ENDOWPrivacy Policy
Last updated 17 August 2026
In short: there is no ENDOW server. Your data is on your device and in your own iCloud account, and nobody at ENDOW can read it.
What stays on your device
Your vice, its cost, your streak, your diversion history and your badges are stored locally on your iPhone. There is no account to create and no sign-up.
What goes to iCloud
If you start or join a squad, ENDOW writes squad records to Apple's CloudKit using your own iCloud account. That includes your chosen display name, your vice and streak, the contributions you log, votes you cast and — if you are the admin — the squad's settings, your payment handle and your confirmations.
Squad names, display names, payment handles and free-text notes are stored as CloudKit encrypted fields. Identifiers, dates and amounts are stored as ordinary fields so the app can sort and total them.
Who can see it
Everyone who has accepted a squad's invitation can see that squad's records — that is the purpose of sharing them. Nobody outside the squad can.
The developer has no access to any of it. CloudKit private and shared databases are readable only by the Apple Accounts involved; there is no administrative view and no copy on any server we control, because we do not operate one.
What ENDOW never sees
- No analytics or usage telemetry.
- No advertising identifiers. ENDOW does not track you across apps or websites.
- No crash-reporting SDK and no third-party code of any kind.
- No network requests other than to Apple's iCloud.
Money
ENDOW is not a payment processor and never touches a transaction. It has no connection to Zelle, Venmo, Cash App, PayPal, your bank or any brokerage, and it stores no card or bank details. A "payment handle" in the app is simply a piece of text the admin typed so members know where to send money themselves.
Children
ENDOW is not directed at children. It concerns spending on vices such as vaping and alcohol and is intended for adults.
Deleting your data
- Leaving a squad removes that squad's records from your device.
- Records you already contributed remain in the admin's iCloud account. They are the admin's copy, and this app cannot reach into someone else's iCloud to delete them.
- An admin who deletes a squad destroys its shared data for everyone in it.
- To remove everything ENDOW has stored, delete the app and then remove ENDOW's iCloud data in iOS Settings under your name → iCloud → Manage Account Storage.
Changes
If this policy changes materially, the updated date above will change and the revision will be published on this page.