy

Last updated: September 26, 2026

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

Personal Information

Name and email address
Date of birth, sex, country, and height
A profile picture, if you choose to add one
Payment information. In the app, Apple or Google processes your payment and we receive only confirmation of the purchase (sections 13 and 17). On our website you pay by GCash, Maya, or bank transfer outside our system and upload a screenshot of your payment receipt, which usually shows the name and account number you paid from. We never receive or store card numbers.
Fitness goals and preferences, such as your training schedule and the equipment you can use
Food preferences you give us: your diet type, allergies, and foods you avoid or prefer
Notes you choose to write for your coach
The referral or organisation code you enter, if you joined through an affiliate or through an employer or organisation that sponsors your membership
Messages you send us through our contact form or in-app support. In-app support messages include details about your device (such as its model, operating system, and app version) so that we can fix problems.

Usage Information

Workout completion data
App usage patterns
Device information and IP address
Performance metrics and progress data

Location Information

Precise location (GPS), collected only while you are recording an outdoor endurance activity such as a run, ride, or walk
The route you travelled, together with distance, pace, and elevation derived from it
Collected in the background, meaning while the app is not on screen, so a recording is not lost when your screen locks

See section 14 for full detail on how location is used, stored, and controlled.

Health and Fitness Data

Heart rate and workout data you choose to share from Apple Health or Health Connect, and heart rate recorded during the runs, rides, and walks you track in EnsayoHub
Body measurements you choose to share from Apple Health or Health Connect: weight, body fat percentage, lean body mass, and height
Completed workouts we write back to Apple Health or Health Connect at your request
Body metrics you enter yourself, such as weight, height, and training history
Workouts you log in the app, and your weekly check-ins: your weight, how hard training felt, how well you kept to your nutrition, your energy, sleep, soreness and motivation, and anything that got in the way
Meals and water you log: the foods, portions, calories, and macronutrients
Body scan estimates: your estimated body fat percentage and the figures we calculate from it (section 19)
Health conditions and injuries you choose to declare, such as heart, lung, metabolic, joint or balance conditions, recent injuries, and pregnancy. These are used only to build and adapt your training safely, including by our AI provider when it builds your plans and weekly reviews (section 18). They are never sold, never shared with anyone else, and never included in any email we send you.

Videos, Audio and Photos

Technique videos, strength form videos, circuit form check clips, Mastery attempts, and daily Technique Analysis recordings that you record for AI analysis
Microphone audio recorded as part of the technique, strength form, Mastery, and Technique Analysis videos you choose to capture. Circuit form check clips are recorded without sound.
Meal photographs you choose to submit for nutrition analysis
Body scan photographs you choose to capture: a front photo, and optionally a side photo. These are used to estimate your body composition and to generate your "Future You" preview (section 19). They are stored privately, are never public, and you can delete them and the preview from the app at any time.
An AI-generated image of you ("Future You"), created from your body scan photo to preview how your training could change your physique. It is stored privately alongside your scan and is deleted with it.
Workout share images saved to your photo library at your request
Photos you upload for a challenge programme such as Ensayo Season 1: a photo of your scale showing your weigh-in, and screenshots of your social media share (section 21)

Coach's Notes

Short notes your coach keeps about you so it can personalise your coaching: things you tell it, milestones from your own records, and patterns it notices in your weekly reviews. You can see and correct all of them in the app (section 20).

2. How We Use Your Information

We use the information we collect to:

Provide and personalize our AI-powered fitness programs
Analyse your videos, meals, and body scans with AI and give you feedback (section 18)
Process payments and manage subscriptions
Improve our services and develop new features
Communicate with you about your account and our services, and send the training reminders described in section 22
Run challenge programmes such as Ensayo Season 1, check entries, and award prizes (section 21)
Answer your support requests
Ensure the security and integrity of our platform

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy:

