SPOTRS Privacy Policy
Last updated: September 29, 2026
Who we are: SPOTRS is run by [the SPOTRS team, legal name to be added before public launch], in Ontario, Canada.
Contact: privacy@spotrs.app
SPOTRS is a fitness app for tracking training, nutrition and recovery, and for sharing it with people you choose. This page explains what SPOTRS collects, why, who can see it, and what you can do about it. It describes what the app actually does today. It's reviewed whenever SPOTRS changes, and a lawyer will review it before the public launch.
The short version
- Private by default. A new profile is Private. Your workouts, food, body measurements, progress photos, water, fasting, sauna and cold plunge logs and blood pressure readings are only visible to you, unless you choose to share something with a coach you're linked with.
- No ads, and we don't sell or rent your data. SPOTRS has no advertising or tracking tools.
- Location only when you're finding something nearby. The gym finder and "Coaches near me" use your position only while you use them, rounded to about 1 km. It's never saved or shown to anyone. Photos and clips have their location removed on your phone before upload.
- You're in control. Choose who sees your profile and each post, block and report people, download all your data, and delete your account and everything in it from Settings at any time.
What we collect, and why
| What | Examples | Why | Who can see it |
|---|---|---|---|
| Account | Email address, password (stored scrambled by our sign-in provider; nobody at SPOTRS can read it) | To sign you in and send account emails (confirming sign-up, resetting your password) | Only you |
| Profile | Username, display name, bio, training focus, optional city, profile and cover photos, the stat tiles, achievements and workout cards you choose to show, gym playlists | To show your profile | Depends on your setting: Everyone, Followers only, or Private |
| Training | Workouts, sets, reps, weights, times, exercise variations, routines, custom exercises, quick logs, personal records | To track your training | Only you. Only what you choose to publish (stat tiles, achievements, workout cards) appears on your profile |
| Nutrition | Meals and foods, amounts, saved foods and scanned barcodes, calorie and macro goals, supplements and when you took them, water, fasts | To track your nutrition | Only you (a coach sees your food diary and goals only if you switch that on for them). Fasts are never shared |
| Body, recovery and health | Body measurements, progress photos, sauna and cold plunge sessions, blood pressure readings (and pulse, arm and a note if you add them) | To track your progress and recovery | Only you. A coach sees measurements only if you switch that on, and a progress photo only if you share that photo. Blood pressure is never shared |
| Coaching | Coach links; what you share with each coach; messages and check-in notes; routines, suggested targets, sessions and files between you; a coach's private notes about a client | To run coaching | Only you and that coach, and only while you're linked. A coach's private notes are visible only to that coach, and are hidden when the link ends |
| Coach details (coaches only) | Your certification details and a photo of your certificate; your "About my coaching" text; optionally the city or area you coach in, how far you travel and whether you coach online | To check coaches are qualified, and to list you in Community → Coaches | The certificate only to you and the SPOTRS team. Others see your coaching text, and for your area only its name and a rough distance |
| Posts and social | Photos, clips (including the part you trimmed), GIFs, captions, songs on posts, comments, reactions, follows, your Close Spotrs list, playlists, groups, challenges and your progress in them | To run SPOTRS' social features | Whoever you choose for each post or playlist; group or challenge members; your Close Spotrs list is visible only to you |
| Direct messages | Messages, GIFs and photos you send, message requests, when a conversation was last read | To let you talk to other people on SPOTRS | You and the person you're writing to. If a message is reported, a copy is kept with the report for the SPOTRS team to review |
| Safety | Blocks, reports you send, reports about your content | To keep SPOTRS safe | Never shown to the person involved. Reports are reviewed by the SPOTRS team |
| Notifications | "Sam followed you", "Your coach sent a routine"… | To tell you what happened | Only you |
Kept only on your phone: the workout in progress, remembered choices (like your weighing unit), and, if you turn on Sign in with Face ID, your email and password in your iPhone's Keychain, readable only after Face ID. Reminders (rest timer, fasting, coaching sessions) are scheduled on your phone.
We don't collect your contacts, advertising IDs, data from other apps, or your location history.
Health-related information. Training, nutrition, supplements, measurements, fasting, blood pressure and progress photos can reveal things about your health. We treat all of it as private and use it only to show it back to you, to work out the numbers and badges you choose to show, and to share what you choose with your coach. SPOTRS doesn't give medical advice.
