Built Capable — Capability Actual

Privacy

Last updated: 8 September 2026

Built Capable stores your account and your training data so it follows you across your devices. This page explains what's kept, where, and how to delete it.

What we store

When you create an account, we store on our server (Cloudflare D1, a database hosted in the United States):

• Your email address and a hashed version of your password (we never store the password itself and cannot see it).
• Your training data — workout plans, equipment setup, training history (sessions, sets, loads, RPE, notes), your training level and preferences, and any 8-week program. This is the same data the app keeps in your browser; storing a copy on our server is what lets it sync across your devices.
• A session token (a random string in a cookie) so you stay signed in. It is not used for tracking.

A copy of your training data also stays in your browser's local storage so the app works offline. Signing out clears that local copy from the device you signed out on.

What we don't do

We do not sell or share your data. There is no advertising and no cross-site tracking. The only cookie is your sign-in session.

The site uses Cloudflare Web Analytics for basic aggregate traffic counts (page views, referrers, country, device type). It sets no cookies, stores no identifier for you, does not track you across other sites, and cannot be tied back to your account. It is not used to build a profile of you.

How your sessions are built

The app writes the lines you see on a workout — which movement fills a slot, why one stands in for another, the loads, the reasons under a recommendation. That is the app's own rules running on your equipment list, your training level, what you have logged and anything you have asked it to work around. It is not a language model, nothing you log is sent anywhere to produce it, and the same inputs always produce the same session.

The one exception is the “describe your workout” box, which is described below. Text written by that feature is labelled Written by AI where it appears. Lines the app wrote itself are labelled Adapted for you.

Other services involved

• Hosting. The app and database run on Cloudflare. Like any web host, Cloudflare processes the normal technical information a browser sends (IP address, browser type, files requested) and may keep short-term server logs for security and reliability.
• The "describe your workout" feature. If you use the free-text box, the sentence you type is sent to Anthropic's API to be turned into workout settings. It is not stored by us and, per Anthropic's API terms, is not used to train their models. Don't put anything sensitive in that box.
• Fonts. Typefaces load from Google Fonts, which sends your IP address to Google. No other Google services are used.

Deleting your account

Email the address below and we'll delete your account and all associated training data from the server. Clearing this site's data in your browser removes the local copy.

Password reset

There is no self-serve "forgot password" yet. If you're locked out, email the address below and we'll reset it.

Changes to this policy

If this policy changes in a way that affects how your information is handled, the "last updated" date above will change.

Contact

Privacy questions, account deletion, or a password reset: [email protected].