Privacy Policy

Who we are

Endurio is an endurance training service made up of the Endurio mobile app, the website at endurio.app and the free training plans offered on that website (together, the "Services").

The controller of your personal data is Endurance Intelligence Ltd ("Endurio", "we", "us" or "our"), a company registered in England and Wales under company number 16803435, whose registered office is at 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.

For any question or request about your personal data, contact us at support@endurio.app or write to us at the address above.

We have not appointed a data protection officer, because the law does not require us to. Our support team handles privacy requests.

We are appointing a representative in the European Union and will publish their details here. Until then, contact us at support@endurio.app.

Overview

This Privacy Policy explains what personal data we collect when you use the Services, why we use it, who we share it with, how long we keep it, and the rights you have. It applies to everyone who uses the Services, wherever they live.

In short:

• We do not sell your personal data, and we do not use it for advertising.
• Health data is used only with your explicit consent and only to coach you. Health data from connected services is never used to train AI models.
• The coach is an AI system. Data from connected services is processed by AI only after you agree to it, and you can withdraw that agreement at any time. See our AI Transparency Statement.
• You are in control. You can disconnect a service, withdraw consent, download your data or delete your account at any time.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and, for people in the European Union, the EU General Data Protection Regulation (EU GDPR). The section US state privacy rights covers residents of US states with privacy laws.

AI Transparency Statement

This statement explains how artificial intelligence (AI) is used in Endurio and how you control it.

What AI does in Endurio

The Endurio coach is an AI system, not a person. When you chat with the coach, your messages, together with the information the coach needs to answer (such as your plan, your goals and, if you allow it, data from your connected services), are sent to large language models run by our AI providers. The models generate the coach's replies, training plans, plan adjustments, workout summaries and readiness insights. No person reviews a reply before you see it.

We also use AI to:

• look up public information about races and events (the event name and date you enter are sent to a web search provider and an AI model);
• read files you attach to chat messages (see Support messages and attachments);
• turn text into numerical "embeddings" so the coach can find relevant training knowledge and earlier conversations.

Purpose

We use AI for one purpose: to provide personalised training guidance to you. We do not use AI to make decisions that have legal or similarly significant effects on you (see Automated decisions).

Your consent before AI processes data from connected services

Data that you sync from connected services (Garmin Connect, Wahoo, COROS, Suunto, Apple Health and Health Connect) is sent to AI models only after you give your explicit consent. We ask for this consent in the app, separately from any other consent, when you connect a service or turn on AI features. The consent screen names the data and the AI processing it covers.

If you do not consent, you can still use Endurio: the coach will answer without your connected-service data, and your synced data will still appear in the app's history and charts. Your training plan will not be adapted automatically to your synced workouts.

Withdrawing consent

You can withdraw your consent at any time in Settings > Privacy > AI processing, as easily as you gave it. From then on, we stop sending data from connected services to AI models. Withdrawing consent does not affect processing that took place before you withdrew it.

What AI providers may and may not do

Our AI providers act on our instructions as processors. They may use your data only to produce the response we requested. Under our contracts with them, they may not use your data to train their own models or for any other purpose of their own. We never use data from connected services to train AI models, and we remove health information from chat messages before any message is used for AI training. We use your chat messages to improve our own AI only if you opt in (see Optional AI training).

Keeping this statement up to date

If we start using AI in a materially different way, for example for a new purpose or with a new category of data, we will update this statement and ask for your consent again before the new processing starts.

What data we collect

Giving us your data is not a legal requirement. Your account data is needed for us to provide the app; without it you cannot create an account. All other data is optional, although some features need it (for example, adaptive plans need workout data).

If you allow location access on your phone, the app sends us your phone's location so that the coach can take local weather into account. We use it to work out your town or city and to get the weather forecast for it. You can switch location access off at any time in your phone's settings; the coach then stops mentioning weather. Workout files imported from connected services can also contain GPS routes, which we store as part of the workout.

