Privacy Policy

• Account details: your email address and password (handled by our authentication provider — we never see or store your raw password).
• Health screening answers: your responses to the pre-exercise screening questionnaire. These determine whether you need medical clearance before training and are kept as a permanent safety record.
• Physical stats and goals: height, weight, age, gender, training goal, experience level, available equipment, and days available to train — used to generate your program.
• Medical clearance documents: if your screening flags something, you may upload documentation from a medical professional. Stored in a private, access-restricted location, and automatically deleted 90 days after your clearance is reviewed (or sooner, if you delete it yourself).
• Joint-angle data from form checks: numeric measurements (like joint angles) extracted from a video clip on your device. The video itself is never uploaded, transmitted, or stored — it is processed in your browser and discarded. Only the extracted numbers, and our AI's feedback on them, are saved, and are automatically deleted 90 days after creation (or sooner, if you delete them yourself).
• Generated programs and check-ins: the training programs we generate for you, and your weekly check-in answers (completion, difficulty, pain, notes), which shape how your program adapts.
• Payment information: your subscription is processed by Stripe. We never see or store your card details — only your subscription status.

We use this information to generate a training program suited to you, to gate access to programs and form-checking behind a health screening for your safety, to provide AI feedback on your exercise form, and to process your subscription payment. We don't use your data for advertising, and we don't sell it.

• Anthropic (maker of the Claude AI model) processes your stats and goals to generate programs, and your joint-angle data (never video) to generate form feedback.
• Stripe processes your subscription payment.
• Supabase hosts our database, authentication, and file storage.

We don't share your data with anyone else, and we don't sell it.

Our database and file storage (Supabase) are hosted in Sydney, Australia (region ap-southeast-2) — this data does not leave Australia via Supabase. Some other providers we use are based, or operate infrastructure, outside Australia — meaning your personal information may be processed or stored overseas:

• Anthropic is based in the United States. Stats, goals, and joint-angle data sent to Anthropic for AI processing may be handled there.
• Stripe operates infrastructure internationally, including in the United States, in addition to its Australian operations.

We take reasonable steps to only work with providers who maintain appropriate data protection standards, but once your information is handled by an overseas recipient, we may not be able to ensure it is protected to the same standard as the Australian Privacy Principles, or enforce those principles against that recipient directly. By using Spotter, you consent to this overseas handling of your information for the purposes described in this policy.

• Health screening answers are kept as a permanent safety record.
• Medical clearance documents and form-check joint-angle data are automatically deleted 90 days after creation or review, and you can delete them yourself at any time.
• Video from the camera feature is never stored anywhere — it is processed on your device and discarded immediately.
• You can request a full export of your data, or delete your account and all associated data entirely, from Account Settings.

You can access, export, or delete your data at any time from Account Settings. Deleting your account removes your profile, health screening answers, training plans, form-check data, and any uploaded medical documents.

If you have questions about this policy or your data, contact us at josh@spottersai.com.