Privacy Policy

1. The short version

• Your workout history is stored on your iPhone. You can log workouts without creating an account, and nothing about those workouts is sent to us unless you choose to share it with friends, turn on cloud backup, or choose to help train Spotter (section 11).
• Voice stays on the device. Speech recognition runs on your iPhone. Spotter never transmits your audio.
• Apple Health data is never shared with friends. It is not sent to our servers unless you turn on cloud backup, which is off until you turn it on.
• “Help train Spotter” is optional. If you choose it, workout and app data is shared with Spotter, including your past workouts. It is never sold or used for ads, and turning it off deletes what you shared. Every feature works without it.
• You can log workouts without an account. An account is needed for cloud backup and social features, including friends, leagues and challenges. Those features use online services run for us by Amazon Web Services, and we store the data described in sections 7 and 9.
• Cloud backup is optional and off until you turn it on. When it is on, a copy of your training is kept on our servers so you can restore it on a new phone. Section 8 says what a backup contains and how to delete it.
• We do not sell your data, show ads, or use advertising or analytics SDKs.
• Beta (TestFlight) builds upload diagnostics by default, and older beta builds uploaded more than they should have. Section 11 says exactly what, and what we are doing about it.

2. Who we are

Spotter is a lifting tracker for iPhone and Apple Watch. The app and this website are operated by DayTech Enterprises, LLC (“Spotter”, “we”, “us”).

Email: support@spotterlifts.com

3. Who can use Spotter

You must be at least 13 years old to use Spotter, with or without an account. We use age-range information supplied by Apple. We do not independently verify your age or collect or store your date of birth.

Spotter is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information to Spotter, contact support@spotterlifts.com so we can review the concern.

4. Data stored on your device

Your iPhone stores the following data. The cloud backup, sharing, diagnostics and support sections explain when data is also sent off the device.

• Workout sessions, exercises, sets (weight, reps, time), rest days and cardio bouts.
• Personal records, achievements, progression suggestions, saved plans and your gym profile (for example, which plates and equipment you have).
• Settings, including voice and listening preferences.
• A session log used for troubleshooting (about 600 KB, rolling). It records workout detail and, when Apple Watch is recording, heart-rate values. In App Store builds it stays on the device unless you send it to us yourself (see section 12). In beta (TestFlight) builds it is uploaded automatically unless you turn that off — see section 11.

Because this data lives on your phone, it is included in whatever device backups you have turned on with Apple (iCloud Backup or a computer backup). Those backups are governed by Apple's terms and your Apple Account settings, not by us. Spotter also offers its own cloud backup, described in section 8; it is off until you turn it on. With cloud backup off, your workout history stays on the device: signing in on a new phone does not bring your history across, and deleting the app deletes the history stored on that phone.

You can export your workout history as a file from Settings. Where you send that file is up to you.

5. Voice

• Spotter uses Apple's on-device speech recognition. Recognition is configured to run only on the device; if on-device recognition is unavailable, voice logging does not fall back to a server. Spotter has no code path that transmits audio.
• Any on-device language model features (Apple Intelligence) also run on the device.
• While the microphone is listening, it can pick up people near you. Spotter's listening indicator shows when the microphone is live, and you can choose a tap-to-talk mode so it only listens when you ask.
• The on-device session log records only the shape of what was heard (for example, word count and timing), not the words.
• A Diagnostics log keeps the text of commands Spotter did not understand for 24 hours, on the device, so you can send them to us if you want help. In App Store builds it is off until you turn it on in Settings, and the text leaves your phone only when you choose to email it. In beta (TestFlight) builds it is on by default and uploaded automatically until you turn it off — see section 11.

Historical beta builds handled voice text differently. See section 11.

6. Apple Health and Apple Watch

If you allow it, Spotter reads heart rate and active energy from Apple Health to show live stats during a workout, and writes workouts and active energy to Apple Health so your training appears there. With Apple Watch, the Watch records heart rate and active energy during a workout and shows the current exercise and target.

Apple Health import (off until you turn it on). If you turn on Apple Health import in Settings → Your data → Apple Health, Spotter also reads the cardio workouts already in Apple Health — their type, start time, duration, distance, calories and average heart rate — whichever app recorded them, so your runs and rides appear alongside your lifting. Turning it on is what asks for that access. Everything read this way stays on your iPhone: it is not sent to our servers, is not part of “Help train Spotter”, and is not included in cloud backup. Spotter never imports its own workouts back, so nothing is counted twice. Turning import off stops any further reading; anything already imported stays in your history until you delete it.

Health data is used only to show you your own stats and to save your workouts to Apple Health. It is never included in anything shared with friends, leagues or challenges. It is not sent to our servers either, with one exception, which is off until you turn it on: if you turn on cloud backup, the heart-rate and calorie data recorded for your workouts is part of the backup (see section 8). Heart rate and calories are not part of “Help train Spotter”. It is not used for advertising or marketing and is never sold or disclosed to data brokers. You can revoke access at any time in the Health app or in iPhone Settings, and remove anything Spotter wrote there from the Health app.

Because heart rate is a vital sign, some state laws treat it as consumer health data. Our separate Consumer Health Data Privacy Policy covers that in more detail.

7. Your optional account

You can log workouts without an account. Cloud backup and social features need one. If you want friends, weekly leagues or challenges, you sign in with Sign in with Apple, Sign in with Google, or an email address and password. Accounts are managed for us by Amazon Cognito.

When you create an account we store:

• An account identifier, your email address and whether it is verified, and which sign-in methods are linked to the account. With Sign in with Apple we request only your email, which may be Apple's private relay address.
• Your username (with a short history of changes), display name, level, and an invite code used for adding friends.
• Your privacy settings (find me by username, participate in weekly leagues, show when I'm training, share finished workouts automatically), when you last changed each of them, and your notification settings.
• Push notification device tokens, if you allow notifications (kept up to 90 days after last use).
• Your friends list, blocked users, pending invitations, and weekly workout counts used for leagues.
• Timestamps for account creation and changes.

If the same email address signs in with more than one method, we link those methods to one account so you keep one profile.

8. Cloud backup

Cloud backup is optional and off until you turn it on. You turn it on in Settings → Cloud backup, and you can turn it off again at any time. Until you turn cloud backup on, we hold no backup copy of your workout history. Turning cloud backup off stops further uploads; it does not by itself delete backups already uploaded. To remove those, use Delete cloud backup in Settings → Cloud backup, or delete your account.

When cloud backup is on, a backup contains:

• Your workout history — exercises, sets, reps and weights.
• Cardio sessions, personal records, rest days and custom exercises you created.
• Your plans, schedule and gym setup (equipment and plates).
• Your achievements, XP, level and progression.
• The heart-rate and calorie data recorded for your workouts with Apple Watch.

With each backup we also store its size, a checksum, the app version, the number of workouts and the date of the latest one, a random identifier for the phone that made it (not a hardware identifier) and the device name iOS reports to apps, which on current iOS is the model (for example “iPhone”). These let the app show which phone your backup came from and stop two phones overwriting each other.

We keep up to your 10 most recent backups. A replaced backup may be kept for up to 90 days as a storage version so an accidental loss can be recovered, but only while your account exists: deleting the cloud backup or deleting your account permanently removes every backup and every stored version immediately.

Backups are stored on our servers with Amazon Web Services in the United States (region us-east-1). They are encrypted in transit with HTTPS and encrypted at rest with AES-256.

This is not end-to-end encryption. We hold the keys, which means we are able to access the contents of a backup in order to run the service — for example to restore your training to a new phone, or to look into a problem you have asked us to fix. We do not use your backup for anything else, and we do not share it with your friends or anyone else.

You stay in control. You can turn cloud backup off, delete the cloud copy at any time from Settings → Cloud backup, or delete your account. Deleting the cloud copy removes every backup from our servers and leaves the workouts on your phone alone. Deleting your account immediately and permanently deletes the account and all cloud backups, and also removes the workout history from your phone. Export your history first (Settings → Export) if you want to keep a copy.

9. Friends, leagues, challenges and sharing

Social features are friends-only; there is no public profile page. Here is what other people can see and when:

Sharing a workout

Workouts appear in your friends' feed only when you tap Share on that workout. A share includes the date, duration, total sets, exercise names, and the number of personal records. Each share includes each exercise's set count and top weight × reps; an Include exercise details switch on the share card lets you leave them out of any single share. The app shows you exactly what will be visible before you share. You can remove a shared workout from the feed afterwards.

Cheers and reactions

Friends can cheer a shared workout, and you can cheer theirs. Cheers show your display name.

Weekly leagues

Leagues rank friends by the number of workouts in the week, not by weight lifted. Participation is on by default when you create an account. Turning off Participate in weekly leagues in Privacy & sharing removes you from current and future standings; turning it back on restores you.

Challenges

Challenges compare workout counts or personal-record counts with friends for a set period; only progress is shared, never your raw log. In a group challenge, members see each other's names and progress.

Showing when you are training

Off by default. When on, friends can see that you have a workout in progress. Turning it off clears that status immediately.

Being found by username

Off by default. When on, people can find your profile by typing your exact username. Friends can always add you with an invite you share.

Invite links

An invite is a short code in a link. So the person you send it to knows who it is from, the web page for your invite shows the code and your first name (the first word of your display name). If the app identifies you as under 18, no name is shown on your invite page or on the invite in the app; the page just says a friend invited them. It never shows your username, photo, level or anything about your workouts, and nothing on that page asks for or stores information about the person opening it. Your full profile is shown only inside the app after they sign in, and you become friends only when they tap Connect.

Blocking and reporting

You can block, mute or hide people. Blocking removes them from your feed and challenges. Reports you file are stored with your account identifier so we can act on them.

Unfriending removes the connection; things you already shared with that person may remain visible to them until you remove them. Deleting your account removes the data described in Delete your account.

10. Notifications

If you allow notifications, we send them through Apple Push Notification service using Amazon SNS. Social notifications carry a generic message (for example, “New activity from your friends”) and an opaque reference; the app fetches the details after you open it, so your friends' names and exercise details are not in the notification payload. Rest-timer and workout notifications are generated on your phone.

11. Diagnostics, “Help train Spotter” and beta testing

Help train Spotter (optional)

Signed-in users may be offered a choice to share data with us to help train Spotter. Nothing is shared until you choose, and every feature, including Premium, works without sharing. There is a single option:

• Workout and app data: workout dates and times, exercise names, sets, reps, weights and units, and effort ratings; plus app diagnostics: app and system versions, device model, crash and error details, and the text Spotter heard but didn’t understand. Never audio.

Past workouts are included. When you turn it on, it covers the workouts already on your device as well as future workouts while sharing stays on.

Why we use it: to help train Spotter to understand lifters’ abilities, build smarter custom workout plans, improve effort, fatigue and strength estimates, and find and fix problems. These improvements may also power future Premium workout insights. Custom workout plans and every other feature work without sharing.

How it is identified: shared data is stored under a random sharing ID, not your name or email. The sharing ID is linked to your account so that we can honour your choices and delete the data when you ask. This means the data is pseudonymous, not anonymous.

Who gets it: Spotter only. It is stored with Amazon Web Services in the United States as our service provider (section 14). We never sell it, share it with advertisers or data brokers, or use it for ads.

Your control: you can change your choices at any time in Settings → Privacy → Data sharing. Turning sharing off deletes the data shared; “Stop sharing and delete” removes all of it; deleting your account removes it too. Your workout history on your device is not affected.

Retention: shared data is kept for up to 24 months from when it was shared, and deleted sooner if you withdraw or delete your account.

Availability: this option is offered only in the United States, and not to users the app identifies as under 18.

App Store builds

App Store builds of Spotter contain no analytics SDKs and do not upload diagnostics to us unless you choose “Workout and app data” in “Help train Spotter” (above). Crash and hang reports may reach Apple (and be shared with us in aggregate through Apple's MetricKit and App Store Connect) depending on the “Share with app developers” setting on your iPhone.

TestFlight (beta) builds

Beta builds include a diagnostics uploader that is on by default and can be turned off in Settings. Crash and hang reports from beta builds are uploaded regardless of that switch. When it runs, at the end of a workout or after a crash, it uploads to Apple's CloudKit service (in a container we control):

• a random install identifier (not your account, name or email), app and OS versions;
• the session log, with spoken words removed (only the shape of each utterance is kept);
• a per-set export of the workout just completed (exercise, weight, reps, timing). Heart rate and calories are stripped.

Uploads are limited to 24 per day. Beta diagnostic records have no automatic expiration or fixed retention period. They remain stored until we manually delete them.

What older beta builds collected

From about 2026-06-08, beta builds uploaded session logs containing the text of what the speech recognizer heard. Because the microphone is open during a workout, that could include speech from people nearby, not only commands to Spotter. The Settings text at the time also described diagnostics as off by default, which was wrong for beta builds.

We previously said this stopped on 2026-09-13. That was wrong, and we corrected it on 2026-09-20. On 2026-09-13 we stopped recording what was heard as a transcript, but from that same date spoken words continued to reach uploads through a different field in the same log line — for example the exercise name spoken when starting a set. The change that was meant to end this collection introduced the path that continued it. We found this on 2026-09-20 and fixed it the same day.

Two things we cannot yet tell you, rather than guess at. We do not know which stored records contain spoken words, because reviewing them would require access we have deliberately not granted ourselves. And beta builds released before 2026-09-20 still carry the old behaviour, so a device keeps uploading in this way until it updates. We will update this page when we can say more precisely.

These historical logs have not yet been deleted. They are not used to train models. If you tested Spotter during this period and want the records from your device deleted, email support@spotterlifts.com from the phone in question so we can match its install identifier.

12. Support email

When you email us, your message is delivered to a Google Workspace mailbox that we monitor. For support, privacy or account-deletion requests, email support@spotterlifts.com. If you use “Email diagnostics” in the app, the message contains the text-only diagnostics you chose to send and goes to the same place. Support correspondence is stored in Google Workspace. Never send passwords or sign-in codes; we will never ask for them.

13. This website

spotterlifts.com sets no cookies, runs no analytics and loads nothing from third parties. It is served by Amazon CloudFront, which we have not configured to keep access logs. Invite pages (/invite/…) contain the invite code in the address and show the inviter’s first name (the first word of their display name), except for users the app identifies as under 18, whose name is not shown; they are marked not to be indexed, send no referrer and collect nothing about the visitor.

Do Not Track: because the site does not track visitors across sites or over time, it does not respond to browser “Do Not Track” signals; there is nothing to turn off.

14. Service providers

We use the following companies to run Spotter. They process data on our behalf and are not permitted to use it for their own purposes.

We do not sell personal information and have not done so. We do not share personal information for cross-context behavioral advertising. We may disclose information if required by law, to enforce our terms, or to protect the safety of users, and in connection with a merger or sale of the business (in which case this policy continues to apply to the data until it is changed with notice).

15. How long we keep data

16. Your choices and rights

• Use Spotter without an account. Everything in section 4 works signed out.
• Privacy & sharing in the app controls being found by username, weekly leagues and “training now”. Every share has its own details switch.
• Microphone, speech recognition, Apple Health and notifications are iPhone permissions you can change at any time in Settings.
• Cloud backup can be turned on or off in Settings → Cloud backup, and the same screen deletes the cloud copy without touching the workouts on your phone.
• Export your workout history from Settings in the app. Do this before deleting your account: deletion also removes the history on your phone.
• Delete your account in the app (Account → Delete Account) or by email. What is deleted, what is kept and how long it takes is on the Delete your account page.
• Access, correction and deletion requests can be sent to support@spotterlifts.com. Before providing access to, correcting or deleting personal data, we verify your identity and, where relevant, your authority to act for someone else. For account-related requests, we normally ask you to sign in again to your existing Spotter account or confirm control of an email address already verified on that account. If these methods are unavailable or the records are not linked to an account, contact support@spotterlifts.com so we can assess another reasonable verification method. We will not require you to create an account or email us your password or sign-in codes. We will not treat you differently for exercising these rights.

17. Security

Traffic between the app and our services is encrypted with HTTPS. Cloud backups are also encrypted at rest with AES-256; the keys are managed by us, not by you, so backups are not end-to-end encrypted (see section 8). Sign-in tokens are stored in the iPhone Keychain; the app keeps only a refresh token, never your password. No system is perfectly secure; if we learn of a breach that affects you we will notify you as the law requires.

18. Where data is processed

Our AWS backend and cloud backup storage are located in the United States, in AWS’s us-east-1 region.

19. Changes to this policy

We announce material changes by posting a notice on this page and updating its effective date. We provide any additional notice, and obtain any consent, required by applicable law before applying the relevant change.

20. Contact

DayTech Enterprises, LLC
support@spotterlifts.com