Privacy

What you put in: journal entries, files you attach, tasks, events, goals, routines, wins (with the category, note and photo you give them, and which suggested wins you kept or dismissed), mood check-ins, Ask conversations if you keep them, weekly reviews, notes you send the owner with Send feedback, your study (subjects, how each is graded and its grade scale, tests and assignments with their targets and results, topics, past-paper scores, revision sessions and reflections), and your settings (name, timezone, reminders). Also your email address and a hashed password, kept by Supabase Auth.

For the limits and the owner's usage view, Endrue counts AI requests, file sizes and emails sent (how many and when, never what was in them).

Everything is stored in one Supabase database and file store (in Sydney, Australia), and the site runs on Vercel.

Other people who use Endrue can't see anything of yours. Every row and file is tied to your account, and the database itself refuses anyone else's request for it; this is tested on every change.

The owner can technically see your data. They run the database, so its dashboard can show any table, including your entries. The app itself has no screen for looking at anyone else's data, but you should know it's possible. Don't write anything here you wouldn't want them able to read.

Supabase (the database and files) and Vercel (the site) host it, under their own terms.

The front page and this page are public. They set no cookies, and Endrue has no analytics, ads or trackers anywhere. Signing in sets the cookies that keep you signed in, remember whether the app is locked, and remember your light or dark choice; nothing else.

“Request one” on the front page just opens an email to the owner's Endrue address (hello@endrue.com) in your own email app. The site itself collects nothing from it.

In the evening, Endrue suggests a few wins from your own data only: a test result that met its target, a streak, a day when everything was ticked off, a personal best on a goal. They're worked out by the app itself (no AI, and nothing counts toward your limits), and none becomes a win unless you keep it. Endrue remembers only which ones you kept or dismissed, so it never suggests them again.

A share card is a picture of one win, made in your own browser from only what you tick. You download or copy it; it's never uploaded, linked or made public. A photo on a win is a file like any other: private to you, and counted in your file space.

“Send feedback” sends the owner a short note (and, if you pick one, what it's about). The owner reads it with your email address, so they can reply. You can read the notes you've sent on the Feedback page; nobody else who uses Endrue can see them. Notes can't be edited or deleted once sent, there are no attachments, and you can send up to 5 a day.

Your notes are included in Settings → Export, and deleting your account deletes them too.

The owner has a page listing the people they've invited: each person's email, whether they've joined, when they last signed in and the last day they used Endrue, and today's counts (AI requests, files and their total size, emails). Never anything anyone wrote, asked or uploaded.

AI starts off for everyone who's invited. Nothing of yours is sent to an AI provider until you read this and turn it on (on the welcome page or in Settings → AI). You can turn it off again at any time.

What gets sent. When AI is on, what a feature needs is sent to Google's Gemini API: the entries that match a question, and the records the assistant looks up for it (your events and their notes, your tasks with their notes, lists, tags and dates, goals, routine items and which ones you ticked, wins, mood check-ins and Arcs), or a week of all of these for the review. Never your files (on entries or tasks), and never the whole journal at once. Everyone on this Endrue uses the site owner's AI account; the provider sees the requests, not who wrote them.

The assistant only suggests changes (new tasks, a new date, today's plan), as a card you confirm or cancel. Nothing in your journal, task notes or titles can make it change anything.

Semantic search also sends the text of each entry to Google's embedding API (gemini-embedding-001), a passage at a time, a little while after you write, to build a search index of what your entries mean. The index is kept in your own database. Turn semantic search off in Settings → AI to stop this; Ask then finds entries by their words only.

Endrue uses Gemini's free tier, which Google treats differently from paid use: Google may use what you send to improve its products, and human reviewers may read it. (Google says the paid-service terms apply to free use in the EEA, Switzerland and the UK.) Leave AI off for anything you wouldn't want read.

Limits. Endrue runs on free plans, so each invited person gets a set number of AI requests a day, counted from midnight in your own timezone. An Ask message, a Plan analysis, a weekly review and each round of indexing your entries for search count as one request each. When they're used up, AI waits until midnight; everything else keeps working. The owner isn't limited. Settings → Your usage shows how many you've used.

Gemini API Additional Terms of Service

In Study, nothing is sent to AI unless you ask for a draft (weekly targets, or a review after a result). Then the subject, that test, its topics and past-paper scores are sent; your reflection only if you tick it, and never your journal. Each draft is one AI request toward your daily limit. “Copy for Claude” sends nothing anywhere: it puts a summary on your clipboard for you to paste yourself, and your journal and reflections are only in it if you tick them.

Endrue runs on free plans (Gemini, Supabase and Resend), so everyone the owner invites shares them fairly: a set number of AI requests a day (and a few a minute), a set amount of file space with a size limit for each file, and a couple of emails a day. Days start at midnight in your own timezone. The owner isn't limited. Settings → Your usage shows your limits and how much you've used.

To keep count, Endrue notes each AI request, file and email (when, and how big a file is), never what was in it. The owner's usage view shows these counts for each person, and nothing else.

Reaching a limit never removes anything. Everything you have stays, and you can still read, open and delete it; you just can't add more of that kind until it resets, or until you delete some files.

Reminders and the weekly review go to your own account address, and only if you turn them on in Settings → Email. They're sent through Resend. The sign-up confirmation and password-reset emails are sent the same way.

Every night the whole database is copied, encrypted with a key only the owner holds, and kept for 30 days, so that a mistake or an outage doesn't lose anyone's writing. Backups hold the same things listed above, for everyone, but not the files themselves (only their names and sizes).

When an account is deleted, it's gone from Endrue at once, and from the backups as they expire: within 30 days, nothing of it is left anywhere.

Export: Settings → Export downloads everything you've written, your study and wins included (and, if you choose, your files and win photos) at any time.

Delete: Settings → Account → Delete my account removes your account, every entry, file, task, study record, win (with its details and photo), feedback note and setting, for good. It can't be undone. (Copies in the nightly backups expire within 30 days.)