Consumer Health Data Privacy Policy

1. Who this applies to

This policy applies to consumer health data that DayTech Enterprises, LLC (“Spotter”, “we”) collects from people who use Spotter, in particular residents of Washington and Nevada and anyone whose health data is collected there. “Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status, including vital signs and information derived from it.

2. Categories of consumer health data we collect

• Heart rate and active energy (calories) during a workout, read from Apple Health and Apple Watch, only if you grant Spotter permission in the Health app.
• Physical activity data you enter or dictate: exercises, sets, weights, repetitions, workout duration, rest, cardio bouts, and the personal records and statistics Spotter derives from them.
• If you choose to help train Spotter: your workout data (only if you pick “Workout and app data”), including past workouts, stored under a pseudonymous sharing ID.
• Cardio workouts from Apple Health (only if you turn on import). When you turn on Apple Health import in Settings, Spotter reads the cardio workouts already stored in Apple Health — their type, start time, duration, distance, calories and average heart rate — whichever app recorded them. We read them; we do not change or delete anything in Apple Health.
• Workouts and active energy that Spotter writes to Apple Health, if you grant write permission.

We do not collect biometric identifiers (voice recognition runs on your device and does not identify you by voice), genetic data, reproductive or sexual health data, gender-affirming care data, or precise location.

3. Where it comes from

• You, when you log a set by voice or by touch, or start and stop a workout.
• Apple Health and Apple Watch, with your permission.
• Apple Health, when you turn on Apple Health import. The workouts we read may have been recorded by other apps or by your Apple Watch; Apple Health is simply where they already are.

4. Why we collect it

• To log your workouts and show you your own history, personal records and statistics.
• To show live heart rate and active energy during a workout, and to save the workout to Apple Health.
• If you enable cloud backup, to store and restore your workout data, including any recorded heart-rate and calorie data.
• If you have an account and choose to share a workout, to show your friends the summary you approved (section 5).
• If you use weekly leagues or challenges, to count your workouts for those features.
• If you choose “Help train Spotter”, to help train Spotter to understand lifters’ abilities, build smarter custom workout plans, improve Spotter’s effort, fatigue and strength estimates, and find and fix problems. These improvements may also power future Premium workout insights. This is optional, and every feature works without it.

We do not use consumer health data for advertising or marketing, and we do not collect it for any purpose beyond what the feature you are using requires. The only use beyond your own features is improving Spotter’s estimates with workout and app data you chose to share, which you can withdraw at any time.

5. Where it is stored and who can see it

Heart rate and calorie data are stored on your device and may also be included in Spotter cloud backups. If you enable cloud backup, we upload your workout data, including any recorded heart-rate and calorie data, to Amazon Web Services in the United States so you can restore it. Cloud backup is separate from sharing a workout with friends. Heart rate and calories are stripped from beta diagnostics uploads.

Help train Spotter (optional). If you have an account, live in the United States and are not identified as under 18, you may be offered a choice to share data with Spotter. Heart rate and calories are not part of it; no consumer health data is used for “Help train Spotter”. Nothing is shared until you choose, and the option covers your past workouts and future ones while it is on. Shared data is stored with Amazon Web Services in the United States under a random sharing ID, not your name or email; the ID is linked to your account so we can delete the data, so it is pseudonymous, not anonymous. Only Spotter uses it. It is kept for up to 24 months, and deleted sooner when you turn sharing off in Settings → Privacy → Data sharing or delete your account. See the Privacy Policy.

Anything Spotter reads from Apple Health stays on your iPhone. Cardio imported from Apple Health is not uploaded to our servers, is not part of the optional “Help train Spotter” contribution, and is not included in cloud backup. If you turn import off, Spotter stops reading. Workouts already imported remain in your Spotter history and you can delete them like any other workout.

Your workout log stays on your iPhone. Besides cloud backup, it is uploaded in the following cases, each of which requires an account and a choice by you:

• When you tap Share on a workout, the summary shown in the preview (date, duration, total sets, exercise names, personal-record count, and, unless you switch off “Include exercise details” for that share, each exercise's set count and top weight × reps) is stored on our servers and shown to your friends.
• When you participate in weekly leagues (on by default with an account; can be turned off), a count of your workouts for the week is stored and shown to your friends in league standings.
• When you join a challenge or pack, the progress that feature tracks (workout counts or personal-record counts) is stored and shown to the other participants.

Beta (TestFlight) builds also upload a per-set export of each completed workout to Apple's CloudKit as diagnostics unless you turn that off in Settings; heart rate and calories are removed first. See the Privacy Policy.

6. Sharing with third parties

We do not sell consumer health data, and we do not share it with advertisers or data brokers. The only third parties that process it are service providers acting for us under contract, who may not use it for their own purposes:

We do not share consumer health data with affiliates. We may disclose data when the law requires it.

7. Your rights

Under the Washington My Health My Data Act and Nevada law you have the right to:

• Confirm whether we are collecting, sharing or selling your consumer health data, and access it, including a list of the third parties and affiliates we have shared it with and their contact details.
• Withdraw consent to our collection and sharing of your consumer health data. Heart rate and calories are no longer shared through “Help train Spotter”, and anyone who previously shared them has been withdrawn and that data deleted. Turning off “Help train Spotter” in Settings → Privacy → Data sharing deletes the workout and app data shared through it.
• Delete your consumer health data.

You can act on most of this yourself: revoke Spotter's Health permissions in the Health app or iPhone Settings; remove a shared workout in the app; turn off weekly leagues in Privacy & sharing; leave a challenge or pack; export or delete your on-device history from Settings; and delete your account (which removes every shared summary, count and progress record from our servers) as described on Delete your account.

To make a request by email, write to support@spotterlifts.com with the subject “Health data request”. Before providing access to, correcting or deleting personal data, we verify your identity and, where relevant, your authority to act for someone else. For account-related requests, we normally ask you to sign in again to your existing Spotter account or confirm control of an email address already verified on that account. If these methods are unavailable or the records are not linked to an account, contact support@spotterlifts.com so we can assess another reasonable verification method. We will not require you to create an account or email us your password or sign-in codes. We process requests within the deadlines required by applicable law. Requests are free, up to twice in a 12-month period.

Deletion scope. When you ask us to delete, we delete the data from our systems and instruct our service providers to do the same. Data in database backups is removed as backups are overwritten, within 35 days: deleted records may remain in DynamoDB point-in-time recovery backups for up to 35 days after deletion from the live database. Data on your own device and in Apple Health is under your control and is not affected by a request to us.

Appeals. To appeal a decision on a health-data request, reply to our decision email or email support@spotterlifts.com with the subject “Health data appeal”. Spotter’s operator will reconsider the request and send a written decision with reasons within 45 days after receiving the appeal. If the appeal is denied, we will provide information for submitting a complaint to the appropriate state Attorney General.

We will not deny you the service, charge you a different price, or treat you differently for exercising these rights.

8. Changes

We announce material changes by posting a notice on this page and updating its effective date. We provide any additional notice, and obtain any consent, required by applicable law before applying the relevant change.

9. Contact

DayTech Enterprises, LLC
support@spotterlifts.com