Service providers who assist us in operating our platform, each only for the job it does for us:
- Amazon Web Services hosts our servers and stores your data and uploads.
- OpenAI provides the AI analysis and coaching described in section 18.
- Google creates your "Future You" image with its Gemini model (section 19), shows route maps on Android (section 14), and provides Sign in with Google.
- Apple and Google process in-app purchases and provide sign-in (sections 13 and 17).
- Expo delivers push notifications, through Apple's and Google's notification services, and delivers app updates.
- Our email delivery provider sends the emails described in section 22.
If an employer or organisation sponsors your membership, it can see your name, email address, when you joined, when your access ends, and whether a payment for you is pending, plus an overall count of how many of its sponsored members trained in the last 30 days. It cannot see your workouts, meals, health data, photos, or videos.
If you signed up with an affiliate's referral code, that affiliate sees your first name and last initial and the date you joined, and the commissions they earn from referred members' payments. Affiliates do not see your email address or any of your training data.
Authorised EnsayoHub staff can access account and training records when needed to answer support requests, verify payments and challenge entries, and keep the service safe.
Exercise demonstration videos in the app are played from YouTube. When you play one, YouTube (Google) receives your device's IP address and information about your device, under Google's own privacy policy.
Legal requirements or to protect our rights
Business transfers (with your consent)

We do not use advertising or analytics tools in the app, and we do not share your information with advertisers or data brokers.

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Body scan photos, "Future You" images, meal photos, challenge photos, and payment receipts are kept in private storage. They can be opened only through short-lived links our systems create, never from a permanent public web address.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Some things are deleted automatically, and some are kept for a set reason:

Training videos (technique, strength form, circuit form check, Mastery, and Technique Analysis videos) are deleted automatically 10 days after they are recorded or analysed. Your grades and written feedback stay in your history. You can also delete a Technique Analysis session, and its video, from your history at any time.
Meal photos are deleted automatically 10 days after you log the meal. The meal and its calories and macronutrients stay in your history. A photo you only ask us to analyse, without saving the meal, is not stored.
Body scan photos and "Future You" images are kept until you delete the scan (section 19).
Challenge photos and screenshots are kept only as long as we need them to run the programme and judge its prizes (section 21).
Payment receipts and purchase records are kept as records of your purchases.
Everything else is kept while you have an account, and after you delete your account until you ask us to erase it (section 6).

6. Your Rights

You have the right to:

Access and update your personal information
See and correct what your coach remembers about you, in Coach's Notes (section 20)
Delete individual items in the app, such as a body scan, a meal, a Technique Analysis session, or an activity you added by hand
Delete your account, and ask us to erase your data (see below)
Opt out of marketing communications, using the unsubscribe link in any announcement email
Request a copy of your data, by writing to us (section 11)

Deleting your account

You can delete your account in the app, from the Account screen. This is exactly what happens today:

Your account is deactivated straight away, and you are signed out everywhere: every sign-in on every device and on our website is ended.
Your Coach's Notes and your profile details (such as your date of birth, sex, height, food preferences, health conditions, and coach note) are removed from your account and are not brought back if you sign in again.
Everything else is kept on our servers: your workouts, meals and photos, body scans, check-ins, activities and their routes, data imported from Apple Health or Health Connect, videos still inside the retention period in section 5, challenge entries, and payment records.
If you sign in again with the same email address, or the same Apple or Google account, your account is reactivated with that history.
Deleting your account does not cancel a subscription you bought through Apple or Google. Cancel it in your device's subscription settings.

Deleting your account does not yet erase your data automatically. To have your account and all of your data erased, email privacy@ensayohub.com from the email address on your account and ask for erasure. We will erase it and confirm to you when it is done.

7. Cookies and Tracking

We do not use cookies or similar technologies for analytics, advertising, or tracking you across other websites.

Our website (ensayohub.com) stores nothing in your browser: no cookies, no local or session storage, and no third-party scripts. If you visited before September 26, 2026, your browser may still hold a referral code cookie, a sign-in handoff cookie, or a sign-in token the website used to set. Nothing uses them any more, and they expire or can be cleared in your browser settings.
The member portal (portal.ensayohub.com) keeps your sign-in token and your account record (your name, email address, role, and subscription details, plus your profile and app settings once you open your account pages) in your browser's local storage until you log out. Logging out also cancels the token on our server. A referral code from a partner's link is kept in session storage until you sign in or close the tab, and can also appear in the login page's address. If you use a one-time sign-in link, its token is removed from the address bar once it has been used.
Google and Apple sign-in. On the portal's login page, Google's sign-in script sets a g_state cookie that lasts about 180 days. While you sign in, Google and Apple may set their own cookies on their own websites, under their own privacy policies.

