Legal

Privacy Policy

Last updated: May 2026

Who we are

Spottr is a gym social app built to help people connect safely inside the same gym. We’re a small team. Questions? Email spottr.ph@gmail.com.

What we collect

  • Email address — if you join the waitlist or create an account.
  • Profile info — your name, short bio, and fitness details you choose to add.
  • Profile photo— optional. If you take a selfie via the in-app camera, the photo is stored in our hosting provider’s secure storage so other gym members can recognize you on the live list. We don’t access your photo library — only the camera, only when you ask. You can delete or replace the photo from your profile settings at any time. There is no facial recognition, no AI processing, and no use of your photo outside Spottr.
  • Check-in data — which gym you checked in to, and when.
  • Precise location— when you check in, your device’s GPS is used briefly to confirm you’re inside the gym. This reading is processed on your device and is never sent to our servers or stored. We only keep the gym you checked into and the time.
  • Status and vibe— your current vibe and whether you’re open to chat. This resets every session.
  • Messages — conversations you have with other members inside the app.
  • Women’s verification— if you request verification, we store only the outcome (approved or pending) and the date. We don’t currently collect identity documents or photos for this feature. If that ever changes, this policy will be updated and you’ll be notified.
  • Device info — IP address, device type, and app version. Used for security and debugging only.
  • Push notification tokens — if you allow notifications, we store the device token Apple or Google issues to us so we can send you message and check-in alerts. You can revoke this anytime in your device settings.

How we use it

We use your data to run Spottr — showing you who’s at your gym right now, letting you connect with members who are open to chat, and keeping your account secure. That’s it. We don’t use it for advertising. We don’t sell it or broker it to anyone.

How long we keep it

  • Profile and account — until you delete your account.
  • Check-in records — 12 months, then automatically deleted.
  • Messages — kept while both participants have active accounts. When either deletes, the thread is removed within 30 days.
  • Profile photo — kept until you remove it or delete your account.
  • Reports about another user — retained for 24 months to support moderation history, then deleted.
  • Push tokens — until you turn off notifications or uninstall the app.

Cookies and analytics

Our website doesn’t currently run any analytics or tracking scripts. We don’t use advertising cookies. The app itself doesn’t use third-party analytics SDKs. If we ever add analytics, this policy will be updated first.

Third-party services

We use Supabasefor database and authentication infrastructure. Your data is stored on their servers in Singapore (ap-southeast-1). We don’t share your data with any other third parties beyond what’s needed to operate the service.

Visibility

Spottr is designed to minimize your footprint. You’re only visible on the live member list when you’re actively checked in at a gym. The moment you leave, you disappear from the list. There is no passive presence, no public profile, and no searchable directory.

Your rights

You can delete your account and all associated data at any time from the app settings. Deleting your account removes your profile, check-in history, and messages. If you need help with this, email us and we’ll do it manually.

Contact

Questions or requests about your data: spottr.ph@gmail.com.