Privacy Policy
Last Updated: July 22, 2026
EnduranceOS is a race nutrition planning tool for endurance athletes. Your privacy is a core value — your performance data belongs to you, not advertisers.
1. Data We Collect
| Data | When | Purpose |
|---|---|---|
| Race inputs | When you use the calculator | Generate your fueling plan. Processed client-side; not stored unless you save a plan. |
| Email address | When you save a plan | Deliver saved plan links, PDFs, and optional race-week reminders. |
| Saved plans | When you save a plan | Store your inputs and outputs so you can reload, edit, and share. |
| Weather data | When you select a location | Fetch weather from Open-Meteo. We send only coordinates and date — no personal data. |
| Feedback | Optional, post-race | Improve our formulas. Linked to your plan, not your identity. |
| Hashed blog view identifier | When you view a blog post | Prevent duplicate or bot-heavy counting and maintain more accurate public read counters. |
| Forecast opt-in | Optional | Send race-week weather and nutrition reminder emails. |
| Race directory data | Not user-provided | Publicly available race details (names, dates, locations) aggregated from third-party APIs. No personal data is collected through race pages. |
We use Vercel Analytics for anonymized, aggregate page view data (no cookies, no IP tracking, no fingerprinting).
2. How We Use Your Data
- Plan generation: Your inputs create a personalized fueling blueprint. The calculator runs client-side in your browser.
- Plan delivery: If you provide an email, we use it to send your saved plan link, PDF exports, and optional reminders.
- Formula improvement: Post-race feedback is aggregated and stripped of identifying information. We never analyze individual feedback tied to your email.
3. Third-Party Services
| Service | What we share | Why |
|---|---|---|
| Supabase | Saved plans, email, feedback, hashed blog view identifiers | Database hosting |
| Resend | Email address | Transactional email delivery |
| Open-Meteo | GPS coordinates, date | Weather data (no personal data sent) |
| Vercel | Standard web request data | Application hosting |
| Vercel Analytics | Anonymized page views | Understand which pages are used (no cookies, no IP tracking) |
| PostHog | Anonymous interaction events and page attribution | Understand feature, calculator, CTA, and affiliate-link usage |
| RunSignUp | None (we read their public API) | Source race details (dates, locations, registration status). Registration links may include an affiliate tracking parameter. |
| Amazon | None before an outbound click; product URLs include an affiliate tag | Product recommendations and affiliate attribution |
| World Triathlon | None (we read their public API) | Source international triathlon race details. |
We do not share your data with advertisers, data brokers, insurance companies, employers, or any party not listed above.
4. Affiliate Links
Some registration links to RunSignUp and some disclosed Amazon product links include affiliate tracking parameters. If you register for a race or buy a product through one of these links, EnduranceOS may receive a small commission at no additional cost to you.
EnduranceOS does not load Amazon ads, product images, or Amazon tracking scripts. Amazon receives information after you follow an outbound product link and handles that visit under its own privacy policies. Our anonymous analytics record which product link was selected, not what you purchase.
5. Data Retention
- Saved plans and email: Retained until you request deletion. There is no automatic expiration.
- Feedback: Retained indefinitely in aggregated form for formula improvement.
- Hashed blog view identifiers: Retained for anti-abuse and read-counter accuracy.
- Calculator inputs (unsaved): Never stored on our servers. Processed entirely in your browser.
- Forecast opt-in: You can unsubscribe at any time.
6. Your Rights
- Access your saved plan data via your plan link at any time.
- Delete your email, saved plans, and all associated data by contacting us. We process deletion requests within 30 days.
- Opt out of reminder emails at any time.
- Export your plan as a PDF.
To exercise any of these rights, email hello@enduranceos.app.
7. Security
- All data is transmitted over HTTPS.
- Database access uses service-role keys restricted to server-side operations.
- We do not store passwords (there are no user accounts).
- Plan links use unique, unguessable identifiers.
8. Children
EnduranceOS is not directed at children under 16. We do not knowingly collect data from minors.
9. Changes to This Policy
If we make material changes, we will update the “Last Updated” date at the top of this page. Continued use of EnduranceOS after changes constitutes acceptance of the updated policy.