See our Cookie Policy for the full list and for how to manage these items.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Our servers and file storage are hosted by Amazon Web Services in Singapore. Our AI providers, OpenAI and Google, and our other service providers may process your information in the United States and in other countries.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our application.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@ensayohub.com

12. Camera and Media Access

Our app requests access to your device's camera (android.permission.CAMERA on Android, camera access on iOS) only for features you choose to use:

Recording technique videos during martial arts workouts, form videos during strength workouts, Mastery attempts, and daily Technique Analysis sessions
Circuit form checks. If Form Check is switched on when you start a circuit (it is on by default when it is available to you, and you can switch it off before you press Start), the front camera records the first few seconds of each station during the first lap, without sound, so you never have to touch your phone mid-circuit.
Taking meal photos for nutrition analysis
Taking body scan photos

How we handle media captured by the camera:

On your device first: A photo or video is uploaded only when you submit it, for example to have a video analysed or to log a meal with its photo. Circuit form check clips are uploaded automatically once they are recorded. A video waiting to upload is kept temporarily in the app's own storage on your phone, and is removed when you sign out.
Uploads and server processing: Photos and videos you submit are transmitted to our servers over secure connections, analysed by our AI provider as described in section 18, and used only for the feature you used them for. Videos and meal photos are deleted automatically after the periods in section 5. Body scan photos are kept until you delete the scan.
Other people in your videos: If you record training with a partner, such as sparring or pad work, they will appear in the video. Please make sure they are happy to be recorded.

You can control camera access via your device settings and may revoke permission at any time. Revoking camera permission will disable features that rely on camera access. If camera access is required for a core feature, we will notify you and provide alternatives where possible.

If we make material changes to how we collect, use, or share media captured via the camera, we will update this policy and notify you where required by law.

13. Apple App Store

If you use EnsayoHub through the Apple App Store, the following additional terms apply:

Transaction Data: When you make purchases through the App Store (including subscriptions), Apple processes your payment information. We receive transaction confirmation and subscription status from Apple, but we do not receive or store your payment card details.
Apple's Data Collection: Apple may collect certain information about your use of the app in accordance with Apple's Privacy Policy, available at https://www.apple.com/legal/privacy/.
Analytics: We may receive anonymized and aggregated analytics data from Apple about app usage, crashes, and performance to help improve our services.
Account Information: If you sign in using Sign in with Apple, we receive limited information based on your sharing preferences (such as your name and a unique identifier or relay email address).

For information about managing your privacy settings on Apple devices, visit: https://support.apple.com/en-us/HT208982

14. Location Data

EnsayoHub accesses your device's location to power outdoor endurance tracking: recording a run, ride, or walk so we can show you your route, distance, pace, and elevation, and so your training plan can adapt to what you actually did.

What we access

Precise location (GPS). On Android this uses ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION. Approximate location alone is not accurate enough to measure a route.
Background location. On Android this uses ACCESS_BACKGROUND_LOCATION together with a foreground service (FOREGROUND_SERVICE and FOREGROUND_SERVICE_LOCATION). On iOS it uses the "Always" location authorisation. This exists for one reason: an activity recording must keep measuring when you put your phone in a pocket or your screen locks. Without it, your run would stop recording the moment the screen went dark.

When we access it

Only while you are actively recording an endurance activity. Location collection starts when you tap to begin a run, ride, or walk, and stops when you finish or discard the activity, or when it stops automatically after a long period without movement. While an activity is paused it is still in progress, so location stays on to notice when you start moving again. EnsayoHub does not track your location in the background at any other time. We do not collect location while you browse the app, log a gym workout, or when the app is simply installed and idle.

While a recording is running on Android, a persistent notification is shown so it is always visible to you that tracking is active.

How we use it

To calculate distance, pace, split times, and elevation for the activity
To draw the route map you see in the activity summary and history
To feed completed activity performance into your adaptive training plan and weekly review. Only figures such as distance, pace, and time are used for this: your route is never sent to our AI providers.

Where it is stored

Route points are first written to storage on your own device so that an in-progress activity survives a crash, a battery saver, or the app being closed. While the activity is in progress, and again when it is completed, the route is transmitted over an encrypted connection to our servers and stored with that activity record, so your history and maps are available across devices and after reinstalling.

What we do not do with it

We do not sell your location data.
We do not share your location data with advertisers or data brokers, and we do not use it for advertising or ad targeting.
We do not use your location to build a profile of the places you visit outside of activities you deliberately record.