Health data

What counts as health data

Some of the data we process is health data, a special category of personal data that the law protects more strictly. For Endurio this includes:

• physiological and wellness measurements: heart rate, heart rate variability, resting heart rate, sleep (duration, stages, timing, score and sleep heart rate), stress levels, Garmin Body Battery™, blood oxygen, steps and active energy;
• workout metrics that reveal information about your health, such as heart rate during exercise and training load;
• readiness, recovery and similar insights that we derive from those measurements;
• injuries, illnesses or medical conditions you tell the coach about.

Where it comes from

• Garmin Connect: daily wellness data (sleep, stress, Body Battery™, heart rate variability and resting heart rate) in addition to the activity and performance data described in Garmin Connect data.
• Wahoo, COROS and Suunto: workout files including heart rate and, for COROS and Suunto, daily sleep, heart rate and heart rate variability data.
• Apple Health and Health Connect: the data types listed in Apple Health data and Health Connect data.
• You, when you tell the coach about your health.

Your explicit consent

We process health data only with your explicit consent. Before we first receive health data from a connected service, the app asks you to confirm, in a separate step that is not bundled with any other agreement, that you agree to us processing the health data listed on that screen to provide your coaching. If you tell the coach about an injury or condition, we rely on the explicit consent you give when you start using the coach.

You can withdraw consent at any time by disconnecting the service in Settings > Connections or by contacting us. When you withdraw consent, we stop collecting health data from that service and delete the health data we imported from it, as described in the section for that service. Withdrawing consent does not affect processing that took place before.

What we do and do not do with health data

• We use health data only to provide and personalise your coaching, plans and insights.
• We do not sell health data, and we do not use or disclose it for advertising, marketing or data mining.
• We never use health data from connected services to train AI models. If you opt in to Optional AI training, we remove health information from your chat messages before any message is used.
• We do not store health data in iCloud.
• We share health data only with the service providers that host and run Endurio for us, and, if you have given the consent in our AI Transparency Statement, with our AI providers to generate your coaching. They act only on our instructions.

How we use your data

We use your personal data to:

• 1. Provide the app and your account: sign you in, keep your profile and settings, and show your plan and history.
• 2. Coach you: generate and adapt your training plan, answer your messages, and produce workout summaries and readiness insights.
• 3. Sync connected services: import data from services you connect, and send planned workouts to your device or watch.
• 3a. Use local weather: if you allow location access, use your location to give the coach your local weather forecast.
• 4. Send notifications: send coaching messages, reminders and summaries as push notifications if you allow them.
• 5. Manage your subscription: check whether you have Premium and unlock Premium features.
• 6. Provide free plans on our website: generate your plan, let you download it, and email it to you if you ask.
• 7. Support you: answer support requests and feedback.
• 8. Keep the Services secure and working: prevent abuse and bots, investigate crashes and errors, and keep logs.
• 9. Understand how our website is used: measure and improve the website, only if you accept analytics cookies.
• 10. Improve our AI: use chat messages for AI training only if you turn on "Help improve Endurio's AI".
• 11. Send updates: send you emails about Endurio, such as launch news, only if you have asked us to or have not opted out where the law allows.
• 12. Meet legal obligations: keep records, respond to lawful requests, and establish or defend legal claims.

Our lawful bases

The law requires us to have a lawful basis for each use of your personal data, and an additional condition for health data. The table below sets these out.

Where we rely on legitimate interests, we have weighed our interests against your rights, and you can object at any time (see Your rights).

Where we rely on consent, you can withdraw it at any time, as easily as you gave it, using the setting named in this policy or by contacting us. If you withdraw consent, the features that depend on it stop working, but the rest of the Services remain available.

Cookies and similar technologies

On our website

Our website uses a small number of cookies and similar technologies (such as local storage).

• Strictly necessary: these make the website work and keep it secure, for example Cloudflare Turnstile, which checks that free-plan and waitlist requests come from a person and not a bot, and storage that remembers your cookie choices. They do not need your consent, and you cannot switch them off in our banner.
• Analytics (optional): we use Mixpanel to understand how visitors use the website, including recording clicks and page interactions (autocapture) and session recordings of how pages are used. Mixpanel processes this data in the European Union. These analytics load only if you click "Accept" in our cookie banner. If you reject them or close the banner without choosing, we do not load Mixpanel.

