Endless One
Endless One Privacy Policy
Endless One is the work app used by the staff of Endless, PMVA, Rare Legacy Life Group, Endless Origins and Nexora (“the company”). It runs on iPhone and Mac. The apps are published in the App Store by Endless Consulting, LLC (“we,” “us”). This policy explains what Endless One collects, why, who receives it, how long it is kept, and how to delete your account. Our website has its own Privacy Policy.
1. Who can use Endless One
Endless One is not open to the public. A person can sign in only after an admin of the company invites them. You sign in with your company Google Workspace account, or, if you have no company email address, with a one-time code emailed to the address you were invited at. Personal Google accounts cannot sign in. Before you use the app you read and accept the company’s agreement for Endless One, which says what is recorded and who can see it.
2. What Endless One collects
- Your account. From Google sign-in: your name, company email address, profile picture address, Google account identifier and your Workspace domain. For a code sign-in: your email address. Your company, role, permissions and account status; who invited you and when; and when you accepted the agreement, which version, and the device, platform and app version you used.
- Your profile. The details and photo you add to your profile, and your settings and notification choices.
- Messages. Messages you send in Endless One, with replies, reactions, edits, read receipts and attachments, including photos and voice messages. An edited message keeps its earlier version. When you unsend a message it is hidden, but the company keeps the original.
- One, the assistant. The questions you ask One and its answers, which tools it used, usage counts, and the facts in your One notebook. When you ask One to read a photo (such as a business card, receipt, permit or site map), the photo is sent with your question.
- Company mail and calendar. Mail and calendars in your company Google Workspace are read from Google when you open them, not copied into Endless One. Endless One keeps message identifiers and the titles and notes you type, such as an assignment. It creates drafts, sends mail and changes calendar events only when you ask and where the company allows it. If the company gives you a mailbox hosted by Endless One instead of a Google Workspace mailbox, the email you send and receive in that mailbox is stored in Endless One.
- Files. Files you attach, company logos and banners, and the names of the company’s Google shared drives. Some sections of the Mac app save their information only on that Mac.
- Customers and contacts. Records read from each company’s own customer database, with the links, changes, notes and access log Endless One keeps about them, and contacts you add.
- Calls, texts and meetings. For calls placed from Endless One: the number, who it was for, the time, the outcome and your note. Daily call counts and talk time from the company’s Zoom call history (counts and times only, never a number or a recording). Texts sent and received with the company’s texting number or your own Zoom number, with contacts the company already has. For a Zoom meeting you host with a cloud recording, when the company turns this on, its transcript, filed for you alone.
- Time clock and location. When you clock in or out at the office or an event or job site, your device checks whether it is inside that site’s area and tells Endless One only “at the site,” “away” or “location off.” While you are clocked in there, it notes only the times you arrive at or leave the area. Endless One never receives or stores a coordinate, never records where you are, and does not use location when you work from home or are not clocked in at a site. It also keeps your clock-in and clock-out times, breaks, notes, requests and timesheets.
- Daily reports. The daily reports you write, every version, and your hours clocked that day.
- Activity. When you sign in and out, which device, whether the app is in front and active or idle, and which section is open, with times. On the Mac, Endless One also reads how long it has been since the keyboard or mouse was last used anywhere on the Mac (a length of time only, never what was typed or clicked) and whether the display or the Mac is asleep.
- The Endless One Browser. For pages you open in Endless One’s own browser: the site’s domain, the page’s path without its query or fragment, its title, when you opened it and how long you were active on it. Browsing in other browsers is never seen.
- Devices and notifications. A device identifier, the platform, the app version and the push notification token.
- Problem reports. When you use Feedback to report a problem or request a feature: your words, the app, its build, the system and device, the screen you were on, the app’s recent errors and, unless you remove it, a picture of the screen. Reports are read by the Super Admins and emailed, through the company’s Google mail, to the address they choose.
