Privacy policy

1. Scope and roles

This Policy covers the trainee and coach mobile apps, coach web app, marketing site, API and related eFitHub features.

We are controller for platform accounts, security, billing, analytics, support and our own product functions. A coach may be a separate controller of client coaching data where the coach decides what to collect and how to use it; eFitHub then acts as a technical processor under the coach’s instructions.

2. Data we process

• Account and profile: name, email, role, avatar, language, time zone, settings and login identifiers.
• Coaching and progress: programmes, exercises, results, schedule, duration, RPE, goals, questionnaires, comments, body measurements and other entered metrics.
• Communications: direct and group text or voice messages, photos, videos, files, reports, blocks and video-call metadata.
• Billing: plan, subscription status, amount, currency, provider and transaction references. The payment provider, not eFitHub, stores full card details.
• Technical data: IP address, device, operating system, app version, push token, request logs, errors, crash diagnostics and security events.
• Marketing analytics: browser identifier, pages, referral source, UTM values and signup or purchase funnel events.
• Tester feedback: comment, category, app version, device model and a screenshot the user reviewed before submitting.

3. Sources

Data comes from you, your coach or client, the chosen sign-in or payment provider, your device and automatic service interactions. We do not buy personal-data lists.

4. Purposes and legal bases

• Contract: registration, authentication, programmes, chats, calls, synchronization, support and payment.
• Legitimate interests: security, fraud prevention, reliability, diagnostics, aggregate product analytics and legal protection.
• Consent: optional communications, selected marketing technology and sensitive data where explicit consent is legally required.
• Legal obligation: tax and accounting records, lawful requests and regulatory compliance.

5. Health and fitness data

Body measurements, injuries, wellbeing, limitations and some questionnaire answers may be sensitive data. We process them only for requested coaching and progress features and rely on explicit consent where required.

Do not enter medical information that your coach does not need. You may withdraw consent; this does not affect earlier lawful processing and may make some features unavailable.

6. AI features

Milo, summaries, exercise classification and supporting generation may send a minimized, relevant context to a configured AI provider. We do not allow eFitHub data to be used for advertising.

AI output is not the sole basis for decisions with legal or similarly significant effects. Coaches control whether a recommendation is applied.

7. Recipients

• Your coach, client or selected group participants, according to access permissions.
• Infrastructure, private object storage, authentication, push, crash analytics, calls, email and monitoring providers.
• Payment providers, banks and tax advisers for payment and records.
• AI providers only for a feature initiated by a user or coach.
• Authorities or professional advisers where required by law or to protect rights.

8. International transfers

Some providers may process data outside Ukraine or the European Economic Area. We use available lawful transfer mechanisms, contractual safeguards and access controls.

9. Retention

Account and coaching data remain while the account is active and the information is needed for the service. Messages remain until deletion, the applicable attachment lifetime ends or the account is deleted. Temporary AI attachments and conversion source files use shorter technical periods.

After an account-deletion request, personal and product data are deleted or irreversibly de-identified, while rotating backups are overwritten on schedule. A minimal non-personal tombstone may record that an account existed and when it was removed. Financial and legal records remain for the period required by law.

10. Security

We use role separation, private storage, short-lived signed URLs, encryption in transit, chat access controls, security logging and backups. No system is absolutely secure; we will provide legally required notice of a material incident.

11. Your rights

Email privacy@efithub.com. We may verify identity to protect the account. We normally answer within one month or sooner where applicable law requires.

• Receive information and a copy of your personal data.
• Correct inaccurate or complete incomplete data.
• Request deletion or restriction and object to certain processing.
• Receive portable data where applicable.
• Withdraw consent and complain to a competent data-protection authority.

12. Children

eFitHub is not intended for independent registration by minors. Where coaching a minor is lawful, the coach must obtain any required consent from a legal representative before entering data.

13. Cookies, local storage and analytics

The site and web app use necessary local storage for sessions, language, security and anonymous measurement of the path from visit to registration or purchase. We do not sell personal data or use it for third-party behavioural advertising.

14. Changes and contact

We update this Policy when features, providers or law change and provide advance notice of material changes.

Requests: privacy@efithub.com. Controller: Ukrainian individual entrepreneur Isakov Ivan Oleksandrovich, taxpayer number 3505912891, 7 Danyla Halytskoho Street, Dnipro, Ukraine.