When you first visit endurio.app, a banner asks whether you accept analytics cookies. "Accept" and "Reject" are equally prominent. You can change your choice at any time using the Cookie settings link in the footer of every page. If you withdraw consent, we stop loading Mixpanel from your next page view and delete the Mixpanel cookies we set.

We do not use advertising cookies, and we do not allow third parties to track you across other websites through our website.

In the app

The app does not use cookies. It stores your sign-in session and settings on your device. It uses Firebase Crashlytics to send us crash reports and diagnostic information when the app fails, so that we can fix errors. The app does not use advertising identifiers and does not track you across other companies' apps or websites.

Connected services

You can choose to connect services that hold your training and health data. Connecting a service is always optional.

• How connecting works. For Garmin Connect, Wahoo, COROS and Suunto, you sign in on the provider's own page and approve the permissions Endurio asks for. We never see your password for that service. The provider then gives us an access token, which we store encrypted. For Apple Health and Health Connect, you grant permissions on your phone, and the Endurio app reads the data you allow and sends it to our servers.
• What we ask for. We request only the permissions needed to import workouts and wellness data, and to send planned workouts to your device.
• What we use it for. We use the data to build and adapt your plan, show your history and generate insights, as described in the section for each service.
• Consent. Health data from a connected service is processed only with your explicit consent (see Health data), and is processed by AI only with your separate consent (see AI Transparency Statement).
• Disconnecting. You can disconnect a service at any time in Settings > Connections, or in the other service. When you disconnect a service, we stop syncing and, within 30 days, delete the data we imported from it, including Garmin data, which we keep only while your integration is connected. Copies in our backups are deleted when those backups expire (see Data retention). The section for each service gives the details.
• Deleting your account. When you delete your account, we delete all data imported from every connected service and withdraw our access at each service that lets us do so.

Which services are available can change and may differ by device and region. The sections below describe each service we support or are introducing.

Garmin Connect data

If you choose to connect Garmin Connect, this section explains specifically what Garmin data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties.

Collection

When you authorize the Garmin Connect integration through Garmin's OAuth authorization flow, Garmin grants us an access token scoped to the permissions you approve. Using that token we retrieve:

• Activity and workout data: activity type, duration, distance, pace/speed, elevation and route summaries.
• Performance and physiological metrics: heart rate, VO2 max, training load, recovery status, resting heart rate and similar fitness metrics made available by Garmin Connect.
• Device and account identifiers necessary to keep your Garmin account linked to your Endurio profile and to refresh your access token.

Use and processing

• We use your Garmin activity and performance data to build and adapt your personalized training plan, track your progress against that plan, and surface performance insights and summaries to you in chat.
• To generate coaching insights and adaptive recommendations, a summarized or derived form of your Garmin activity data (for example, a workout's type, duration and key metrics) may be sent to third party large language model ("AI") providers we use to power coaching responses. We do not send your Garmin account credentials or access tokens to these providers, only the activity data needed to generate a response.
• Coaching messages that reference your Garmin data, such as a daily digest or workout summary, are shown in the app and may be sent as a push notification. Push notifications are sent through Google Firebase Cloud Messaging and delivered to iPhones by Apple's push service. Only the notification content is shared with them, and both act solely as delivery channels and do not otherwise process your Garmin data.
• We do not use your Garmin data for advertising and we do not sell your Garmin data.

Storage and security

• Your Garmin OAuth access and refresh tokens are encrypted at rest and stored separately from your imported activity data.
• Imported activity and performance data is stored in our database, hosted with our infrastructure providers, using encryption in transit and access controls limiting access to the systems that need it to operate the Services.

Sharing with third parties

We do not sell Garmin data. We share Garmin data only as follows:

• With third party AI/large language model providers, limited to the derived activity summaries needed to generate coaching responses and plan adjustments, as described above.
• With our hosting and database providers, who store the data on our behalf under confidentiality and data protection obligations and do not use it for their own purposes.
• With authorities or regulators where required by law, or in connection with a merger, acquisition or asset sale, subject to the same confidentiality commitments described in Who we share your data with.

