Privacy policy

Who we are

Enduverse is a coaching assistant for endurance coaches who use TrainingPeaks. It's used by invited coaches at coach.enduverse.com. Questions about this policy: nigelng367@gmail.com.

The Enduverse Connect extension

The extension has one job: to connect a coach's TrainingPeaks account to their Enduverse account without copying anything by hand.

• What it reads: only the TrainingPeaks login cookie (Production_tpAuth) from trainingpeaks.com, and only when the coach clicks Connect TrainingPeaks in Enduverse. If the coach isn't logged in, it opens the TrainingPeaks login page and waits for them to log in.
• Where it sends it: only to the Enduverse service at coach-api.enduverse.com, over HTTPS, together with the coach's own Enduverse sign-in. The address is fixed inside the extension; a website can't change it.
• Where it runs: only on coach.enduverse.com. It doesn't read your browsing, other websites, passwords or any other cookies, and it doesn't collect analytics.
• What it keeps: nothing. The extension stores no data itself.

Logging in to TrainingPeaks inside Enduverse

In Settings, a coach can log in to TrainingPeaks without leaving Enduverse. TrainingPeaks' own login page runs in a browser on Enduverse's server, and the coach sees and uses it from Settings.

• What you type (including your TrainingPeaks password) is passed straight to that page. It isn't stored or logged.
• What Enduverse keeps: only the TrainingPeaks login cookie (Production_tpAuth) that TrainingPeaks creates when you log in, stored encrypted as described below.
• The browser itself is private to that one login: it can only open trainingpeaks.com pages, and it's deleted as soon as you're logged in, you cancel, or after 10 minutes.

What the Enduverse service stores

• Your TrainingPeaks login, encrypted (AES with an authentication code). The key exists only on the Enduverse service, not in the database.
• Your account and coaching data: your name and email, chats with the assistant, the rules, formats and notes you save, athlete profiles, and actions you accept.
• Usage records for billing and support: how much of the assistant you used, and how many athletes it worked on (athletes are recorded as one-way codes, not names).

How it's used

Only to provide the service to you: reading your athletes' training in TrainingPeaks when you ask the assistant something, and making changes in TrainingPeaks that you accept (or that you switched on in Full auto). Your data isn't sold, isn't used for advertising, and isn't shared except with the providers that run the service: hosting (Supabase, Fly.io, Vercel) and the AI model (Anthropic's Claude), which processes your messages to answer them.

Your choices

• Disconnect TrainingPeaks in Settings at any time: your stored TrainingPeaks login is deleted straight away. Changing your TrainingPeaks password also ends it.
• Remove the extension from your browser at any time.
• To have your Enduverse account and data deleted, email nigelng367@gmail.com.