Location
- Gym finder: your position is used only while the gym finder is open (asked the first time; you can also type a city instead). It's rounded to about 1 km and sent to OpenStreetMap's public search service to find gyms near that point. Nothing is saved.
- Coaches near me: when you tap Near me or choose an area, the rounded point (about 1 km) is sent to SPOTRS to find coaches who serve it, and isn't saved.
- Typed places (a city or address) are looked up by your iPhone's own map service (Apple).
- Coaches can save the city or area they coach in. We keep its centre rounded to about 1 km, visible only to them. Others only see the area's name and a rough distance.
- Photos and clips have their location data removed on your phone before they're uploaded.
Services SPOTRS uses, and what they receive
| Service | What for | What they receive |
|---|---|---|
| Supabase | Hosts SPOTRS' database, sign-in and private file storage ([region]) | Everything above, stored for us. Private files are shown only through short-lived private links |
| Resend | Sending account emails (from mail.spotrs.app) | Your email address and the email's contents |
| Open Food Facts and USDA FoodData Central | Food barcode lookups and food search | Only the barcode number or your search words |
| OpenStreetMap (public Overpass servers) | Finding gyms near a place | Only a point rounded to about 1 km |
| Apple | Looking up a typed place; keyboard dictation if you use it (for example in "Say what you ate"); song search, covers and 30-second previews (iTunes Search); App Store and TestFlight | Only what's needed for each: the place name, what you dictate (handled by Apple under its own policy), search words or song names |
| GIPHY | GIF search in comments and messages | Only your search words. The GIF you pick is shown from GIPHY's servers |
| Spotify (through SPOTRS' own server function) | Song search, and name, artist and cover for Spotify links | Only your search words or the song link |
| YouTube, SoundCloud | Name and cover for a pasted song link | Only the link |
| Music apps and Google Maps / Apple Maps | When you tap a song, playlist or gym, it opens there | Whatever that app collects under its own policy |
| Cloudflare | Hosting this website (spotrs.app) and the spotrs.app email addresses | Normal website visit information such as your IP address |
Songs are links: SPOTRS doesn't store or stream music. Food search results are shown for you to check; nothing is added to your diary until you choose to.
Who can see what you share
- Profile: Everyone, Followers only (you approve each follower), or Private (only you).
- Each post or playlist: Everyone, Followers only, Close Spotrs (a list only you can see), or Only me. Your profile setting still applies: with a Private profile, only you see your posts.
- Blocking hides you and the other person from each other everywhere and ends any follow between you.
- Coaches: linking up shares nothing by itself. For each coach you choose whether they see your workouts, body measurements and nutrition (all off by default), and you share progress photos one at a time. You can switch any of it off, or end the link, at any time. A coach could still screenshot something while it's shared.
- Groups and challenges: members see each other's name, photo, posts in the group and progress in the challenge.
- Trimmed clips: SPOTRS only plays the part you chose, but the whole clip is uploaded.
Your choices and rights
- See and download your data: Settings → Download my data.
- Change or delete: edit or delete anything in the app. Settings → Delete account removes your account and everything in it (including your files). Deleted data can remain in our hosting provider's encrypted backups for up to 30 days, then it's gone.
- Ask us: you can ask to access, correct or delete your information, or ask a question about it, at privacy@spotrs.app. We'll reply within 30 days. You can also contact the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.
- If you're in the EU or UK: our legal bases are providing the service you asked for (contract), your consent for optional sharing (for example stat tiles, achievements and sharing with a coach), and legitimate interests for safety and preventing abuse. You also have the rights to object, restrict and port your data.
How long we keep things
As long as your account exists, or until you delete them. Reports are kept for up to 12 months after they're handled, to deal with repeat abuse. After you delete your account, backups for up to 30 days.
Security
Private storage, access rules on every table so each person can only reach their own data (and what others chose to share with them), short-lived links for private files, and passwords handled by our sign-in provider. No system is perfect: if something goes wrong that affects you, we'll tell you as the law requires.
Children
SPOTRS is for people aged 16 and over. We don't knowingly collect information from anyone younger. If you think someone under 16 is using SPOTRS, email privacy@spotrs.app and we'll delete the account.
Where your data is stored
Your data is stored by Supabase ([region]) and may be handled in other countries by the services listed above. Where the law requires it, we use the protections it asks for.
Changes
We'll update this page when SPOTRS changes, and tell you in the app before important changes apply.
Contact
[The SPOTRS team, legal name to be added] · Ontario, Canada · privacy@spotrs.app