Retention and deletion

We retain Garmin activity data for as long as your integration is connected and as needed to provide the Services. You can disconnect the Garmin integration at any time from Garmin Connect or from within the Services, which stops future syncs, and you can ask us to delete previously imported Garmin data at support@endurio.app. Some data may persist in backups for a limited time before it is purged.

Wahoo data

If you choose to connect Wahoo, this section explains specifically what Wahoo data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties.

Collection

When you authorise the Wahoo integration through Wahoo's sign-in and approval page, Wahoo gives us an access token limited to the permissions you approve. Using that token we receive:

• workout summaries and the original workout files (FIT files) recorded by your Wahoo devices, including activity type, start time, duration, distance, speed, power, cadence, heart rate, elevation and, where recorded, GPS route;
• your power zones, so that we can keep them in step with your plan;
• the account identifiers needed to keep your Wahoo account linked to your Endurio profile.

We also send data to Wahoo: with your permission, we write your planned workouts, training plans and power zones to your Wahoo account so that they appear on your Wahoo devices.

Use and processing

• We use your Wahoo data to build and adapt your training plan, track your progress against it and show you insights and summaries.
• If you have given the consent described in our AI Transparency Statement, a summarised or derived form of your Wahoo workouts (for example a workout's type, duration and key metrics) is processed by our AI providers to generate coaching responses. We never send your Wahoo access tokens to AI providers.
• Coaching messages that refer to your Wahoo data may be sent as push notifications through the push notification services of Google and Apple, which only deliver them.
• We use Wahoo data only for the purpose for which you connected Wahoo: providing your coaching.

Storage and security

• Your Wahoo access and refresh tokens are encrypted at rest with a key used only for Wahoo, and stored separately from your workout data.
• Wahoo data is transmitted only over encrypted connections and stored in our database and file storage, hosted by our cloud hosting provider, with access limited to the systems that need it to run the Services.

Sharing with third parties

We do not sell, license, lease or otherwise disclose Wahoo data to any third party, including advertisers and data brokers, and we do not use Wahoo data in advertising. Wahoo data is processed only by service providers acting on our behalf and under our instructions: our cloud hosting provider and, with your consent, our AI providers. We may also disclose it where the law requires us to.

Use of your data by Wahoo

When we send planned workouts, plans or power zones to your Wahoo account, that data becomes part of your Wahoo account. Wahoo may use data it receives from Endurio in accordance with its agreement with us and its own privacy policy, which you can read on Wahoo's website.

Retention and deletion

We keep Wahoo data only for as long as it is needed to provide your coaching while Wahoo is connected.

• When you disconnect Wahoo, in Endurio or in your Wahoo account, we withdraw our access at Wahoo, stop syncing, and delete all personal data we received from Wahoo within 30 days.
• If you ask us to delete your Wahoo data, at support@endurio.app, we delete it whether or not Wahoo is still connected.
• When you delete your Endurio account, we withdraw our access at Wahoo and delete all your Wahoo data.

We keep Wahoo data longer only where the law requires us to. Copies in backups are deleted when the backups expire.

COROS data

If you choose to connect COROS, this section explains specifically what COROS data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties. The COROS connection may not yet be available to all users.

Collection

When you authorise the COROS integration through COROS's sign-in and approval page, COROS gives us an access token limited to the permissions you approve. Using that token we receive:

• workout summaries and the original workout files (FIT files) from your COROS devices, including activity type, start time, duration, distance, pace, heart rate, power, cadence, elevation and, where recorded, GPS route;
• daily wellness data: sleep start and end times, average heart rate during sleep, resting heart rate, heart rate variability, and daily steps;
• the account identifiers needed to keep your COROS account linked to your Endurio profile.

We also send data to COROS: with your permission, we add your planned workouts to your COROS training calendar so that they appear on your watch.

Use and processing

• We use your COROS data to build and adapt your training plan, track your progress and show you insights and summaries, including readiness insights based on your sleep, resting heart rate and heart rate variability.
• If you have given the consent described in our AI Transparency Statement, a summarised or derived form of your COROS data is processed by our AI providers to generate coaching responses. We never send your COROS access tokens to AI providers.
• Coaching messages that refer to your COROS data may be sent as push notifications through the push notification services of Google and Apple, which only deliver them.
• We do not use COROS data for advertising, and we do not sell it.