- Company bank information. If the company connects its bank (Mercury), Endless One reads the company’s own accounts with a read-only key. This is the company’s information, not yours, and only the two Super Admins can see it.
- Security history. A record of important changes and of access to mailboxes, calendars, files and customer records.
What Endless One never collects: screenshots of your screen (other than a picture you choose to send with a problem report), what you type outside Endless One, which other apps you use, your browsing outside the Endless One Browser, and your location outside the time clock described above.
3. Camera, microphone, photos and speech
The apps ask for these only when you use the feature that needs them:
- Camera: to take a profile photo, scan a vendor’s pass at an event, take a photo for One to read, or for video in a Zoom meeting you join or start.
- Microphone: to record a voice message or an event debrief note, to ask One a question out loud, or for audio in a Zoom meeting.
- Speech recognition: Talk to One turns what you say into a question. Your speech is recognized on your device where it can be, otherwise by Apple, and is never recorded or kept by Endless One.
- Photo library: only to save a photo from a conversation, when you ask.
4. How information is used
Information in Endless One is used only to run Endless One for the company: to show you your work, to let your teammates work with you, to keep the company’s records, and to keep the system secure. The apps contain no advertising or analytics software. Nothing is used to track you across other companies’ apps or websites, and nothing is sold.
5. Who can see it
- Everything in Endless One belongs to the company. One company never sees another company’s work.
- Your teammates see what you share with them and what their role allows.
- The company’s two Super Admins can see everything in your account, including items marked “private” or “direct,” and can look at Endless One as you see it (“View as”). View as can only look, never change or send anything, and every use is logged.
- Time clock records, daily reports and Endless One Browser visits are seen by you, the Super Admins, and the people a Super Admin allows to see them for a company.
- Rare Legacy Life Group’s customer records are open only to the people on its list. One never keeps them in a notebook or in the company’s shared knowledge, and they are never offered to an outside service through a connector.
6. Service providers
Endless One uses these companies to run. Each receives only what it needs for its part:
- Supabase hosts Endless One’s database, file storage, sign-in and server, in the United States (AWS US East, Northern Virginia). It holds everything Endless One stores. Each company’s own customer database is also hosted by Supabase in the United States.
- Google provides Sign in with Google and the company’s Gmail, Calendar and Drive, which Endless One reads and, where the company allows, changes through access each company’s Workspace admin grants.
- Anthropic provides the AI model behind One. If a Super Admin switches One to it, OpenAI does instead. Only after you choose Allow on One’s permission screen, Endless One sends that service your question, the recent conversation, the records and emails One looks up for you, and photos you ask One to read. Nothing is sent before you allow it, and you can withdraw your permission at any time (iPhone: Settings › One’s AI service; Mac: Settings › Account). Anthropic’s and OpenAI’s business terms say they may not train their AI models on what is sent. The same service is used, with the same permission, when One prepares follow-ups from a meeting transcript you open, and to sort problem reports (a report’s note is included only if its sender allowed One, with email addresses and phone numbers removed).
- Zoom provides the company’s phone calls, texts and meetings. Calls and texts go through Zoom Phone, meetings run in Endless One with Zoom’s Meeting SDK, and Endless One reads the company’s Zoom call history and the transcripts of meetings described in Section 2.
- Apple delivers push notifications. What Apple delivers says only that something needs your attention, and never contains the text of a message or an email. When Show message previews is on, your device fetches who sent a new message and the start of it from Endless One and shows them in the notification; your device’s own settings decide whether they show on the lock screen. Apple also recognizes speech for Talk to One when your device cannot do it on its own.
- Resend delivers the email Endless One sends and receives for its own hosted mailboxes, and the one-time sign-in codes for people who sign in with email.
- Mercury, the company’s bank, receives only Endless One’s read-only key and which account and dates it asks about. Bank information is never sent to an AI service.
- Endless Origins, the company’s own vendor platform, exchanges event and vendor details with Endless One for people whose Origins login is linked.
