Privacy Policy

This Policy explains how Spotter collects, uses, and protects your information when you use the Platform.

Information we collect

• Account & profile: name, email, role, city, goals, photos, and trainer professional details.
• Communications: messages between clients and trainers, reviews, and support requests.
• Health & fitness data: programs, check-ins, body measurements, and progress photos you choose to add. This is sensitive information and is shared only with the trainer you are working with, and with our AI provider when your trainer uses the AI workout builder (see below).
• Payments: processed by Stripe. We do not store full card numbers; we receive limited transaction and payout status data.
• Usage data: log, device, page load speed, and aggregated/anonymized search data used to operate and improve the Platform.

How we use it

To provide and improve the Platform, match clients with trainers, enable messaging/scheduling/payments, send transactional notifications, prevent fraud and abuse, and comply with law. We do not sell your personal information.

To keep trainer search fair, we set a session cookie holding a random number that only shuffles the order of similarly ranked trainers. It is not linked to your account and expires when your browser session ends. We count how often each trainer appears near the top of search results, without recording who saw them.

If you turn on notifications on a device, your browser gives us a delivery address for that device. We keep it with your account until you turn notifications off, sign out there, or the address stops working. The push service your browser uses (such as Google, Apple, or Mozilla) carries each notification to you, encrypted so that only your device can read it. We may also email you when a coaching chat message sits unread; you can turn those emails off on your Notifications page.

Who we share with

• The other party in your relationship (your trainer or client) — only what is necessary to work together. Client identity is limited until a connection is established.
• Service providers that run the Platform: Clerk (authentication), Stripe (payments/payouts), Anthropic (the AI workout builder), our hosting and database providers, file storage, and email delivery.
• Legal — when required by law or to protect rights and safety.
• Our safety team: when you report a conversation, we save a copy of its recent messages so a person can review it. We don't tell the reported person who reported them.

AI workout builder

Trainers can ask our AI workout builder to draft a workout for a client. To write the draft, we send Anthropic, the company that provides the AI model, the trainer's request and exercise library and the client details the draft depends on: training goals, experience level, age range, injuries or limitations, pregnancy status if shared, how often and where the client trains, the rest of their program, recent logged workouts, and recent pain reports. We don't send the client's name, email, phone number, or photos. When a trainer drafts a reusable template instead, we send only the trainer's request and exercise library, with no client details. The trainer reviews every draft, and nothing reaches the client until the trainer chooses to use it.

Advertising measurement

When you arrive from one of our ads or tagged links, we keep the campaign tags and ad click identifiers from that link in a first-party cookie for up to 90 days, and attach them to your account if you sign up, so we can tell which campaigns work. We also note whether you signed up on a phone, tablet, or computer, and whether inside another app's browser (such as TikTok's or Instagram's), so we can see how sign-up works on each. On our public marketing pages we may use the Meta, TikTok, Reddit, and X (formerly Twitter) pixels, which set their own cookies. When you sign up, start a trial, or start a paid plan, we may tell Meta, TikTok, Reddit, and X that it happened, identified only by a one-way hash of your email address and account ID, the ad click identifier, and, when you sign up, your IP address, browser type, and the ID in that platform's pixel cookie. We never share your profile, messages, or health and fitness data with advertising partners. If your browser sends a Global Privacy Control signal, we don't load these pixels and don't report your account's conversions to them.

Storage & security

Data is stored with reputable cloud providers. Sensitive media (progress photos and shared documents) is access-controlled and served only to the authorized client and trainer. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Your choices & rights

You can view and update your profile and delete content such as check-ins. From Privacy & data in your account menu you can download a copy of your data or delete your account yourself. Depending on your location you may have additional rights (access, correction, deletion, portability). Contact us to exercise them.

Retention

We keep information for as long as your account is active or as needed to provide the Platform and meet legal obligations, then delete or anonymize it. When you delete your account we delete your profile, messages, programs, check-ins, photos and files. We keep safety reports, waivers you signed with a studio, and the payment records Stripe holds, because we or the studio may need them for legal or safety reasons.

Children

The Platform is for users 18 and older and is not directed to children.

Changes & contact

We may update this Policy; material changes will be posted here with a new date. Questions, or to exercise your rights: support@spotter-us.com.