Storage and security

• Your COROS access and refresh tokens are encrypted at rest with a key used only for COROS, and stored separately from your workout data.
• COROS data is transmitted only over encrypted connections and stored in our database and file storage, hosted by our cloud hosting provider, with access limited to the systems that need it to run the Services.

Sharing with third parties

We do not sell COROS data or share it with advertisers or data brokers. COROS data is processed only by service providers acting on our behalf and under our instructions: our cloud hosting provider and, with your consent, our AI providers. We may also disclose it where the law requires us to.

Retention and deletion

• When you disconnect COROS, in Endurio or in your COROS account, we withdraw our access at COROS, stop syncing, and delete the data we received from COROS within 30 days.
• You can ask us to delete your COROS data at any time at support@endurio.app.
• When you delete your Endurio account, we withdraw our access at COROS and delete all your COROS data.

Copies in backups are deleted when the backups expire.

Suunto data

If you choose to connect Suunto, this section explains specifically what Suunto data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties. The Suunto connection may not yet be available to all users.

Collection

When you authorise the Suunto integration through Suunto's sign-in and approval page, Suunto gives us an access token limited to the permissions you approve. Using that token we receive:

• workout summaries and the original workout files (FIT files) from your Suunto devices, including activity type, start time, duration, distance, pace, heart rate, power, cadence, altitude and, where recorded, GPS route;
• daily wellness data: sleep stages, sleep score, heart rate during sleep, resting heart rate, heart rate variability and, where your device measures it, blood oxygen during sleep;
• the account identifiers needed to keep your Suunto account linked to your Endurio profile.

We also send data to Suunto: with your permission, we send your planned workouts to your Suunto account as dated workout guides so that they appear on your watch.

Use and processing

• We use your Suunto data to build and adapt your training plan, track your progress and show you insights and summaries, including readiness insights based on your sleep and recovery data.
• If you have given the consent described in our AI Transparency Statement, a summarised or derived form of your Suunto data is processed by our AI providers to generate coaching responses. We never send your Suunto access tokens to AI providers.
• Coaching messages that refer to your Suunto data may be sent as push notifications through the push notification services of Google and Apple, which only deliver them.
• We do not use Suunto data for advertising, and we do not sell it.

Storage and security

• Your Suunto access and refresh tokens are encrypted at rest with a key used only for Suunto, and stored separately from your workout data.
• Suunto data is transmitted only over encrypted connections and stored in our database and file storage, hosted by our cloud hosting provider, with access limited to the systems that need it to run the Services.

Sharing with third parties

We do not sell Suunto data or share it with advertisers or data brokers. Suunto data is processed only by service providers acting on our behalf and under our instructions: our cloud hosting provider and, with your consent, our AI providers. We may also disclose it where the law requires us to.

Retention and deletion

• When you disconnect Suunto, we delete the future workout guides we created in your Suunto account, stop syncing, and delete the data we received from Suunto within 30 days. You can also remove Endurio's access in your Suunto account settings.
• You can ask us to delete your Suunto data at any time at support@endurio.app.
• When you delete your Endurio account, we delete all your Suunto data and stop using our access to your Suunto account.

Copies in backups are deleted when the backups expire.

Apple Health data

If you use Endurio on iPhone and choose to connect Apple Health, this section explains specifically what Apple Health data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties.

Collection

The Endurio app asks for your permission, using Apple's own permission screen, to read each type of data. You choose which types to allow. With your permission, the app reads from Apple Health:

• workouts, including type, start time, duration and distance;
• heart rate, active energy, running and cycling speed, power and cadence;
• resting heart rate and heart rate variability;
• sleep;
• steps.

The app sends this data to our servers so that it can be used in your coaching. Our servers keep your workouts and a daily summary of resting heart rate, heart rate variability, sleep time and steps.

Endurio does not write any data to Apple Health.

