Privacy policy
Last updated 7 November 2026
The short version
- We collect what we need to build your workouts and meals, run your account and keep it safe. Nothing more.
- We don’t sell your data, we don’t show ads, and we don’t use advertising trackers.
- Health information (goals, injuries, body weight, diary) is encrypted and never used for marketing.
- Meal photos you snap are sent to our AI provider to read the plate and then discarded. We never store or show them.
- Subscriptions go through the App Store or Google Play. We never see your card.
- You can see, correct, export or delete your data at any time by writing to hello@enzomo.com.
Who we are
Enzomo (“Enzomo”, “we”, “us”) makes the Enzomo app for training, meal prep and food logging and the enzomo.com website (together, the “Service”).
This policy explains what personal information we collect through the Service, why, who we share it with, how long we keep it and the choices you have. We are the controller of the personal information described here. Contact us at hello@enzomo.com.
What we collect
Information you give us:
- Account. Your name and email address. If you sign in with Apple or Google, we receive the account identifier and the email address (or Apple’s private relay address) they share with us. The app has no passwords: we email you a 6-digit code to sign in.
- Training profile. Your goal, experience level, how many days a week you train, whether you train at home or in a gym, injury areas and anything you ask us to avoid.
- Meal preferences. The cuisines you eat, your body weight, how you eat (for example vegetarian), foods to leave out, meals per day and prep days. We use these to set your daily targets.
- What you log. Workouts you complete (exercises, sets, reps, weights, times and how hard they felt), diary entries and activities, food you log, your meal plans, prep sessions and shopping lists.
- Conversations with Enzo. What you type to Enzo, our in-app assistant, and its replies, so you can see your chat history and apply the changes it suggests.
- Meal snaps. When you snap a meal, the photo is sent for analysis and then discarded. We keep only the text result (the foods and portions you confirm).
- Support. Messages you send us.
Information collected automatically:
- Device and app. App version, operating system, device model, language and region setting (used to suggest your cuisine), and a random identifier for your subscription.
- Logs. IP address, the time and type of each request to our servers and error details. We use these to keep the Service running and secure.
Information from others:
- Apple and Google. Sign-in details as above, and the status of your subscription (trial, active, renewed, cancelled or refunded) through RevenueCat. We don’t receive your card details.
What we don’t collect
- Your precise location. The app doesn’t ask for GPS.
- Your contacts, microphone, or data from Apple Health or Google Health Connect.
- Advertising identifiers. We don’t track you across other companies’ apps or websites.
- Stored meal photos. The camera and photo library are used only when you snap a meal, and the photo isn’t kept.
- Card numbers. Subscriptions are handled by the App Store and Google Play.
Health information
Your goal, injuries, body weight, diary entries and food logs can say something about your health. We treat them as sensitive information:
- You choose to give them to us, during setup or later, so we can tailor your training and meals. Most answers can be skipped, and you can change or remove them in the app.
- Goals, injuries and notes, diary text and meal preferences are encrypted in our database, with the encryption keys stored separately from it.
- We use them only to provide the Service to you. We never use them for advertising and never sell them.
- Enzomo is not a medical service and doesn’t diagnose or treat any condition.
Enzo and meal snaps (AI)
Some features use artificial intelligence provided by Anthropic, PBC (the Claude models):
- Snap a meal. The photo is sent to Anthropic to identify the foods, then discarded by us. Nothing is shown back to you except text.
- Enzo chats. Your message, together with the parts of your profile Enzo needs (for example your goal, injuries, cuisines, today’s session or this week’s meals), is sent to Anthropic to write a reply.
- Food research. When a dish isn’t in our food library, its name is sent to Anthropic to research it.
Anthropic processes this information on our behalf under its commercial terms. It doesn’t use it to train its models, and keeps it only for a short period for safety and abuse monitoring. We don’t send your name or email address with these requests.
AI never decides your numbers on its own: calories and nutrients come from our food library, and workout minutes and weight suggestions come from our own rules based on what you logged.
How we use your information
- To create and secure your account and sign you in.
- To build your workouts, meal plans, daily targets and shopping lists, and to suggest weights and reps from what you logged.
- To run Enzo and meal snaps.
- To manage your free trial and subscription, and to tell you before a trial ends.
- To send service emails: sign-in codes, trial reminders and important changes.
- To answer support requests.
- To keep the Service safe: preventing fraud and abuse, and fixing errors.
- To understand how the Service is used in aggregate, so we can improve it.
- To meet legal, tax and accounting obligations and enforce our terms.
We don’t make decisions about you that have legal or similarly significant effects based only on automated processing.
Legal bases
Where data protection law (such as the Nigeria Data Protection Act 2023, the GDPR or the UK GDPR) asks for a legal basis, we rely on:
- Contract. To provide the Service you signed up for.
- Consent. For health information you choose to give us. You can withdraw consent at any time by removing that information or deleting your account; this doesn’t affect processing before you withdrew it.
- Legitimate interests. To keep the Service secure, prevent fraud and improve the Service, balanced against your rights.
- Legal obligation. To keep records the law requires and respond to lawful requests.
International transfers
Enzomo is used in Nigeria and other countries, and our servers and main providers are in the United States. When your information leaves your country, we protect it with contractual safeguards such as standard contractual clauses, and we use providers that commit to equivalent protection.
How long we keep it
- Your account and what you log: while your account is open.
- Sign-in codes: they expire after 10 minutes.
- Meal snap photos: not stored. They are discarded once the analysis is done.
- Server logs: up to 90 days, unless needed to investigate a security issue.
- Payment and subscription records: as long as tax and accounting law requires (usually up to 6 years).
- After you delete your account: we delete or anonymise your information within 30 days. Encrypted backups are overwritten within a further 35 days.
Security
We use encryption in transit (HTTPS) and at rest, encrypt sensitive fields separately, limit staff access to what their job needs and log administrative access. No system is perfectly secure; if a breach affects your information, we will tell you and the relevant regulator as the law requires.
Your rights and choices
Depending on where you live, you have the right to:
- Access the personal information we hold about you and get a copy in a portable format.
- Correct information that is wrong. Most of it you can edit in the app.
- Delete your information and your account.
- Object to or restrict some processing, and withdraw consent you gave.
- Not be discriminated against for using these rights.
- Complain to a data protection authority, such as the Nigeria Data Protection Commission (ndpc.gov.ng), your local authority in the EU, or the UK Information Commissioner’s Office.
To use any of these rights, email hello@enzomo.com from the address on your account. We may ask you to confirm it’s you, and we reply within 30 days. If we can’t do what you ask, we’ll explain why, and you can appeal by replying with “Appeal” in the subject.
Deleting your account
Email hello@enzomo.com from the address on your account and ask us to delete it. We remove your profile, health information, logs, plans and chats, and anonymise records we must keep for legal reasons.
Deleting your account doesn’t cancel an App Store or Google Play subscription. Cancel it in your phone’s subscription settings first, so you aren’t charged again.
Emails
We send emails you need: sign-in codes, trial reminders and important changes to the Service or these policies. We don’t send marketing emails unless you agree to them, and every marketing email has an unsubscribe link.
Children
The Service is for people aged 18 and over. We don’t knowingly collect information from anyone younger. If you think a child has given us information, contact hello@enzomo.com and we will delete it.
Changes to this policy
We will update this policy when the Service or the law changes, and change the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.
Contact
Questions or requests about privacy: hello@enzomo.com.