Location data is shared only with the infrastructure providers that host and operate the service on our behalf (for example our cloud hosting and storage providers), and only so that we can deliver the features described above, or where we are legally required to disclose it.

Route maps are drawn on your phone, using Apple Maps on iOS and Google Maps on Android. The map provider loads map images for the area on screen; your recorded route itself is not sent to it.

Your control

Location permission is requested only when you open outdoor activity tracking, and background location only when you start recording. You may decline.
You can revoke location permission at any time in your device settings. Endurance tracking will stop working, but the rest of EnsayoHub continues to function normally.
Discarding an activity while you record it removes it from your history. To have a recorded activity and its route erased from our servers, write to us (section 11). Deleting your account does not erase your routes by itself (section 6).

15. Health and Fitness Data

With your explicit permission, EnsayoHub reads the following from Apple Health (HealthKit) on iOS and Health Connect on Android: heart rate, workouts (their type and timing, and on iOS the energy they burned), and your body measurements (weight, body fat percentage, lean body mass, and height). We also write your completed runs, rides, and walks back to them so your activity appears alongside the rest of your health record: on iOS with their distance and the energy burned, on Android as the activity and its time. On Android we also write activities you add by hand. We never write heart rate, routes, or body measurements to them.

On Android these are the Health Connect permissions READ_HEART_RATE, READ_EXERCISE, READ_WEIGHT, READ_BODY_FAT, READ_LEAN_BODY_MASS, READ_HEIGHT, and WRITE_EXERCISE. On iOS the permission screen also asks to read active energy and walking, running, and cycling distance alongside heart rate, because we request them together when saving your runs, rides, and walks; of that group we currently read only heart rate.

Body measurements keep your Fitness Metrics and daily calorie targets accurate without you retyping them. Imported workouts count toward your progress and your calorie balance.
Heart rate recorded during a run, ride, or walk you track in EnsayoHub (your average and maximum, your heart rate zones, and readings about every 15 seconds) is stored with that activity.
Health data is used only to display your activity, calculate your body metrics, and personalise your training programme. It is never used for advertising or marketing.
When a measurement from Apple Health or Health Connect is your most recent weight or body composition, it is used just like one you entered yourself, including in the details our AI provider receives to build your plans and weekly review (section 18).
We do not sell health data, and we do not share it with third parties for their own purposes.
You grant and revoke this access in Apple Health or Health Connect directly, independently of any other permission, and revoking it does not disable the rest of the app.

16. Microphone and Photo Library

Microphone. Audio (RECORD_AUDIO on Android) is recorded only as part of a technique, strength form, Mastery, or Technique Analysis video that you choose to record. Circuit form check clips are recorded without sound. It is not recorded at any other time, and there is no background or passive listening. The audio stays in the video file until the video is deleted (section 5); our AI analysis looks only at still images taken from the video and never listens to it.
Audio settings. On Android the app also uses MODIFY_AUDIO_SETTINGS so that workout sounds, such as the round bell, play correctly. This does not record anything.
Meal photographs. Photos you submit for nutrition analysis are uploaded for the purpose of estimating the meal's calories and macronutrients, are handled as described in section 12, and are deleted 10 days after you log the meal (section 5).
Choosing photos from your library. The app asks for access to your photos only when you choose a photo to use: a meal photo, a body scan photo, a profile picture, a challenge weigh-in photo or screenshot, or a background for a share image. Only the photo you pick is used. We never browse or upload the rest of your library, and a share image background stays on your phone.
Saving to your photo library. We request permission to add images to your photo library only so that we can save a workout share image at your request. Saving uses add-only access.

17. Google Play

If you use EnsayoHub on Android through Google Play, the following additional terms apply:

Transaction Data: Google processes purchases in the app, including subscriptions, through Google Play Billing (com.android.vending.BILLING). We receive a purchase token, order details, and subscription status from Google, and check them with Google to activate your premium access. We do not receive or store your payment card details.
Google's Data Collection: Google may collect certain information about your use of the app in accordance with Google's Privacy Policy, available at https://policies.google.com/privacy.
Account Information: If you sign in with Google, on Android, on iOS, or on our website, we receive your name, your email address, and a Google account identifier. We do not receive your Google password, and we do not store your Google profile photo.

18. AI Processing

EnsayoHub's coaching is powered by AI models from OpenAI and Google. To deliver a feature, we send the provider the content that feature needs. The provider processes it to deliver that feature to you and returns the result. We do not send your name or email address with it, and we do not send it to them for any other purpose.

