Spotter

Privacy Policy

Last updated: February 22, 2026

Overview

Spotter (“we,” “us,” or “our”) is a fitness accountability app operated by Karl Larson. This Privacy Policy explains how we collect, use, and protect your information when you use the Spotter mobile application and related services.

We believe privacy policies should be readable, not just legal. So we wrote this one in plain English.

What Information We Collect

Account Information

When you create an account, we collect your email address, display name, username, and sex (male or female). Your sex is used to enforce same-sex social connections within the app.

Profile & Workout Photos

You may upload a profile photo, daily workout proof photos, and progress pictures. Workout photos are visible to your followers. Progress pictures can be set to public or private.

Workout Data

We store your workout dates, optional captions, effort levels (Light, Moderate, Hard), weekly goals, and weekly completion summaries.

Push Notification Tokens

If you enable push notifications, we store a device token to send you notifications when someone likes or comments on your workout post.

Usage Analytics

We use Vercel Analytics on our website, which collects anonymous, aggregate usage data. No cookies are used and no personal information is tracked.

How We Use Your Information

  • Power the accountability features — Your workout data, goals, and photos are shared with your followers and group members to enable the core accountability experience.
  • Send push notifications — We notify you when someone likes or comments on your posts.
  • Improve the service — Aggregate usage patterns help us understand how the app is used.

We do not sell your personal information to third parties. We do not serve ads. We do not share your data with data brokers.

How Your Data Is Stored

Your data is stored securely using Supabase, which provides PostgreSQL database hosting and file storage. Your photos are stored in Supabase Storage. All data is transmitted over encrypted connections (HTTPS/TLS).

Data Deletion

You can request deletion of your account and all associated data at any time by contacting us at team [at] beaspotter [dot] com. Upon request, we will delete your profile, workout posts, photos, comments, likes, and group memberships.

Children’s Privacy

Spotter is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

Third-Party Services

We use the following third-party services:

  • Supabase — Database, authentication, and file storage
  • Expo — Push notification delivery
  • Vercel — Website hosting and anonymous analytics

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or want to request data deletion, contact us at:

team [at] beaspotter [dot] com