Privacy Policy
Effective 9/27/26
EndlessCap is run by Endless Cap LLC ("EndlessCap," "we," "us"). This policy explains what the EndlessCap app and endlesscap.com collect, where it goes, and what you can do about it. Health-related data has its own page too: our Consumer Health Data Privacy Policy.
The short version
Without an account, your training stays on your device. We do not receive it.
With an account, it is saved to our database so you can recover it or use another device.
Messages to your coach are sent to our AI provider to write the reply.
We do not sell information about you or share it for advertising. The app has no analytics or ad trackers. Our website uses Squarespace's standard cookies and visit statistics.
1. What we collect
Information you enter in the app. Your name, age, sex, height, body weight, goals, training experience, available equipment, injuries or limitations, preferred units, and any photo you choose for yourself or your coach. Your programs, workouts, sets, reps, loads, personal records, exercise swaps, effort ratings, readiness check-ins (such as sleep and soreness), and the habits and vices you choose to track.
Your coach conversations. The messages you send to the AI coach and its replies.
Account information, if you create an account: your email address and password (stored hashed by our authentication provider), or your Google account identity if you sign in with Google.
Usage records. A random ID created by your browser, and counts of coach conversations, the tools the coach used, the AI cost of each, and when you last talked to the coach. This record does not contain what you wrote.
Payment information, if you subscribe. Payments are handled by our payment processor. We receive your subscription status, not your card number.
Automatically. Our hosting providers receive standard request information such as your IP address and browser type to deliver the app and protect it from abuse. We do not use it to profile you.
On our website. endlesscap.com is hosted by Squarespace. When you visit, Squarespace sets cookies and records visit statistics such as pages viewed, the site that referred you, your browser and device type, and approximate location based on your IP address. Essential cookies keep the site working. You can decline the others in the cookie banner or block them in your browser. The app itself does not use cookies to track you.
2. Where it is stored
Signed out: everything you enter is stored in your browser on your device. It is not sent to us, except coach messages (Section 4).
Signed in: your profile, training, check-ins, habits, coach conversations and photos are also stored in our database, once you agree, so they can be restored or reach another device. Each account can read only its own data. Our administrators can access the database to run the service, as with any online service.
3. How we use it
To personalize your coaching and training plans, give your coach the context it needs, and show your progress.
To learn from your workouts, habits, check-ins and feedback to improve your future recommendations.
To back up and sync your account and restore your progress when you sign in.
To manage your account and subscription and to send account emails (such as confirmations and password resets).
To respond to support requests.
To measure product performance, improve reliability, and understand how EndlessCap is used.
To control AI costs and prevent abuse.
To comply with the law.
We do not use your data for advertising, and we do not sell or "share" it as those terms are defined under California law.
4. Your AI coach
When you message the coach, your message and relevant parts of your profile and training history are sent through our server to Anthropic, which provides the AI model, to generate the reply. Our server passes the conversation along and does not store its content. Anthropic processes it under its commercial terms for API customers. Do not share information with the coach that you would not want processed this way.
AI responses are generated automatically and may not always be accurate. They are intended to support your training, not replace your own judgment or professional medical advice. Always use common sense and stop exercising if something feels unsafe.
5. Who we share it with
Only the service providers that run EndlessCap for us, under contracts that limit their use of your data:
Supabase: database and account sign-in (United States)
Cloudflare: hosting the app and our server; usage records
Anthropic: the AI model behind the coach
Google: Sign in with Google, if you choose it. Google Fonts also serves the app's headline typeface, so Google receives your IP address when a page loads
Squarespace: hosting our website, its cookies and visit statistics
Stripe: payments, if you subscribe
Supabase also sends account emails (confirmations and password resets)
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy continues to apply.
Aggregated insights. We may create aggregated or de-identified information, such as trends across all athletes, that cannot reasonably identify you. This helps us understand how EndlessCap is used, improve our products, measure trends, and produce reports or analytics. We may share or sell these insights. Anyone who receives them must agree not to try to re-identify anyone, and neither will we. We do not sell or share information about you.
6. How long we keep it
Data on your device stays until you delete it or clear the app's site data. Account data stays while your account is open, except coach conversations, which we keep for up to 24 months and then delete. When you delete your account, we delete your account data within 30 days, except where we must keep limited records (such as payment records) by law. Encrypted backup copies may remain for a limited period as part of our disaster recovery process before being permanently removed. Usage records hold no content and are kept in aggregate.
7. Your choices and rights
You can:
Use the app without an account.
See and correct your data in the app.
Export your data in the app, under Settings → About → Your data on this device.
Delete your account and its data. See Delete your account.
Ask what we hold about you, or ask us to correct or delete it, by emailing privacy@endlesscap.com.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Washington, the EU or the UK), you may have additional rights, including to appeal a decision we make about your request. We will not treat you differently for using them. We respond within 45 days and may need to verify it is you. You may use an authorized agent where the law allows.
California residents
This section is our notice under the California Consumer Privacy Act, as amended by the CPRA. In the past 12 months we collected these categories of personal information, all directly from you or your device:
Identifiers: name, email address, account ID, a random usage ID, IP address.
Commercial information: subscription status and history, if you subscribe.
Internet or network activity: coach usage counts and website visit statistics.
Sensitive personal information: account login details, and health information such as body measurements, injuries, recovery check-ins and habits you track.
Inferences: training levels and suggested loads the app calculates from your logs.
We use each category only for the purposes in Section 3 and disclose it only to the service providers in Section 5. We keep it as described in Section 6. We have not sold or shared personal information, and we do not knowingly sell or share the data of anyone under 16. We use sensitive personal information only to provide the service you asked for, so the right to limit its use does not extend further. You have the right to know, access, correct, delete and port your data, and not to be treated differently for using these rights. Send requests to privacy@endlesscap.com.
8. Security
Data is encrypted in transit, and each account's records are protected so that other users cannot read them. No system is perfectly secure, so we cannot guarantee it.
9. Age
EndlessCap is for people 16 and older. We do not knowingly collect data from anyone under 16. If you believe a child has used the app, email privacy@endlesscap.com and we will delete it.
10. International users, including the EU and UK
EndlessCap is run from the United States and stores data there. If you use it from elsewhere, your data is transferred to the US. Where our providers offer them, we rely on standard contractual clauses or equivalent safeguards for those transfers.
If you are in the European Economic Area or the United Kingdom, Endless Cap LLC is the controller of your data. We process it:
to provide the app and your account (performance of our contract with you);
with your explicit consent, for health data you choose to save to your account, which you can withdraw at any time;
for our legitimate interests in keeping the service secure and its costs under control;
to meet legal obligations.
You have the rights to access, correct, delete, restrict, object to and port your data, and to withdraw consent. You can also complain to your local data protection authority.
11. Changes
We update this policy when the app changes what it does with data. We will change the date above and, for significant changes, tell you in the app before they take effect.
12. Contact
Endless Cap LLC
privacy@endlesscap.com