What goes to OpenAI:

Your training videos, as still images taken from the video (never the audio), with your height, weight, age, experience level, and earlier feedback, to grade your technique and form
Meal photos and the foods you describe, with your country and goal, to estimate calories and macronutrients
Body scan photos, with your height, weight, age, and sex, to estimate your body composition (section 19)
Your profile, goals, equipment, health conditions, Coach's Notes, logged workouts, check-ins, and nutrition, to build your training and meal plans and to write your weekly review

What goes to Google (the Gemini image model): your front body scan photo and a description of your goal, such as your target weight and timeframe, to create your "Future You" image (section 19).

Your location, routes, and heart rate readings are never sent to our AI providers. AI results are estimates, and you can always correct your own details in the app.

19. Body Scans and Future You

A body scan uses a front photo, and optionally a side photo, that you take or choose. We send them to OpenAI with your height, current weight, age, and sex to estimate your body fat percentage. From that estimate we calculate figures such as your lean body mass, which you see in the app.
Your front photo is sent to Google's Gemini image model to create your "Future You" image. Your side photo is not used for it.
The photos and the image are stored privately and are shown only to you, in the app.
Deleting a scan in the app deletes its photos and its "Future You" image straight away. We keep a record that the scan took place, with its estimates, because it counts toward your scan allowance.

20. Coach's Notes and Your Journey

Your coach keeps short notes about you so it can personalise your coaching: facts you tell it (for example an injury or a food you avoid), milestones from your own records (such as a badge you earned or a personal best), and patterns it notices across your weekly reviews.
You can see every note on the Coach's Notes screen in the app. You can confirm a note, edit the notes you wrote, or mark any note "Not true". A note marked "Not true" is never used again; we keep a record of it so that the same note is not created again.
Coach's Notes are part of the details our AI provider receives when it builds your plans and writes your weekly review (section 18).
Some reminder emails mention how many things your coach knows about you, and your latest milestone. They never include your health conditions or any other note.
Your Journey is built from your own records, such as your workouts, milestones, and badges, without AI.
Your Coach's Notes are removed when you delete your account (section 6).

21. Ensayo Season 1 and Other Challenge Programmes

If you join a challenge programme such as Ensayo Season 1, we collect:

The date you joined and your progress through the programme's checklists
A photo of your scale showing your starting weight (your weigh-in photo). We treat it as sensitive personal information.
Your starting weight and target weight, recorded when you qualify, to measure your progress
Screenshots of your social media share. Our staff read the reaction count from the screenshot. We do not connect to your Facebook account.
That you told us you joined the programme's Facebook group. We cannot check this and do not try to.

We use this to check your checklist items, grant the premium access you earn, and score and award prizes. Scoring also uses records you already keep in the app: your progress toward your target weight, your logged workouts and meals, and your form grades.

Your weigh-in photo and screenshots are stored privately, are seen only by the EnsayoHub staff who check challenge entries, and are never shown in the app or published. We keep them only as long as we need them to run the programme and judge its prizes. You can ask us to delete yours at any time (section 11); if you do so before judging, you may no longer be eligible for prizes.

22. Notifications and Email

Push notifications. The app asks for permission to send notifications (POST_NOTIFICATIONS on Android) from a prompt on your dashboard or from the Account screen, never when you first open it. If you allow them, your device's push token is sent to our servers and used, through Expo's push service and Apple's or Google's notification services, to send reminders and updates: morning, workout-day, and evening reminders at your local time, weekly summaries and check-in reminders, streaks and badges, news that a plan, analysis, or review is ready, payment updates, and announcements. During an outdoor activity the app also shows notifications on your phone about the recording itself. You can turn notifications off at any time in your device settings.
Email. We email you about your account (such as verifying your email address and resetting your password), payments and renewals, replies to your messages, and, if an employer or organisation sponsors you, your sponsorship. If we cannot reach you with a push notification, some reminders are sent by email instead: when your plan is ready, a workout-day reminder, and a nudge if you have not trained for a week or more.
Announcements. We may email announcements about EnsayoHub. Every announcement email has an unsubscribe link. Reminder emails do not have one yet; to stop them, write to us (section 11).
Our emails contain no tracking pixels, and we do not track whether you open them or click their links.