Apple Watch workouts

If you choose to send planned workouts to your Apple Watch, the Endurio app uses Apple's workout scheduling feature on your iPhone to add your planned sessions (for example their type, duration and target intensity) to the Workout app on your watch. This takes place on your devices. When you complete a workout, it is recorded in Apple Health and, if you have allowed it, read back by Endurio as described above.

Use and processing

• We use Apple Health data only to provide and improve your health and fitness coaching: to build and adapt your plan, show your history and generate readiness insights.
• If you have given the consent described in our AI Transparency Statement, a summarised or derived form of your Apple Health data is processed by our AI providers to generate coaching responses, solely to help you manage your training and health.
• We do not use or disclose Apple Health data for advertising, marketing or other use-based data mining, and we never sell it.
• We do not use Apple Health data to train AI models.
• To keep your data up to date, our servers may send your iPhone a silent notification that asks the app to sync. It contains no health data.

Storage and security

• Apple Health data is sent from your iPhone to our servers over encrypted connections and stored in our database, hosted by our cloud hosting provider, with access limited to the systems that need it to run the Services.
• We do not store Apple Health data in iCloud.

Sharing with third parties

We do not share Apple Health data with any third party for advertising, marketing or data mining. It is processed only by service providers acting on our behalf and under our instructions: our cloud hosting provider and, with your consent, our AI providers. We may also disclose it where the law requires us to.

Retention and deletion

• When you disconnect Apple Health in Settings > Connections, we stop syncing and delete the data we received from Apple Health within 30 days.
• If you only switch off Endurio's access in the Health app or in iOS Settings, the app can no longer read new data, but we keep the data already imported until you disconnect Apple Health in Endurio, ask us to delete it, or delete your account. Apple does not tell apps when read access is switched off, so please also disconnect in Endurio if you want your data deleted.
• When you delete your Endurio account, we delete all your Apple Health data.

Copies in backups are deleted when the backups expire.

Health Connect data

If you use Endurio on Android and choose to allow access through Health Connect, this section explains specifically what Health Connect data we collect, how we use and process it, where it is stored, and whether it is shared with or processed by any third parties.

Collection

The Endurio app asks for your permission, using Health Connect's own permission screen, to read each type of data. You choose which types to allow. With your permission, the app reads from Health Connect:

• exercise sessions, distance, speed, power and elevation;
• active and total calories burned;
• heart rate, resting heart rate and heart rate variability;
• sleep;
• steps;
• if you allow it, your health data history from before you connected Endurio, so that your plan can take your recent training into account.

The app sends this data to our servers so that it can be used in your coaching. Our servers keep your workouts and a daily summary of resting heart rate, heart rate variability, sleep time and steps.

Endurio does not write any data to Health Connect.

Use and processing

• We use Health Connect data only to provide your fitness coaching: to build and adapt your plan, show your history and generate readiness insights.
• If you have given the consent described in our AI Transparency Statement, a summarised or derived form of your Health Connect data is processed by our AI providers to generate coaching responses. We transfer Health Connect data to a third party only with your explicit consent.
• Our staff do not read your Health Connect data, unless you explicitly agree (for example to help with a support request), it is needed for security purposes, or the law requires it.
• We do not use, sell or transfer Health Connect data for serving advertising, to advertising platforms, data brokers or information resellers, or to determine creditworthiness or for lending.
• We do not use Health Connect data to train AI models.

Endurio's use of information received from Health Connect complies with the Health Connect Permissions policy, including its Limited Use requirements.

Storage and security

Health Connect data is sent from your phone to our servers over encrypted (HTTPS) connections and stored in our database, hosted by our cloud hosting provider, with access limited to the systems that need it to run the Services.

Sharing with third parties

We do not share Health Connect data with any third party except, with your explicit consent, our AI providers acting on our behalf, and our cloud hosting provider, which stores the data for us. We may also disclose it where the law requires us to.

Retention and deletion

• When you disconnect Health Connect in Settings > Connections, we stop syncing and delete the data we received from Health Connect within 30 days.
• If you only remove Endurio's permissions in Health Connect, the app can no longer read new data, but we keep the data already imported until you disconnect in Endurio, ask us to delete it, or delete your account.
• You can ask us to delete your Health Connect data at any time at support@endurio.app.
• When you delete your Endurio account, we delete all your Health Connect data.

