Privacy Policy

Effective 7 July 2026

Spotter is built so that your training data stays yours. There are no Spotter servers, no accounts with us, no analytics, no advertising, and no data sales. This page describes exactly what the app stores and where it goes.

Data the app stores, and where

• Profile — an optional first name, body weight, units, training goal, experience level, schedule, equipment, and app preferences. Stored in a local database on your iPhone.
• Training data — your weekly plan, workout sessions, logged sets, and personal records. Stored in the same local database.
• iCloud backup (optional) — if you sign in with Apple, the app saves a snapshot of that database to the private CloudKit database of your own iCloud account, so you can restore after reinstalling or on a new phone. Apple's architecture makes this database readable only by you: the developer has no server and no ability to read, receive, or process it.
• Sign in with Apple — the app keeps only the opaque identifier Apple issues for your Apple ID, stored in the device keychain. It is used to key your iCloud backup, nothing else. We never see your email address; the app doesn't request it.

Apple Health (opt-in, off by default)

• Workouts — if you enable it, finished workouts are written to Apple Health so they count toward your activity.
• Body weight — if you enable it, the app reads your most recent body-weight sample to tune weight suggestions. This value is held in memory only: it is never written to the app's database, never synced to iCloud, and never leaves your device. Health data is governed by your permissions in the Health app and can be revoked there at any time.

The AI coach

All coaching — plan generation, workout reviews, chat — runs on-device using Apple's built-in foundation model (Apple Intelligence). Your questions, plans, and training history are processed on your iPhone and are not sent to us or to any third-party AI service. The coach works in airplane mode. It offers general training guidance, not medical advice.

Network requests

The app makes one kind of outbound request: exercise demonstration photos are loaded over HTTPS from a public content-delivery network (jsDelivr) hosting the open-source free-exercise-db dataset. As with any web request, the CDN sees your IP address in order to serve the image; no account data or training data is included. Images are cached on-device, so repeated views work offline.

What we don't do

• No analytics or crash-reporting SDKs.
• No advertising and no tracking of any kind.
• No selling, sharing, or transferring of your data to anyone.
• No Spotter servers — there is nothing for us to collect your data onto.

Export and deletion

• Export — Account → Export data produces a complete JSON copy of your data, shared via the iOS share sheet.
• Delete — Account → Delete account removes the iCloud snapshot from your iCloud, signs you out, and erases all local data. Reset data erases local data only. Both are immediate and irreversible. You can also detach the app from your Apple ID under iOS Settings → Apple ID → Sign-In & Security → Sign in with Apple.

Children

Spotter is not directed at children, and we do not knowingly collect information from anyone — child or adult.

Changes

If the app's data practices ever change, this page will be updated and the effective date revised before the change ships.

Contact

Questions about privacy: jici.liu@hotmail.com