Spotter
Privacy policy
Last updated 7 October 2026
Spotter is a workout, nutrition and social training app made by Webya Technologies ("we"). This policy explains what we collect when you use Spotter, why, who helps us process it, and how you control it. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
What we collect
| Data | What it is | Why |
|---|---|---|
| Account | Email address, password (stored hashed), or your Apple or Google sign-in ID. Display name, username, bio and profile photo. | To create your account, sign you in and show your profile to the people you allow. |
| Body and goals | Birth date, sex, height, body weight, activity level, training habits, weight goal and, if you choose to tell us, pregnancy or breastfeeding. | To check you're old enough and to work out your calorie and macro targets. You can skip the body and goal questions. |
| Training | Workouts, exercises, sets, reps, weights, personal records and routines. | This is the core of the app: your log and your progress. |
| Nutrition | Food and water logs, saved meals and custom foods. | To track your intake against your targets. |
| Social | Friends, posts, photos you attach, comments, reactions, props, stories, squad chat messages, challenges and league points. Reports and blocks you make. | To run the social features, and to keep the community safe. |
| AI coach | Your coach chat messages, the coach's replies and workout analyses. | So you can see your coaching history. |
| Device | A push notification token and your notification settings. | To send the notifications you've turned on. |
We don't collect your location, contacts, advertising ID or browsing history.
Who can see your data
Your profile, posts and stories are visible to the people your privacy setting allows: everyone, friends only or only you. You can also hide your weights and reps from friends. Your body measurements stay private. If you're in a squad, your squad mates see the foods you logged in the last day, with their calories and macros. You can turn this off with Share meals with squad in Settings. The squad's protein pact shows protein only. People you block can't see your profile, posts or stories.
Services that process your data for us
- Supabase hosts our database, sign-in and file storage on servers in Frankfurt, Germany. All your account data lives here.
- Anthropic provides the AI behind the coach and food photo logging. When you use these features, and only after you agree in the app, we send the data needed for the answer: your name, goals, recent workouts, records, routines, protein intake, your message, or the meal photo you took. Anthropic processes it in the United States to produce the reply and doesn't use it to train its models. We don't store your food photos.
- Expo and Apple deliver push notifications and app updates. They receive your device's push token and the notification text.
- Open Food Facts receives the food names you type when you search for food. It doesn't receive anything about you.
- Apple and Google handle sign-in if you choose Sign in with Apple or Google.
When data leaves the European Economic Area, as it does with Anthropic, the transfer is covered by the European Commission's Standard Contractual Clauses.
Legal basis
If you're in the EU, UK or a similar region: we process your data to provide the service you signed up for (contract). We process health-related details, such as body measurements, pregnancy and nutrition, and send data to the AI coach only with your consent, which you can withdraw at any time by deleting that data or not using the feature. We process reports and blocks to keep the community safe (legitimate interest).
How long we keep it
We keep your data until you delete it or delete your account. When you delete your account, your profile, workouts, food logs, posts, photos, messages and everything else tied to you is deleted straight away. Copies can remain in encrypted backups for up to 30 days before they're overwritten. If you signed in with Apple, we also revoke Spotter's access to your Apple ID.
Your rights and choices
- See and correct: edit your profile, body details and logs in the app at any time.
- Delete: open Profile, then Settings, then Delete account. If you can't use the app, email us from your account's address.
- Get a copy: email us and we'll send you your data in a machine-readable format within 30 days.
- Control visibility and notifications: change them in Settings.
- Complain: you can contact your local data protection authority.
Children
You need to be at least 13 to use Spotter, or older where your country requires it. We don't knowingly collect data from younger children. If you believe a child under 13 has an account, email us and we'll delete it.
Security
Data is encrypted in transit and at rest. Access rules in the database make sure each person can only read what they're allowed to see.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top shows the latest version.
Contact
Questions or requests: webyatech@gmail.com