Copies in backups are deleted when the backups expire.

Support messages and attachments

Support and feedback form

• When you send a message from Support and feedback in the app, we store your subject, your message and any files you attach, linked to your account.
• We send the subject, your message, a reference number, your account ID and the name, type and size of any attached files to our support team's internal messaging tool, so that our team can see and answer it. Files themselves are not posted to that tool.
• Support messages are not processed by an AI model. We do not add your recent chat history to them.
• Support submissions are never used for AI training.

Chat attachments

• You can attach files to messages you send to the coach in the app. Attached files are stored privately and linked to your account.
• To answer you, we send attached images to our AI providers as image data. For documents such as PDF, CSV, GPX and FIT files, we extract the text or a summary of the activity and send that to the model instead.
• Text in an attached document is treated as your content, not as instructions to us.

Optional AI training

• In the app, Settings > Privacy has a switch called "Help improve Endurio's AI". It is off by default for every account. Using the Services does not require turning it on.
• If you turn it on, chat messages you send afterwards, and the attachments on them, may be used to train and improve our AI.
• Messages you sent before you turned it on are not included, and we do not go back and add them.
• Support and feedback submissions and data from connected services are excluded. Before any message is used for training, we remove health information and details that identify you.
• Turning the switch on records your choice. It does not start training by itself, and any selection of content for training happens later, not at the time you turn it on.
• We record each time you turn the switch on or off, with the time and the version of the consent text you saw.
• You can turn it off at any time in Settings > Privacy. Messages you send after turning it off are not eligible for training. If you also want messages you sent while it was on to be removed from future training, contact us at support@endurio.app.
• The switch does not stop us from processing your messages and files to answer your chats and handle support requests.

Who we share your data with

We do not sell your personal data, and we do not share it for advertising.

Service providers (processors)

We use carefully selected service providers to run the Services. They process personal data only on our instructions, under written contracts that require them to keep it confidential and secure and prohibit them from using it for their own purposes. The categories of service provider we use are:

You can ask us for the current list of our service providers and where they process data at support@endurio.app.

Independent organisations

• Apple and Google process your payment for Premium as independent controllers under their own terms and privacy policies. Google Sign-In is provided by Google under its own privacy policy.
• Connected services (Garmin, Wahoo, COROS, Suunto, Apple): when we send planned workouts to your account with them, they handle that data under their own privacy policies.

Other disclosures

• Legal requirements. We may disclose personal data to authorities, regulators or courts where the law requires it, or where necessary to establish, exercise or defend legal claims or to protect the safety of any person.
• Business transfers. If we sell or merge our business, personal data may be transferred to the buyer, who must use it only as this policy describes. We will tell you before this happens.

We do not share your personal data with any other company within a group; Endurance Intelligence Ltd has no affiliates that receive your data.

International transfers

We are based in the United Kingdom. Some of our service providers process personal data in other countries, mainly the United States.

When we transfer personal data from the UK or the European Union to a country that the UK or the EU has not recognised as providing adequate protection, we use one of these safeguards:

• for transfers to US organisations certified under the EU-US Data Privacy Framework and its UK Extension, the UK and EU adequacy decisions covering those organisations;
• otherwise, the European Commission's standard contractual clauses, with the UK International Data Transfer Addendum for UK data, or the UK International Data Transfer Agreement.

Where we rely on contractual safeguards, we assess the laws of the destination country and add further protections where needed, such as encryption in transit and at rest. You can ask us for more information about the safeguard used for a particular provider, or for a copy of it, at support@endurio.app.

Data security

We protect your personal data with technical and organisational measures appropriate to its sensitivity, including:

• encryption of all data in transit (HTTPS/TLS);
• encryption at rest of access tokens for connected services, with a separate key for each service;
• access controls that limit access to personal data to the systems and staff who need it;
• private storage of files you attach;
• monitoring of our systems for errors and misuse.