- GitHub receives an issue for each group of problem reports, with the diagnosis and app details, never a name, an email address or a report’s note.
- Web search: when the company uses it to find business opportunities, a search service receives only the company’s own search phrases, never a record or a name.
7. Google user data
Endless One’s use and transfer of information received from Google APIs, including Google Workspace APIs, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google data is used only to provide the Endless One features you see, such as reading, writing and organizing company mail and calendars.
- Google data is not transferred to anyone except as this policy describes, for security, to comply with the law, or as part of a merger or sale.
- People see Google data only as Section 5 describes, for security, or to comply with the law.
- Google Workspace data is never used to develop, improve or train general AI or machine learning models, and is never used for advertising.
- Access to Google is held in the server’s memory for up to 50 minutes and never written to the database.
8. How information is protected
- Every connection is encrypted.
- The apps never reach the database directly; the server checks every request against the signed-in person’s permissions.
- Files are kept in private storage.
- Keys for other services are stored encrypted.
- Managing people and permissions requires two-step sign-in.
No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
9. How long information is kept
The company decides how long most information is kept, in Endless One’s settings. Today:
- Messages, records and the work people do are kept as the company’s records.
- Conversations with One are kept until the company sets a limit. Facts in your One notebook are kept until they are deleted; you can read and delete them yourself.
- Activity: individual check-ins for 90 days, timelines and sign-ins for 400 days, and daily totals with no time limit.
- Endless One Browser visits: 90 days.
- Zoom events, meeting transcripts and the summaries made from them: 90 days.
- Time clock records, timesheets and daily reports are kept as the company’s employment records.
- Push notification tokens: until you sign out on that device, or Apple says a token is no longer valid.
- Company bank balances and transactions are not stored; they are read from the bank when a Super Admin opens them and held in memory for about a minute.
- Invitations stay open for 14 days.
- The security history and agreement acceptances are kept permanently and cannot be changed.
When an admin removes someone from Endless One, their access ends and nothing is deleted.
10. Deleting your account
You can delete your Endless One account in the app at any time: on iPhone, Settings › Profile › Delete account; on Mac, Settings › Account › Delete Account…. It happens at once, after one confirmation, and cannot be undone.
What is deleted: your sign-in (you are signed out on every device, and your Google account or email address cannot open Endless One again unless an admin invites it again); your access to every company; your profile and photo, contact details, settings and notification choices, including your permission for One’s AI service; your One notebook and your conversations with One; your meeting transcripts; your devices, read receipts and Zoom link; and, on the Mac, what that Mac saved for you in its local sections.
What stays with the company: messages you sent and the work you did, such as records, contacts, calls, assignments, approvals, daily reports and time clock records, which belong to the company and show “Former member” instead of your name; the company’s history of changes and access, and agreement acceptances; activity and Endless One Browser records until the retention above removes them; and your company Google account and mailbox, which belong to the company, not to Endless One.
A Super Admin, the person who decides who can see a company, and the only admin of a company cannot delete their account until someone else takes that role; the app says what to do. If you cannot use the app, email us at the address below.
11. Your choices and rights
- You can allow or withdraw One’s use of its AI service at any time.
- You can turn off camera, microphone, speech recognition and location for Endless One in your device’s settings. Without location you cannot clock in at the office or a site when the company requires it; working from home needs no location.
- You can ask to see or correct the information Endless One holds about you by emailing the address below. Depending on where you live, you may have other rights under the law, and we will respond as the law requires.
12. Children
Endless One is for the company’s invited staff. It is not meant for anyone under 18, and we do not knowingly collect information from children under 13.
13. Changes to this policy
If we change how information is used, we will tell people in Endless One before the change takes effect, post the new version on this page and change the date above.
14. Contact us
Endless Consulting, LLC
Philadelphia, PA
Info@builtbyendless.com
For help with the app, see Endless One Support.