Legal
Privacy Policy
The short version
- We see when you’re busy, not what you’re doing. From Google Calendar we read free/busy times and only manage the training events we create.
- Your data runs your plan, nothing else. We don’t sell it, and we don’t use it for advertising.
- WhatsApp is opt-in. We only message you there if you turn it on, and you can turn it off at any time.
- You’re in control. Disconnect Google, export your data or delete your account whenever you like.
1. Who we are
PlanToEndure (“PlanToEndure”, “we”, “us”) is a service that schedules your endurance training plan into your calendar and sends reminders. It is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS], [COMPANY NUMBER, if any].
We are the data controller for the personal information described in this policy. This policy covers our website, the PlanToEndure app and our beta programme (together, the “Service”).
2. What we collect
Information you give us
- Beta and account details: your email address, name (if you give it) and login credentials.
- Training plan: the sessions you add, such as sport, duration, intensity, fixed days and notes.
- Scheduling preferences: your usual sleep window, the hours you can train, time zone and reminder settings.
- WhatsApp (optional): your mobile number and your messaging preferences if you opt in.
- Payment details: if you subscribe, payment is handled by [PAYMENT PROCESSOR, e.g. Stripe]. We receive your billing status, plan and the last four digits of your card, never the full card number.
- Support messages: anything you send us when you contact us.
Information created as you use the Service
- Training records: which sessions were scheduled, moved, completed or skipped, and the weekly load and reports we calculate from them.
- Technical data: IP address, device and browser type, app version, and logs of errors and requests, used to keep the Service running and secure.
Information from Google
If you connect Google Calendar, we receive the limited calendar data described in the next section, plus your Google account email address so we can link the connection to your account.
Training and sleep information can say something about your health and fitness. We treat it with extra care, only use it to run your plan, and only collect it because you choose to give it to us.
3. Google Calendar data
When you connect Google Calendar, you grant PlanToEndure permission to:
- See when you’re busy. We read free/busy information for the calendars you choose, so we can find open slots. We do not read the titles, descriptions, attendees or locations of your own events.
- Create and manage training events. We create calendar events for your training sessions, and update or delete only the events PlanToEndure created.
We use this data only to schedule your sessions, keep them up to date when your week changes, and send the reminders you chose. We do not use Google user data to serve ads, we do not sell it, and we do not let people read it except where you ask us to (for example, for support), where it is needed for security or to comply with law, or where it has been aggregated and anonymised for internal operations.
PlanToEndure’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
You can disconnect at any time from your PlanToEndure account settings or from your Google Account permissions page. When you disconnect, we stop reading your calendar and delete the free/busy data we hold. Training events already in your calendar stay there unless you choose to remove them.
4. How we use your information
- To provide the Service: placing sessions in your calendar, rescheduling them and sending session, bedtime and WhatsApp reminders you’ve turned on.
- To produce your load check and weekly report.
- To run your account, process payments and manage your free trial and subscription.
- To send service emails, such as your beta invite, receipts and important changes. We only send marketing emails if you’ve agreed to them, and every one has an unsubscribe link.
- To answer your questions and give support.
- To keep the Service secure, prevent abuse and fix problems.
- To understand, in aggregate, how the Service is used so we can improve it.
- To comply with our legal obligations.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our scheduling and load-check suggestions are guidance you can accept or ignore.
5. Legal bases (UK and EEA)
If UK or EU data protection law applies to you, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Running the Service, scheduling, reminders, reports, billing | Performance of our contract with you |
| Training and sleep information you choose to add | Your explicit consent, which you can withdraw at any time by deleting it or your account |
| WhatsApp messages and marketing emails | Your consent |
| Security, fraud prevention, aggregate product improvement | Our legitimate interests in running a safe, reliable service |
| Tax, accounting and responding to lawful requests | Legal obligation |
7. International transfers
Some of our service providers process data outside the UK or EEA, including in the United States. Where they do, we rely on adequacy decisions or on safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
8. How long we keep it
- Beta waitlist emails: until you join, ask us to remove you, or the beta ends, whichever comes first.
- Account and training data: for as long as your account is open. When you delete your account we delete it within [30] days, except where we must keep it longer.
- Calendar free/busy data: only as long as needed to schedule your upcoming sessions, and deleted when you disconnect Google Calendar.
- Billing records: as long as tax and accounting law requires, typically [6] years.
- Logs: up to [90] days, unless needed to investigate a security issue.
9. Security
We use encryption in transit (TLS) and at rest, store Google access tokens encrypted, limit staff access to what their job needs, and review our providers’ security. No system is completely secure. If a breach affects your personal information, we will tell you and the relevant regulator as the law requires.
10. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that is wrong or incomplete;
- delete your information;
- receive your information in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time, without affecting processing that has already happened;
- opt out of the “sale” or “sharing” of personal information (we don’t do either).
Many of these you can do yourself in your account settings. Otherwise, email [PRIVACY EMAIL]. We’ll respond within one month (or the time your local law sets), and we won’t treat you differently for using your rights. We may need to verify your identity first.
If you’re in the UK you can complain to the Information Commissioner’s Office; in the EEA, to your local data protection authority. We’d appreciate the chance to sort things out with you first.
12. Children
The Service is not intended for anyone under 16, and we don’t knowingly collect information from them. If you think a child has given us information, contact us and we’ll delete it.
13. Changes to this policy
We’ll update this page when our practices change and revise the “Last updated” date. If a change is significant, we’ll tell you by email or in the app before it takes effect.
14. Contact us
Questions or requests about your privacy: [PRIVACY EMAIL]
Post: [COMPANY LEGAL NAME], [REGISTERED ADDRESS]