Privacy Policy
Last updated: January 2026
Introduction
At EndureByte, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI-powered training platform.
By using EndureByte, you agree to the collection and use of information in accordance with this policy. If you have any questions about our privacy practices, please contact us.
Information We Collect
We collect information to provide and improve our service. The types of information we collect include:
Account Information
When you create an account, we collect your email address and name. If you sign in through Strava, we receive basic profile information from your Strava account.
Training Data
With your permission, we sync your training activities from Strava, including workout details, distances, durations, heart rate data, and power data. This information helps us generate personalized training plans.
Usage Data
We collect information about how you use EndureByte, including pages visited, features used, and interactions with training plans. This helps us improve the user experience.
How We Use Your Information
We use the information we collect for the following purposes:
- Provide and improve our service: We use your data to deliver personalized training plans and continuously improve our AI algorithms.
- Generate personalized training plans: Your training history and fitness metrics inform our AI to create plans tailored to your abilities and goals.
- Communicate with you: We may send important service updates, respond to your inquiries, and provide training insights.
Data Sharing
We Don't Sell Your Data
We do not sell, trade, or rent your personal information to third parties. Your training data belongs to you.
Third-Party Services
We integrate with the following third-party services to provide our functionality:
- Strava API: To sync your training activities and provide seamless integration with your existing training data.
- Cloudflare Analytics: To understand how our platform is used and identify areas for improvement. This data is aggregated and does not identify individual users.
- Google and GitHub: For OAuth sign-in when you choose to log in with a Google or GitHub account.
- Resend: For transactional email such as password resets and email verification.
Data Security
We take data security seriously and implement industry-standard measures to protect your information:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3.
- Encryption at rest: Sensitive data, including OAuth tokens, is encrypted using AES-256-GCM before storage.
- Secure infrastructure: Our platform runs on Cloudflare's global edge network, providing robust security and performance.
Your Rights
You have the following rights regarding your data:
- Access your data: You can view all the data we have about you through your account settings.
- Delete your account: You can delete your account at any time, and we will remove all your personal data from our systems.
- Export your data: You can request an export of your training data and account information.
- Disconnect integrations: You can disconnect Strava or other integrations at any time through your settings.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us at: