Privacy Policy

1. Information We Collect

Account information

Email address
Username and display name
Date of birth (used to enforce our 13+ age requirement)
Phone number (optional)
Password (stored as a one-way hash — we never see your plain-text password)

Profile information

Profile photo
Bio

Fitness and activity data

Workout logs (exercises, sets, reps, weight, duration)
Personal records
Workout streaks and total workout counts
Rest days and workout goals
Check-ins at gyms

Social content

Posts, check-ins, comments, and reactions you create
Friend and follow connections
Group memberships

Messages

Direct messages and group chat content between users

Reports and moderation

When you submit a report, we collect: the content type reported (post, check-in, or user), the reported item's identifier, the reason selected, and any additional note you provide
The identity of the reporter is kept confidential and is never shared with the reported user

Media

Photos and videos you upload to posts, check-ins, or your profile

Device information

Push notification token (to deliver notifications to your device)

2. How We Use Your Information

To create and manage your account
To display your profile and content to other users based on your privacy settings
To calculate and display workout streaks, personal records, and leaderboards
To deliver push notifications you have opted into
To enable messaging between users
To operate gym check-in and workout invite features
To enforce our Terms of Service and age requirements
To review reports of content or accounts that may violate our Terms of Service
To take moderation actions (content removal or account suspension) based on reported violations

We do not sell your personal data. We do not use your data for advertising.

3. Third-Party Services

Spottr uses the following third-party services that may process your data:

Google Sign-In — if you choose to sign in with Google, Google processes your authentication. See Google's Privacy Policy.
Expo (Expo Push Notifications) — your push notification token is routed through Expo's notification infrastructure. See Expo's Privacy Policy.

4. Your Privacy Controls

You can control who sees your data from within the app:

Profile visibility — Public, Friends Only, or Only Me
Workout post visibility — Public, Friends Only, or Only Me
Check-in visibility — control separately for friends, following, organizations, and gyms
Online status — show or hide whether you are active
Personal records — show or hide on your profile
Streak — show or hide on your profile
Friend requests — allow or disable incoming requests
Notifications — granular control over every notification type

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, your profile, posts, check-ins, workouts, messages, and all associated data are permanently deleted from our systems. Some residual data may remain in encrypted backups for up to 30 days before being overwritten.

6. Children's Privacy

Spottr requires users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

7. Account Deletion

You can permanently delete your account at any time from within the app: Profile → Edit Profile → Delete Account. This immediately and permanently removes your account and all associated data.

8. Security

Passwords are stored using one-way hashing. Authentication tokens are stored in your device's secure enclave (iOS Keychain / Android Keystore) using encrypted storage. All data is transmitted over HTTPS.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this policy or want to request data deletion, contact us at:
spottr.gymapp@gmail.com