No system is completely secure. If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay. We also notify the Information Commissioner's Office and the connected service providers concerned where the law or our agreements with them require it.

Sources of data

We collect personal data:

• from you, when you create an account, chat with the coach, request a free plan, join a waitlist, or contact us;
• from your device, when you use the app or website (device and technical data, your location if you allow location access, and website usage data if you accept analytics cookies);
• from Apple or Google, when you use Sign in with Apple or Google Sign-In (your name and email address, or a private relay email if you choose to hide your email from us);
• from the Apple App Store or Google Play, through our subscription management provider, about your subscription;
• from services you choose to connect: Garmin Connect, Wahoo, COROS, Suunto, Apple Health and Health Connect. The data categories from each are listed in the section for that service.

Data retention

We keep personal data only for as long as we need it for the purposes in this policy.

We may keep data for longer where the law requires it or where we need it to establish, exercise or defend a legal claim.

Automated decisions

The coach uses automated processing, including AI, to create and adjust your training plan and to suggest changes. These suggestions do not have legal or similarly significant effects on you: you can ignore, change or ask the coach to reconsider any of them, and you can contact us if you have concerns. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Your rights

Depending on where you live, you have some or all of these rights over your personal data:

• Access: ask for a copy of your personal data.
• Rectification: ask us to correct inaccurate data or complete incomplete data. You can update most profile data in the app.
• Erasure: ask us to delete your data. You can delete your account in Settings > Delete account.
• Restriction: ask us to limit how we use your data while a concern is resolved.
• Portability: ask for the data you gave us in a structured, machine-readable format, or for it to be sent to another organisation where technically possible.
• Objection: object to processing based on our legitimate interests. You can always object to direct marketing, and we will stop.
• Withdraw consent: where we rely on your consent, withdraw it at any time using the settings in this policy or by contacting us. This does not affect processing before you withdrew it.
• Not to be subject to solely automated decisions with legal or similarly significant effects (we do not make such decisions).

To exercise a right, email support@endurio.app from the email address linked to your account, or write to us. We may ask you to confirm your identity. We will respond within one month. If your request is complex or you make several requests, we may extend this by up to two further months, and we will tell you if we do. We do not charge a fee unless a request is clearly unfounded or excessive.

US state privacy rights

This section applies if you live in California or another US state with a consumer privacy law, to the extent that law applies to us.

• Categories of personal information we collect: identifiers (name, email address, user ID, IP address); commercial information (subscription status); internet or electronic network activity (app and website usage); geolocation data (your phone's location, if you allow it, and GPS routes in imported workout files); sensory data (images you attach); and inferences (readiness and training insights). Sources, purposes and recipients are described in this policy.
• Sensitive personal information: we collect health information and, if you allow it, precise geolocation. We use sensitive personal information only to provide the Services you request and for the other purposes the law permits without offering a right to limit, and not to infer characteristics about you.
• No sale or sharing: we do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past 12 months. We honour Global Privacy Control signals as a request to opt out.
• Your rights: you can ask to know what personal information we have collected, used and disclosed; to delete it; and to correct it. We will not discriminate against you for exercising your rights.
• How to make a request: email support@endurio.app. We will verify your request by matching it to your account. You may use an authorised agent, who must provide proof of your authorisation. If we refuse your request, you can appeal by replying to our decision, and if we still refuse, you can contact your state attorney general.
• Retention: see Data retention.

Children's privacy

The Services are not intended for anyone under 18, and you must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it. If you believe a child has given us personal data, please contact us at support@endurio.app.

Updates to this policy

We may update this Privacy Policy to reflect changes in the Services or the law. We will post the updated policy here with a new "Last updated" date. If a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect. If a change means we want to use your data for a new purpose that needs your consent, we will ask for your consent first and will not rely on your continued use of the Services.

Contact and complaints

If you have any question or concern about how we use your personal data, contact us at support@endurio.app or write to Endurance Intelligence Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.

You have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Union, you can also complain to the data protection authority in your country. We would appreciate the chance to deal with your concern first, so please contact us before you complain. We acknowledge complaints within 30 days and tell you the outcome without undue delay.