Privacy Policy
Effective 4 September 2026
This policy explains how AT CAPACITY by Gordy Elliott handles information when you use the website, PWA or iOS app.
Who is responsible and your legal rights
Gordy Elliott is the data controller for AT CAPACITY. Flowstate operates and supports the platform on his behalf. Core coaching information is processed to provide the coaching service you have agreed to; optional calendar, wearable, cycle and notification features are processed with your consent; and limited security and abuse-prevention records are processed for the legitimate interest of protecting the service. Where health information is involved, AT CAPACITY relies on the explicit consent collected in the app. You may ask to access, correct or erase your information, restrict or object to processing where applicable, withdraw consent for an optional feature, or request a portable copy. Withdrawing consent does not affect processing that was lawful before withdrawal. You may also complain to the UK Information Commissioner’s Office. Make a complaint to the ICO.
Information AT CAPACITY handles
AT CAPACITY stores account and contact details, coaching plans, text messages and any private voice notes or photos you choose to send, check-ins, progress photos, training and nutrition logs, consultation answers, and any health, injury or cycle information you choose to provide. DM voice notes and photos are stored privately. If you are an active SHIFT client, messages and attachments you deliberately post in the SHIFT Community are visible to Gordy and other active SHIFT clients. The microphone, camera and photo library are used only when you choose to record or select something to send. If you connect a supported app through Terra, AT CAPACITY may also receive sleep, recovery, activity and nutrition summaries from that provider. If you connect Google Calendar or Outlook Calendar, AT CAPACITY reads the calendar and event information described below. For coached clients, AT CAPACITY also keeps coaching-administration records, such as call attendance, weekly notes of coaching support provided over WhatsApp, periodic review summaries, and an audited record of any correction to locked baseline figures.
Google Calendar data AT CAPACITY accesses
Connecting Google Calendar is optional. When you choose to connect it, AT CAPACITY requests read-only access to the list of calendars in the Google account you authorise and to events from those calendars for today and the following seven days. It accesses the calendar and event identifiers needed for syncing, event title, start and end times, all-day and busy status, cancellation status, and an available meeting link. AT CAPACITY does not store event descriptions, attendee lists or locations. Private or confidential event titles are stored as “Busy”. It cannot create, edit or delete Google Calendar events.
How Google Calendar data is used
AT CAPACITY uses the Google Calendar data described above to show your upcoming meetings and daily schedule, calculate calendar-density signals, and run its deterministic Capacity Checker and Storm Warning rules. These user-facing features help you and Gordy plan training and nutrition around busier weeks. Google Calendar data is not used for advertising, eligibility decisions, medical diagnosis or an unrelated purpose.
Who receives Google Calendar data
Composio processes Google authorisation, holds the Google connection credentials and makes the read-only Calendar API requests on AT CAPACITY’s behalf. Vercel processes the application requests, and the normalised fields listed above are stored in Supabase. You can see the data in your authenticated portal, and Gordy can see upcoming event details in his authenticated coaching view for the coaching purpose described above. Flowstate may access it only where necessary to operate, secure or support AT CAPACITY. Google Calendar data is not disclosed to Anthropic, OpenRouter, their downstream AI model providers, advertisers or data brokers, and it is not sold.
Google Workspace data and AI
AT CAPACITY uses Anthropic API and OpenRouter for separate AI-assisted features involving non-Google coaching information. Raw, aggregated and derived Google Calendar data is excluded from AI prompts, embeddings, knowledge bases and model-training datasets. Calendar-based Capacity Checker and Storm Warning outputs are produced by deterministic application rules, not an AI model. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Read the Google API Services User Data Policy.
Google Calendar retention and deletion
AT CAPACITY keeps the normalised calendar-event copies while the connection is active so it can provide the schedule and coaching features described above. Disconnecting Google Calendar stops future access, asks Composio to revoke the connected account and deletes the synced event copies held by AT CAPACITY. Deleting your AT CAPACITY account also deletes its associated calendar connection and event records.
How information is used
Your information is used to deliver and personalise coaching, show your plans and progress, support messaging and reminders, identify useful coaching trends, secure the service, and resolve technical problems. Connected-health data informs coaching suggestions only; it does not automatically change your programme and is not used for medical diagnosis or emergency care.
SHIFT Community
The SHIFT Community is available only to Gordy and active SHIFT clients. Posts, names and attachments in that space are shared with all current members of that group; it is not a private coaching channel. The app displays this warning before the conversation. Clients should use private DM for health information, personal coaching details or anything they do not want other SHIFT clients to see. Community media is stored privately and made available through short-lived links after membership is checked. Gordy can remove inappropriate posts.
Connected health apps
Connecting a supported health or nutrition app is optional. Before connecting, you must explicitly agree that the selected provider may share sleep, recovery, heart-rate, activity or nutrition data with AT CAPACITY through Terra. Gordy can use the resulting summaries for coaching. Terra manages the provider authorisation and delivers the data to AT CAPACITY; Vercel processes the application request and Supabase stores the connection, delivery record and coaching summary. Raw Terra delivery payloads are deleted after no more than 90 days. Disconnecting asks Terra to revoke and remove its connection, stops AT CAPACITY accepting new health data for it, and keeps existing coaching summaries until you delete your account or request their deletion. Read the Terra End User Privacy Policy.
AI-assisted features
AT CAPACITY may send relevant non-Google coaching context to Anthropic API or OpenRouter to produce summaries or suggestions. OpenRouter routes those requests to the model identified for the feature. Google Calendar data is technically separated from these AI routes and is never included. Gordy remains responsible for coaching decisions. AI output can be incomplete or wrong and should not be treated as medical advice.
Who receives information
Information is available to Gordy and authorised service providers needed to operate AT CAPACITY, including Vercel for hosting and application processing, Supabase for authentication and database services, Resend for email, Apple Push Notification service and web-push providers for notifications you enable, Terra for optional wearable connections, Composio for optional calendar connections, and the AI providers described above for non-Google coaching information. Information is not sold. Providers receive only the information needed to deliver their service.
Retention and deletion
Information is kept while your account is active and for as long as reasonably required for coaching, security, dispute resolution or legal obligations. You can permanently delete your account and associated coaching data from Settings in the client portal. Some records may be retained where the law requires it.
Your choices
You can update profile information, disconnect supported apps, turn optional cycle tracking off, and request access to or correction of your information. You can also delete your account in Settings. Disconnecting Google Calendar or Outlook Calendar stops new syncs and removes the synced calendar-event copies associated with that connection. Disconnecting a Terra health connection revokes Terra's access and stops AT CAPACITY accepting new data from it. Existing coaching summaries remain until you delete your account or request their deletion.
Security and age
AT CAPACITY uses access controls and encrypted connections to protect information, but no online service can promise absolute security. AT CAPACITY is intended for Gordy's coaching clients and is not directed to children under 16.
Contact
Coaching clients can contact Gordy through private text, voice-note or photo DMs in AT CAPACITY. Privacy requests and account-access questions can also be sent through the support page; Flowstate will pass privacy requests to Gordy as data controller.